--- type: resource-type title: Table description: aws resource type AWS::DynamoDB::Table name: Table lexicon: aws resource_type: AWS::DynamoDB::Table --- `AWS::DynamoDB::Table`, a resource type of the aws lexicon. ## Properties - `KeySchema` (`any`, required): Specifies the attributes that make up the primary key for the table. The attributes in the ``KeySchema`` property must also be defined in the ``AttributeDefinitions`` property. - `Arn` (`string`, optional) - `AttributeDefinitions` (`Table_AttributeDefinition[]`, optional): A list of attributes that describe the key schema for the table and indexes. This property is required to create a DDB table. Update requires: [Some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt). Replacement if you edit an existing AttributeDefinition. - `BillingMode` (`string`, optional): Specify how you are charged for read and write throughput and how you manage capacity. Valid values include: + ``PAY_PER_REQUEST`` - We recommend using ``PAY_PER_REQUEST`` for most DynamoDB workloads. ``PAY_PER_REQUEST`` sets the billing mode to [On-demand capacity mode](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/on-demand-capacity-mode.html). + ``PROVISIONED`` - We recommend using ``PROVISIONED`` for steady workloads with predictable growth where capacity requirements can be reliably forecasted. ``PROVISIONED`` sets the billing mode to [Provisioned capacity mode](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/provisioned-capacity-mode.html). If not specified, the default is ``PROVISIONED``. - `ContributorInsightsSpecification` (`Table_ContributorInsightsSpecification`, optional): The settings used to specify whether to enable CloudWatch Contributor Insights for the table and define which events to monitor. - `DeletionProtectionEnabled` (`boolean`, optional): Determines if a table is protected from deletion. When enabled, the table cannot be deleted by any user or process. This setting is disabled by default. For more information, see [Using deletion protection](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/WorkingWithTables.Basics.html#WorkingWithTables.Basics.DeletionProtection) in the *Developer Guide*. - `GlobalSecondaryIndexes` (`Table_GlobalSecondaryIndex[]`, optional): Global secondary indexes to be created on the table. You can create up to 20 global secondary indexes. If you update a table to include a new global secondary index, CFNlong initiates the index creation and then proceeds with the stack update. CFNlong doesn't wait for the index to complete creation because the backfilling phase can take a long time, depending on the size of the table. You can't use the index or update the table until the index's status is ``ACTIVE``. You can track its status by using the DynamoDB [DescribeTable](https://docs.aws.amazon.com/cli/latest/reference/dynamodb/describe-table.html) command. If you add or delete an index during an update, we recommend that you don't update any other resources. If your stack fails to update and is rolled back while adding a new index, you must manually delete the index. Updates are not supported. The following are exceptions: + If you update either the contributor insights specification or the provisioned throughput values of global secondary indexes, you can update the table without interruption. + You can delete or add one global secondary index without interruption. If you do both in the same update (for example, by changing the index's logical ID), the update fails. - `ImportSourceSpecification` (`Table_ImportSourceSpecification`, optional): Specifies the properties of data being imported from the S3 bucket source to the" table. If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission. - `KinesisStreamSpecification` (`Table_KinesisStreamSpecification`, optional): The Kinesis Data Streams configuration for the specified table. - `LocalSecondaryIndexes` (`Table_LocalSecondaryIndex[]`, optional): Local secondary indexes to be created on the table. You can create up to 5 local secondary indexes. Each index is scoped to a given hash key value. The size of each hash key can be up to 10 gigabytes. - `OnDemandThroughput` (`Table_OnDemandThroughput`, optional): Sets the maximum number of read and write units for the specified on-demand table. If you use this property, you must specify ``MaxReadRequestUnits``, ``MaxWriteRequestUnits``, or both. - `PointInTimeRecoverySpecification` (`Table_PointInTimeRecoverySpecification`, optional): The settings used to enable point in time recovery. - `ProvisionedThroughput` (`Table_ProvisionedThroughput`, optional): Throughput for the specified table, which consists of values for ``ReadCapacityUnits`` and ``WriteCapacityUnits``. For more information about the contents of a provisioned throughput structure, see [Amazon DynamoDB Table ProvisionedThroughput](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_ProvisionedThroughput.html). If you set ``BillingMode`` as ``PROVISIONED``, you must specify this property. If you set ``BillingMode`` as ``PAY_PER_REQUEST``, you cannot specify this property. - `ResourcePolicy` (`Table_ResourcePolicy`, optional): An AWS resource-based policy document in JSON format that will be attached to the table. When you attach a resource-based policy while creating a table, the policy application is *strongly consistent*. The maximum size supported for a resource-based policy document is 20 KB. DynamoDB counts whitespaces when calculating the size of a policy against this limit. For a full list of all considerations that apply for resource-based policies, see [Resource-based policy considerations](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-considerations.html). You need to specify the ``CreateTable`` and ``PutResourcePolicy`` IAM actions for authorizing a user to create a table with a resource-based policy. - `SSESpecification` (`Table_SSESpecification`, optional): Specifies the settings to enable server-side encryption. - `StreamArn` (`string`, optional) - `StreamSpecification` (`Table_StreamSpecification`, optional): The settings for the DDB table stream, which captures changes to items stored in the table. Including this property in your CFNlong template automatically enables streaming. - `TableClass` (`string`, optional): The table class of the new table. Valid values are ``STANDARD`` and ``STANDARD_INFREQUENT_ACCESS``. - `TableName` (`string`, optional): A name for the table. If you don't specify a name, CFNlong generates a unique physical ID and uses that ID for the table name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html). If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name. - `Tags` (`Table_Tag[]`, optional): An array of key-value pairs to apply to this resource. For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html). - `TimeToLiveSpecification` (`Table_TimeToLiveSpecification`, optional): Specifies the Time to Live (TTL) settings for the table. For detailed information about the limits in DynamoDB, see [Limits in Amazon DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Limits.html) in the Amazon DynamoDB Developer Guide. - `WarmThroughput` (`Table_WarmThroughput`, optional): Represents the warm throughput (in read units per second and write units per second) for creating a table. ## Attributes - `Arn` - `StreamArn` ## Governed by - [WAW027](/rules/WAW027.md): DynamoDB table does not have point-in-time recovery enabled - [WAW030](/rules/WAW030.md): Missing DependsOn for known CloudFormation ordering patterns - [WAW059](/rules/WAW059.md): Wildcard Resource where the declared graph enumerates the touched set — tighten to the consumers' declared Arns - [WAW062](/rules/WAW062.md): Duplicate export name or explicit resource name within a template — fails at deploy time