@cloud-copilot/iam-data/data/conditionKeys/sso.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by the tags that are passed in the request",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by the tags associated with the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by the tag keys that are passed in the request",
    "type": "ArrayOfString"
  },
  "identitycenter:applicationarn": {
    "key": "identitycenter:ApplicationArn",
    "description": "Filters access by the ARN of the IAM Identity Center application",
    "type": "ARN"
  },
  "identitycenter:instancearn": {
    "key": "identitycenter:InstanceArn",
    "description": "Filters access by the ARN of the IAM Identity Center instance",
    "type": "ARN"
  },
  "sso:applicationaccount": {
    "key": "sso:ApplicationAccount",
    "description": "Filters access by the account which creates the application. This condition key is not supported for customer managed SAML applications",
    "type": "String"
  },
  "sso:primaryregion": {
    "key": "sso:PrimaryRegion",
    "description": "Filters access by the primary region of the IAM Identity Center instance",
    "type": "String"
  }
}