- Added attribute‑based access control (ABAC) for DynamoDB Streams, enabling IAM policies to use stream tags in conditions
- Supports up to 50 tags per stream for fine‑grained, tag‑based permission control such as environment‑based read access
- Available in all commercial and GovCloud regions at no additional cost