Creating a DynamoDB full access group using AWS IAM