Inspecting the network requests sent from the DynamoDB console to CloudWatch revealed that the metrics in the graph are:
Average(ProvisionedReadCapacityUnits)
Sum(ConsumedReadCapacityUnits)
But as @Shiplu Mokaddim has noticed in a comment on the other answer, plotting those two in CloudWatch does not result in a graph matching what you see in the DynamoDB console.
It turns out, that the DynamoDB console uses the Sum(ConsumedReadCapacityUnits)
to compute an average to show in the graph. This is done by dividing the values with the period in seconds, and it ca be replicated in the CloudWatch console using a math expression.
DynamoDB console

CloudWatch console

Bonus: after realizing how to pull these numbers, I was able to write a script that produces a list of provisioned and consumed capacity for all DynamoDB tables in my AWS account.