Lambda Durable Functions IAM action is CheckpointDurableExecution (singular)

When deploying Lambda Durable Functions via AWS CLI, I set lambda:CheckpointDurableExecutions (plural) in the IAM policy and got this error:

Output

User: arn:aws:sts::XXXX:assumed-role/lambda-durable-test-role/durable-basic-test
is not authorized to perform: lambda:CheckpointDurableExecution on resource: ...
because no identity-based policy allows the lambda:CheckpointDurableExecution action

The error message itself tells you the correct action name — CheckpointDurableExecution (singular). Fixing the policy to singular resolved it.

Correct policy

{
  "Action": [
    "lambda:CheckpointDurableExecution",
    "lambda:GetDurableExecutionState"
  ]
}

The Getting Started console flow auto-assigns the correct permissions, but when using CLI or IaC, watch the singular/plural on action names.