@cloud-copilot/iam-data/data/conditionKeys/rds.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by the set of tag key-value pairs in the request",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by the set of tag key-value pairs attached to the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by the set of tag keys in the request",
    "type": "ArrayOfString"
  },
  "rds:backuptarget": {
    "key": "rds:BackupTarget",
    "description": "Filters access by the type of backup target. One of: region, outposts",
    "type": "String"
  },
  "rds:copyoptiongroup": {
    "key": "rds:CopyOptionGroup",
    "description": "Filters access by the value that specifies whether the CopyDBSnapshot action requires copying the DB option group",
    "type": "Bool"
  },
  "rds:databaseclass": {
    "key": "rds:DatabaseClass",
    "description": "Filters access by the type of DB instance class",
    "type": "String"
  },
  "rds:databaseengine": {
    "key": "rds:DatabaseEngine",
    "description": "Filters access by the database engine. For possible values refer to the engine parameter in CreateDBInstance API",
    "type": "String"
  },
  "rds:databasename": {
    "key": "rds:DatabaseName",
    "description": "Filters access by the user-defined name of the database on the DB instance",
    "type": "String"
  },
  "rds:endpointtype": {
    "key": "rds:EndpointType",
    "description": "Filters access by the type of the endpoint. One of: READER, WRITER, CUSTOM",
    "type": "String"
  },
  "rds:managemasteruserpassword": {
    "key": "rds:ManageMasterUserPassword",
    "description": "Filters access by the value that specifies whether RDS manages master user password in AWS Secrets Manager for the DB instance or cluster",
    "type": "Bool"
  },
  "rds:multiaz": {
    "key": "rds:MultiAz",
    "description": "Filters access by the value that specifies whether the DB instance runs in multiple Availability Zones. To indicate that the DB instance is using Multi-AZ, specify true",
    "type": "Bool"
  },
  "rds:piops": {
    "key": "rds:Piops",
    "description": "Filters access by the value that contains the number of Provisioned IOPS (PIOPS) that the instance supports. To indicate a DB instance that does not have PIOPS enabled, specify 0",
    "type": "Numeric"
  },
  "rds:storageencrypted": {
    "key": "rds:StorageEncrypted",
    "description": "Filters access by the value that specifies whether the DB instance storage should be encrypted. To enforce storage encryption, specify true",
    "type": "Bool"
  },
  "rds:storagesize": {
    "key": "rds:StorageSize",
    "description": "Filters access by the storage volume size (in GB)",
    "type": "Numeric"
  },
  "rds:tenantdatabasename": {
    "key": "rds:TenantDatabaseName",
    "description": "Filters access by the tenant database name in CreateTenantDatabase and by the new tenant database name in ModifyTenantDatabase",
    "type": "String"
  },
  "rds:vpc": {
    "key": "rds:Vpc",
    "description": "Filters access by the value that specifies whether the DB instance runs in an Amazon Virtual Private Cloud (Amazon VPC). To indicate that the DB instance runs in an Amazon VPC, specify true",
    "type": "Bool"
  },
  "rds:cluster-pg-tag/${tagkey}": {
    "key": "rds:cluster-pg-tag/${TagKey}",
    "description": "Filters access by the tag attached to a DB cluster parameter group",
    "type": "String"
  },
  "rds:cluster-snapshot-tag/${tagkey}": {
    "key": "rds:cluster-snapshot-tag/${TagKey}",
    "description": "Filters access by the tag attached to a DB cluster snapshot",
    "type": "String"
  },
  "rds:cluster-tag/${tagkey}": {
    "key": "rds:cluster-tag/${TagKey}",
    "description": "Filters access by the tag attached to a DB cluster",
    "type": "String"
  },
  "rds:db-tag/${tagkey}": {
    "key": "rds:db-tag/${TagKey}",
    "description": "Filters access by the tag attached to a DB instance",
    "type": "String"
  },
  "rds:es-tag/${tagkey}": {
    "key": "rds:es-tag/${TagKey}",
    "description": "Filters access by the tag attached to an event subscription",
    "type": "String"
  },
  "rds:og-tag/${tagkey}": {
    "key": "rds:og-tag/${TagKey}",
    "description": "Filters access by the tag attached to a DB option group",
    "type": "String"
  },
  "rds:pg-tag/${tagkey}": {
    "key": "rds:pg-tag/${TagKey}",
    "description": "Filters access by the tag attached to a DB parameter group",
    "type": "String"
  },
  "rds:req-tag/${tagkey}": {
    "key": "rds:req-tag/${TagKey}",
    "description": "Filters access by the set of tag keys and values that can be used to tag a resource",
    "type": "String"
  },
  "rds:ri-tag/${tagkey}": {
    "key": "rds:ri-tag/${TagKey}",
    "description": "Filters access by the tag attached to a reserved DB instance",
    "type": "String"
  },
  "rds:secgrp-tag/${tagkey}": {
    "key": "rds:secgrp-tag/${TagKey}",
    "description": "Filters access by the tag attached to a DB security group",
    "type": "String"
  },
  "rds:snapshot-tag/${tagkey}": {
    "key": "rds:snapshot-tag/${TagKey}",
    "description": "Filters access by the tag attached to a DB snapshot",
    "type": "String"
  },
  "rds:subgrp-tag/${tagkey}": {
    "key": "rds:subgrp-tag/${TagKey}",
    "description": "Filters access by the tag attached to a DB subnet group",
    "type": "String"
  }
}