AmazonServiceException: User is not authorized to perform: dynamodb:DescribeTable Status Code: 400; Error Code: AccessDeniedException

Worked with an Amazon engineer and it turns out the problem was in the policy configuration:

"dynamodb: *"

should be

"dynamodb:*"

It's amazing what a space can do.