Amazon DynamoDB now supports resource-based policies