@cloud-copilot/iam-data/data/conditionKeys/lambda.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by the tags that are passed in the request",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by the tags associated with the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by the tag keys that are passed in the request",
    "type": "ArrayOfString"
  },
  "lambda:codesigningconfigarn": {
    "key": "lambda:CodeSigningConfigArn",
    "description": "Filters access by the ARN of an AWS Lambda code signing config",
    "type": "ARN"
  },
  "lambda:eventsourcetoken": {
    "key": "lambda:EventSourceToken",
    "description": "Filters access by the ID from a non-AWS event source configured for the AWS Lambda function",
    "type": "String"
  },
  "lambda:functionarn": {
    "key": "lambda:FunctionArn",
    "description": "Filters access by the ARN of an AWS Lambda function",
    "type": "ARN"
  },
  "lambda:functionurlauthtype": {
    "key": "lambda:FunctionUrlAuthType",
    "description": "Filters access by authorization type specified in request. Available during CreateFunctionUrlConfig, UpdateFunctionUrlConfig, DeleteFunctionUrlConfig, GetFunctionUrlConfig, ListFunctionUrlConfig, AddPermission and RemovePermission operations",
    "type": "String"
  },
  "lambda:layer": {
    "key": "lambda:Layer",
    "description": "Filters access by the ARN of a version of an AWS Lambda layer",
    "type": "ArrayOfString"
  },
  "lambda:principal": {
    "key": "lambda:Principal",
    "description": "Filters access by restricting the AWS service or account that can invoke a function",
    "type": "String"
  },
  "lambda:securitygroupids": {
    "key": "lambda:SecurityGroupIds",
    "description": "Filters access by the ID of security groups configured for the AWS Lambda function",
    "type": "ArrayOfString"
  },
  "lambda:sourcefunctionarn": {
    "key": "lambda:SourceFunctionArn",
    "description": "Filters access by the ARN of the AWS Lambda function from which the request originated",
    "type": "ARN"
  },
  "lambda:subnetids": {
    "key": "lambda:SubnetIds",
    "description": "Filters access by the ID of subnets configured for the AWS Lambda function",
    "type": "ArrayOfString"
  },
  "lambda:vpcids": {
    "key": "lambda:VpcIds",
    "description": "Filters access by the ID of the VPC configured for the AWS Lambda function",
    "type": "String"
  }
}