@cloud-copilot/iam-data/data/conditionKeys/bedrock.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by creating requests based on the allowed set of values for each of the mandatory tags",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by having actions based on the tag value associated with the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
    "type": "ArrayOfString"
  },
  "bedrock:guardrailidentifier": {
    "key": "bedrock:GuardrailIdentifier",
    "description": "Filters access by the GuardrailIdentifier containing the GuardrailArn or the GuardrailArn:NumericVersion",
    "type": "ARN"
  },
  "bedrock:inferenceprofilearn": {
    "key": "bedrock:InferenceProfileArn",
    "description": "Filters access by the specified inference profile",
    "type": "ARN"
  },
  "bedrock:inlineagentname": {
    "key": "bedrock:InlineAgentName",
    "description": "Filters access by the Inline Agent Names, this will be used in InvokeInlineAgent API names",
    "type": "String"
  },
  "bedrock:promptrouterarn": {
    "key": "bedrock:PromptRouterArn",
    "description": "Filters access by the specified prompt router",
    "type": "ARN"
  },
  "bedrock:thirdpartyknowledgebasecredentialssecretarn": {
    "key": "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn",
    "description": "Filters access by the secretArn containing the credentials of the third party platform",
    "type": "ARN"
  }
}