@cloud-copilot/iam-data/data/conditionKeys/cloudwatch.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters actions based on the allowed set of values for each of the tags",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters actions based on tag-value associated with the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters actions based on the presence of mandatory tags in the request",
    "type": "ArrayOfString"
  },
  "cloudwatch:alarmactions": {
    "key": "cloudwatch:AlarmActions",
    "description": "Filters actions based on defined alarm actions",
    "type": "ArrayOfString"
  },
  "cloudwatch:namespace": {
    "key": "cloudwatch:namespace",
    "description": "Filters actions based on the presence of optional namespace values",
    "type": "String"
  },
  "cloudwatch:requestinsightruleloggroups": {
    "key": "cloudwatch:requestInsightRuleLogGroups",
    "description": "Filters actions based on the Log Groups specified in an Insight Rule",
    "type": "ArrayOfString"
  },
  "cloudwatch:requestmanagedresourcearns": {
    "key": "cloudwatch:requestManagedResourceARNs",
    "description": "Filters access by the Resource ARNs specified in a managed Insight Rule",
    "type": "ArrayOfARN"
  }
}