@cloud-copilot/iam-data/data/conditionPatterns.json

AWS IAM Data

{
  "account": {
    "account:AccountResourceOrgTags/.+?": "account:AccountResourceOrgTags/${TagKey}"
  },
  "codebuild": {
    "codebuild:environment.environmentVariables/.+?.value": "codebuild:environment.environmentVariables/${name}.value",
    "codebuild:fileSystemLocations/.+?.location": "codebuild:fileSystemLocations/${identifier}.location",
    "codebuild:fileSystemLocations/.+?.type": "codebuild:fileSystemLocations/${identifier}.type",
    "codebuild:secondaryArtifacts/.+?.bucketOwnerAccess": "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
    "codebuild:secondaryArtifacts/.+?.encryptionDisabled": "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
    "codebuild:secondaryArtifacts/.+?.location": "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
    "codebuild:secondarySources/.+?.auth.resource": "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
    "codebuild:secondarySources/.+?.auth.type": "codebuild:secondarySources/${sourceIdentifier}.auth.type",
    "codebuild:secondarySources/.+?.buildStatusConfig.context": "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
    "codebuild:secondarySources/.+?.buildStatusConfig.targetUrl": "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
    "codebuild:secondarySources/.+?.buildspec": "codebuild:secondarySources/${sourceIdentifier}.buildspec",
    "codebuild:secondarySources/.+?.insecureSsl": "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
    "codebuild:secondarySources/.+?.location": "codebuild:secondarySources/${sourceIdentifier}.location"
  },
  "iam": {
    "iam:ResourceTag/.+?": "iam:ResourceTag/${TagKey}"
  },
  "datapipeline": {
    "datapipeline:Tag/.+?": "datapipeline:Tag/${TagKey}"
  },
  "dms": {
    "dms:assessment-run-tag/.+?": "dms:assessment-run-tag/${TagKey}",
    "dms:cert-tag/.+?": "dms:cert-tag/${TagKey}",
    "dms:data-migration-tag/.+?": "dms:data-migration-tag/${TagKey}",
    "dms:data-provider-tag/.+?": "dms:data-provider-tag/${TagKey}",
    "dms:endpoint-tag/.+?": "dms:endpoint-tag/${TagKey}",
    "dms:es-tag/.+?": "dms:es-tag/${TagKey}",
    "dms:individual-assessment-tag/.+?": "dms:individual-assessment-tag/${TagKey}",
    "dms:instance-profile-tag/.+?": "dms:instance-profile-tag/${TagKey}",
    "dms:migration-project-tag/.+?": "dms:migration-project-tag/${TagKey}",
    "dms:rep-tag/.+?": "dms:rep-tag/${TagKey}",
    "dms:replication-config-tag/.+?": "dms:replication-config-tag/${TagKey}",
    "dms:req-tag/.+?": "dms:req-tag/${TagKey}",
    "dms:subgrp-tag/.+?": "dms:subgrp-tag/${TagKey}",
    "dms:task-tag/.+?": "dms:task-tag/${TagKey}"
  },
  "elasticloadbalancing": {
    "elasticloadbalancing:ResourceTag/.+?": "elasticloadbalancing:ResourceTag/${TagKey}"
  },
  "iotanalytics": {
    "iotanalytics:ResourceTag/.+?": "iotanalytics:ResourceTag/${TagKey}"
  },
  "iot": {
    "iot:CommandExecutionParameterBoolean/.+?": "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
    "iot:CommandExecutionParameterNumber/.+?": "iot:CommandExecutionParameterNumber/${CommandParameterName}",
    "iot:CommandExecutionParameterString/.+?": "iot:CommandExecutionParameterString/${CommandParameterName}"
  },
  "kms": {
    "kms:EncryptionContext:.+?": "kms:EncryptionContext:${EncryptionContextKey}"
  },
  "license-manager": {
    "license-manager:ResourceTag/.+?": "license-manager:ResourceTag/${TagKey}"
  },
  "ram": {
    "ram:ResourceTag/.+?": "ram:ResourceTag/${TagKey}"
  },
  "securityhub": {
    "securityhub:ASFFSyntaxPath/.+?": "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}",
    "securityhub:OCSFSyntaxPath/.+?": "securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}"
  },
  "sts": {
    "sts:RequestContext/.+?": "sts:RequestContext/${ContextKey}"
  },
  "ssm": {
    "ssm:resourceTag/.+?": "ssm:resourceTag/${TagKey}"
  },
  "connect": {
    "connect:PrimaryAttribute/.+?": "connect:PrimaryAttribute/${PrimaryAttribute}",
    "connect:SearchTag/.+?": "connect:SearchTag/${TagKey}"
  },
  "autoscaling": {
    "autoscaling:ResourceTag/.+?": "autoscaling:ResourceTag/${TagKey}"
  },
  "imagebuilder": {
    "imagebuilder:CreatedResourceTag/.+?": "imagebuilder:CreatedResourceTag/${TagKey}"
  },
  "ec2": {
    "ec2:ResourceTag/.+?": "ec2:ResourceTag/${TagKey}",
    "ec2:Attribute/.+?": "ec2:Attribute/${AttributeName}"
  },
  "ecr-public": {
    "ecr-public:ResourceTag/.+?": "ecr-public:ResourceTag/${TagKey}"
  },
  "ecr": {
    "ecr:ResourceTag/.+?": "ecr:ResourceTag/${TagKey}"
  },
  "ecs": {
    "ecs:ResourceTag/.+?": "ecs:ResourceTag/${TagKey}"
  },
  "eks": {
    "eks:loggingType/.+?": "eks:loggingType/${type}"
  },
  "elasticmapreduce": {
    "elasticmapreduce:RequestTag/.+?": "elasticmapreduce:RequestTag/${TagKey}",
    "elasticmapreduce:ResourceTag/.+?": "elasticmapreduce:ResourceTag/${TagKey}"
  },
  "rds": {
    "rds:cluster-pg-tag/.+?": "rds:cluster-pg-tag/${TagKey}",
    "rds:cluster-snapshot-tag/.+?": "rds:cluster-snapshot-tag/${TagKey}",
    "rds:cluster-tag/.+?": "rds:cluster-tag/${TagKey}",
    "rds:db-tag/.+?": "rds:db-tag/${TagKey}",
    "rds:es-tag/.+?": "rds:es-tag/${TagKey}",
    "rds:og-tag/.+?": "rds:og-tag/${TagKey}",
    "rds:pg-tag/.+?": "rds:pg-tag/${TagKey}",
    "rds:req-tag/.+?": "rds:req-tag/${TagKey}",
    "rds:ri-tag/.+?": "rds:ri-tag/${TagKey}",
    "rds:secgrp-tag/.+?": "rds:secgrp-tag/${TagKey}",
    "rds:snapshot-tag/.+?": "rds:snapshot-tag/${TagKey}",
    "rds:subgrp-tag/.+?": "rds:subgrp-tag/${TagKey}"
  },
  "s3express": {
    "s3express:AccessPointTag/.+?": "s3express:AccessPointTag/${TagKey}",
    "s3express:BucketTag/.+?": "s3express:BucketTag/${TagKey}"
  },
  "s3tables": {
    "s3tables:TableBucketTag/.+?": "s3tables:TableBucketTag/${TagKey}"
  },
  "s3vectors": {
    "s3vectors:VectorBucketTag/.+?": "s3vectors:VectorBucketTag/${TagKey}"
  },
  "s3-outposts": {
    "s3-outposts:ExistingObjectTag/.+?": "s3-outposts:ExistingObjectTag/<key>",
    "s3-outposts:RequestObjectTag/.+?": "s3-outposts:RequestObjectTag/<key>"
  },
  "s3": {
    "s3:AccessPointTag/.+?": "s3:AccessPointTag/${TagKey}",
    "s3:BucketTag/.+?": "s3:BucketTag/${TagKey}",
    "s3:ExistingObjectTag/.+?": "s3:ExistingObjectTag/<key>",
    "s3:RequestObjectTag/.+?": "s3:RequestObjectTag/<key>"
  },
  "sagemaker": {
    "sagemaker:CurrentCustomerMetadataProperties/.+?": "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
    "sagemaker:CustomerMetadataProperties/.+?": "sagemaker:CustomerMetadataProperties/${MetadataKey}",
    "sagemaker:ResourceTag/.+?": "sagemaker:ResourceTag/${TagKey}",
    "sagemaker:SearchVisibilityCondition/.+?": "sagemaker:SearchVisibilityCondition/${FilterKey}"
  },
  "vpc-lattice-svcs": {
    "vpc-lattice-svcs:RequestHeader/.+?": "vpc-lattice-svcs:RequestHeader/${HeaderName}",
    "vpc-lattice-svcs:RequestQueryString/.+?": "vpc-lattice-svcs:RequestQueryString/${QueryStringKey}"
  }
}