<documentation>: Update IAM requirement (#1466)

* update iam requirement

* move ListTables in correct section

docs/operations/storage/README.md

@@ -64,22 +64,21 @@ When using DynamoDB for the index, the following permissions are needed:
 * `dynamodb:UntagResource`
 * `dynamodb:UpdateItem`
 * `dynamodb:UpdateTable`
+* `dynamodb:CreateTable`
+* `dynamodb:DeleteTable` (if `table_manager.retention_period` is more than 0s)
 
 Resources: `arn:aws:dynamodb:<aws_region>:<aws_account_id>:table/<prefix>*`
 
-#### AutoScaling 
-
-If you enable autoscaling from table manager, the following permissions are needed:
+* `dynamodb:ListTables`
 
-##### Deletion
+Resources: `*`
 
-* `dynamodb:DeleteTable`
+#### AutoScaling 
 
-Resources: `arn:aws:dynamodb:<aws_region>:<aws_account_id>:table/<prefix>*`
+If you enable autoscaling from table manager, the following permissions are needed:
 
 ##### Application Autoscaling
 
-* `dynamodb:ListTables`
 * `application-autoscaling:DescribeScalableTargets`
 * `application-autoscaling:DescribeScalingPolicies`
 * `application-autoscaling:RegisterScalableTarget`