@cloud-copilot/iam-data/data/conditionKeys/cloudformation.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by the tags that are passed in the request",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by the tags associated with the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by the tag keys that are passed in the request",
    "type": "ArrayOfString"
  },
  "cloudformation:changesetname": {
    "key": "cloudformation:ChangeSetName",
    "description": "Filters access by an AWS CloudFormation change set name. Use to control which change sets IAM users can execute or delete",
    "type": "String"
  },
  "cloudformation:createaction": {
    "key": "cloudformation:CreateAction",
    "description": "Filters access by the name of a resource-mutating API action. Use to control which APIs IAM users can use to add or remove tags on a stack or stack set",
    "type": "String"
  },
  "cloudformation:importresourcetypes": {
    "key": "cloudformation:ImportResourceTypes",
    "description": "Filters access by the template resource types, such as AWS::EC2::Instance. Use to control which resource types IAM users can work with when they want to import a resource into a stack",
    "type": "String"
  },
  "cloudformation:resourcetypes": {
    "key": "cloudformation:ResourceTypes",
    "description": "Filters access by the template resource types, such as AWS::EC2::Instance. Use to control which resource types IAM users can work with when they create or update a stack",
    "type": "ArrayOfString"
  },
  "cloudformation:rolearn": {
    "key": "cloudformation:RoleArn",
    "description": "Filters access by the ARN of an IAM service role. Use to control which service role IAM users can use to work with stacks or change sets",
    "type": "ARN"
  },
  "cloudformation:stackpolicyurl": {
    "key": "cloudformation:StackPolicyUrl",
    "description": "Filters access by an Amazon S3 stack policy URL. Use to control which stack policies IAM users can associate with a stack during a create or update stack action",
    "type": "String"
  },
  "cloudformation:targetregion": {
    "key": "cloudformation:TargetRegion",
    "description": "Filters access by stack set target region. Use to control which regions IAM users can use when they create or update stack sets",
    "type": "ArrayOfString"
  },
  "cloudformation:templateurl": {
    "key": "cloudformation:TemplateUrl",
    "description": "Filters access by an Amazon S3 template URL. Use to control which templates IAM users can use when they create or update stacks",
    "type": "String"
  }
}