Problem

When running feast apply with a DynamoDB online store, the IAM policy requires dynamodb:TagResource permission. This is not documented in the official Feast DynamoDB setup guide.

Symptom

feast apply fails silently or throws an access denied error with no clear explanation pointing to the missing TagResource permission.

Workaround

Remove tags from FeatureView definitions entirely. Once tags are stripped, feast apply succeeds without needing dynamodb:TagResource.

Environment

• Feast V2
• DynamoDB online store (us-east-1)
• Scoped IAM user (not root)
• 3 FeatureViews, 2 FeatureServices

Suggested Fix

Add dynamodb:TagResource to the required IAM permissions list in:

• DynamoDB online store documentation
• Minimum IAM policy example in the docs

Spent ~2hrs debugging this. Easy fix for docs team.

References

Confirmed working after removing tags: feast apply succeeded, materialize_incremental ran clean, offline/online parity PASS.