fix(dynamodb): fix SID for grants on multi-account global tables

[LeeroyHannigan]

SID's must conform to ASCII uppercase letters (A-Z), lowercase letters (a-z), and numbers (0-9)

❌ The following Statement Ids are invalid: AllowMultiAccountReplicaAssociation-490940935144, (Service: DynamoDb, Status Code: 400, Request ID: ****) (SDK Attempt Count: 1)" (RequestToken: 7f8e0bfd-7b13-7b53-a5cf-10de2154de30, HandlerErrorCode: InvalidRequest)

Description of changes

The Sid element supports ASCII uppercase letters (A-Z), lowercase letters (a-z), and numbers (0-9).

Changed the SID in multiAccountReplicationTo in table-grants.ts to remove the -, which is forbidden.

Description of how you validated changes

Unit tests succeed

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[Abogical]

Snapshots needs to be updated.

Pull request has been modified.

[github-actions]

⚠️ Experimental Feature: This security report is currently in experimental phase. Results may include false positives and the rules are being actively refined.
Please try merge from main to avoid findings unrelated to the PR.

---

	Tests	Passed ✅	Skipped	Failed
Security Guardian Results	24 ran	24 passed

Test	Result
No test annotations available

• View Security Guardian Results

[github-actions]

⚠️ Experimental Feature: This security report is currently in experimental phase. Results may include false positives and the rules are being actively refined.
Please try merge from main to avoid findings unrelated to the PR.

---

	Tests	Passed ✅	Skipped	Failed
Security Guardian Results with resolved templates	24 ran	24 passed

Test	Result
No test annotations available

• View Security Guardian Results with resolved templates

[aws-cdk-automation]

(This review is outdated)

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Merge Queue Status

Rule: default-squash

---

• ✅ Entered queue — 2026-02-23 15:47 UTC
• ✅ Checks passed · in-place
• ✅ Merged — 2026-02-23 16:19 UTC · at 1ae25da42bf1ac46b63405fb03c939520e69366f

This pull request spent 31 minutes 30 seconds in the queue, including 31 minutes 19 seconds running CI.

Required conditions to merge

• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • fix(dynamodb): fix SID for grants on multi-account global tables #37057
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • fix(dynamodb): fix SID for grants on multi-account global tables #37057
• any of [🛡 GitHub branch protection]:
  • check-success = validate-pr
  • check-neutral = validate-pr
  • check-skipped = validate-pr
• any of [🛡 GitHub branch protection]:
  • check-success = build
  • check-neutral = build
  • check-skipped = build

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.