Validating the DynamoDB access controls using the AWS IAM policy simulator