ADD updates to prevent race conditions under concurrent requestsAmazonDynamoDBFullAccess with a table-scoped least-privilege IAM policypytest unit tests against a mocked DynamoDB backend on every push, gating the SAM build and deploy so only passing code reaches AWS