@cloud-copilot/iam-data/data/conditionKeys/eks.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by a key that is present in the request the user makes to the EKS service",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by a tag key and value pair",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by the list of all the tag key names present in the request the user makes to the EKS service",
    "type": "ArrayOfString"
  },
  "eks:accessentrytype": {
    "key": "eks:accessEntryType",
    "description": "Filters access by the access entry type present in the access entry requests the user makes to the EKS service",
    "type": "String"
  },
  "eks:accessscope": {
    "key": "eks:accessScope",
    "description": "Filters access by the accessScope present in the associate / disassociate access policy requests the user makes to the EKS service",
    "type": "String"
  },
  "eks:authenticationmode": {
    "key": "eks:authenticationMode",
    "description": "Filters access by the authenticationMode present in the create / update cluster request",
    "type": "String"
  },
  "eks:blockstorageenabled": {
    "key": "eks:blockStorageEnabled",
    "description": "Filters access by the block storage enabled parameter in the create / update cluster request",
    "type": "Bool"
  },
  "eks:bootstrapclustercreatoradminpermissions": {
    "key": "eks:bootstrapClusterCreatorAdminPermissions",
    "description": "Filters access by the bootstrapClusterCreatorAdminPermissions present in the create cluster request",
    "type": "Bool"
  },
  "eks:bootstrapselfmanagedaddons": {
    "key": "eks:bootstrapSelfManagedAddons",
    "description": "Filters access by the bootstrapSelfManagedAddons present in the create cluster request",
    "type": "Bool"
  },
  "eks:clientid": {
    "key": "eks:clientId",
    "description": "Filters access by the clientId present in the associateIdentityProviderConfig request the user makes to the EKS service",
    "type": "String"
  },
  "eks:clustername": {
    "key": "eks:clusterName",
    "description": "Filters access by the clusterName present in the access entry requests the user makes to the EKS service",
    "type": "String"
  },
  "eks:computeconfigenabled": {
    "key": "eks:computeConfigEnabled",
    "description": "Filters access by the compute config enabled parameter in the create / update cluster request",
    "type": "Bool"
  },
  "eks:controlplanescalingtier": {
    "key": "eks:controlPlaneScalingTier",
    "description": "Filters access by the control plane scaling tier in the create / update cluster request",
    "type": "String"
  },
  "eks:deletionprotection": {
    "key": "eks:deletionProtection",
    "description": "Filters access by the deletion protection setting in the create / update cluster request",
    "type": "Bool"
  },
  "eks:elasticloadbalancingenabled": {
    "key": "eks:elasticLoadBalancingEnabled",
    "description": "Filters access by the elastic load balancing enabled parameter in the create / update cluster request",
    "type": "Bool"
  },
  "eks:encryptionconfigproviderkeyarns": {
    "key": "eks:encryptionConfigProviderKeyArns",
    "description": "Filters access by the KMS key ARNs in the create cluster / Associate Encryption Config request",
    "type": "ArrayOfARN"
  },
  "eks:endpointprivateaccess": {
    "key": "eks:endpointPrivateAccess",
    "description": "Filters access by the endpoint private access setting in the create / update cluster request",
    "type": "Bool"
  },
  "eks:endpointpublicaccess": {
    "key": "eks:endpointPublicAccess",
    "description": "Filters access by the endpoint public access setting in the create / update cluster request",
    "type": "Bool"
  },
  "eks:issuerurl": {
    "key": "eks:issuerUrl",
    "description": "Filters access by the issuerUrl present in the associateIdentityProviderConfig request the user makes to the EKS service",
    "type": "String"
  },
  "eks:kubernetesgroups": {
    "key": "eks:kubernetesGroups",
    "description": "Filters access by the kubernetesGroups present in the access entry requests the user makes to the EKS service",
    "type": "ArrayOfString"
  },
  "eks:kubernetesversion": {
    "key": "eks:kubernetesVersion",
    "description": "Filters access by the Kubernetes version in the create cluster/ update cluster version request",
    "type": "String"
  },
  "eks:loggingtype/${type}": {
    "key": "eks:loggingType/${type}",
    "description": "Filters access by the cluster logging enabled and type parameter in the create / update cluster request",
    "type": "Bool"
  },
  "eks:namespaces": {
    "key": "eks:namespaces",
    "description": "Filters access by the namespaces present in the associate / disassociate access policy requests the user makes to the EKS service",
    "type": "ArrayOfString"
  },
  "eks:policyarn": {
    "key": "eks:policyArn",
    "description": "Filters access by the policyArn present in the access entry requests the user makes to the EKS service",
    "type": "ARN"
  },
  "eks:principalarn": {
    "key": "eks:principalArn",
    "description": "Filters access by the principalArn present in the access entry requests requests the user makes to the EKS service",
    "type": "ARN"
  },
  "eks:supporttype": {
    "key": "eks:supportType",
    "description": "Filters access by the supportType present in the create / update cluster request",
    "type": "String"
  },
  "eks:username": {
    "key": "eks:username",
    "description": "Filters access by the Kubernetes username present in the access entry requests the user makes to the EKS service",
    "type": "String"
  },
  "eks:zonalshiftenabled": {
    "key": "eks:zonalShiftEnabled",
    "description": "Filters access by the zonal shift enabled setting in the create / update cluster request",
    "type": "Bool"
  }
}