{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "ReadProcurementTables",
      "Effect": "Allow",
      "Action": [
        "dynamodb:GetItem",
        "dynamodb:Query",
        "dynamodb:Scan",
        "dynamodb:DescribeTable"
      ],
      "Resource": [
        "arn:aws:dynamodb:us-east-1:011934824531:table/purchase-orders",
        "arn:aws:dynamodb:us-east-1:011934824531:table/purchase-orders/index/*",
        "arn:aws:dynamodb:us-east-1:011934824531:table/verified-sites",
        "arn:aws:dynamodb:us-east-1:011934824531:table/verified-sites/index/*",
        "arn:aws:dynamodb:us-east-1:011934824531:table/pending-site-review",
        "arn:aws:dynamodb:us-east-1:011934824531:table/pending-site-review/index/*",
        "arn:aws:dynamodb:us-east-1:011934824531:table/WorkOrders",
        "arn:aws:dynamodb:us-east-1:011934824531:table/WorkOrders/index/*",
        "arn:aws:dynamodb:us-east-1:011934824531:table/WorkOrderComments",
        "arn:aws:dynamodb:us-east-1:011934824531:table/WorkOrderComments/index/*"
      ],
      "Condition": {
        "DateLessThan": {
          "aws:CurrentTime": "2026-08-23T00:00:00Z"
        }
      }
    },
    {
      "Sid": "DecryptTableCmkViaDynamo",
      "Effect": "Allow",
      "Action": "kms:Decrypt",
      "Resource": "arn:aws:kms:us-east-1:011934824531:key/be5fa4cb-c546-40fe-a13d-c7bec79f5d12",
      "Condition": {
        "StringEquals": {
          "kms:ViaService": "dynamodb.us-east-1.amazonaws.com"
        },
        "DateLessThan": {
          "aws:CurrentTime": "2026-08-23T00:00:00Z"
        }
      }
    }
  ]
}