Advanced AI Prompt for AWS Lambda Execution Role with DynamoDB Access

Act as an AWS Serverless Security Specialist. Generate a least-privilege IAM execution role policy for an AWS Lambda function. The function requires authorization to perform `dynamodb:Query` and `dynamodb:UpdateItem` operations on the DynamoDB table [TABLE_ARN]. Critically, implement a Fine-Grained Access Control (FGAC) `Condition` block restricting the `dynamodb:LeadingKeys` context key, ensuring the Lambda can *only* access or modify items where the partition key exactly matches '[PARTITION_KEY_VALUE]'. Furthermore, include strict permissions for CloudWatch Logs (`logs:CreateLogStream`, `logs:PutLogEvents`), explicitly limiting the `Resource` ARN to the function's own specific log group in [REGION], preventing cross-function log pollution.