--- exclude: - aws-dynamodb-table-customer-key # We don't care about default keys, encryption is fine