@cloud-copilot/iam-data/data/conditionKeys/cognito-identity.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by tag key-value pairs in the request",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by tag key-value pairs attached to the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by a key that is present in the request",
    "type": "ArrayOfString"
  },
  "cognito-identity-auth:accountid": {
    "key": "cognito-identity-auth:AccountId",
    "description": "Filters access by the owning AWS account ID for identity pool authenticated users. Applies to unauthenticated (public) API operations",
    "type": "String"
  },
  "cognito-identity-auth:identitypoolarn": {
    "key": "cognito-identity-auth:IdentityPoolArn",
    "description": "Filters access by the identity pool ID for a given authenticated-user identity ID. Applies to unauthenticated (public) API operations",
    "type": "ARN"
  },
  "cognito-identity-unauth:accountid": {
    "key": "cognito-identity-unauth:AccountId",
    "description": "Filters access by the owning AWS account ID of an identity pool for identity pool guest users. Applies to unauthenticated (public) API operations",
    "type": "String"
  },
  "cognito-identity-unauth:identitypoolarn": {
    "key": "cognito-identity-unauth:IdentityPoolArn",
    "description": "Filters access by the identity pool ID for a given guest-user identity ID. Applies to unauthenticated (public) API operations",
    "type": "ARN"
  },
  "cognito-identity:identitypoolarn": {
    "key": "cognito-identity:IdentityPoolArn",
    "description": "Filters access by the identity pool ID for a given identity ID for DeleteIdentities and DescribeIdentity",
    "type": "ARN"
  }
}