Only a single IAM role statement works

For some reason, the second statement isn’t showing up in the IAM role at all:

functions:
  searchIndexer:
    handler: indexer.handler
    name: ${self:provider.stage}-searchIndexer
    description: Indexes things in Algolia
    memorySize: 1024
    timeout: 10
    iamRoleStatements:
      - Effect: Allow
        Action:
          - dynamodb:ListStreams
          - dynamodb:DescribeStream
          - dynamodb:GetShardIterator
          - dynamodb:GetRecords
        Resource:
          Fn::GetAtt: [TracksTable, StreamArn]
      - Effect: Allow
        Action:
          - dynamodb:UpdateItem
        Resource:
          Fn::GetAtt: [TracksTable, Arn]

I’m not getting any validation errors of any kind. But the statement is definitely not showing up in the role.