@actsecurity/iam-data 0.21.202608301

package/data/resourceTypes/ec2.json

@@ -0,0 +1,1512 @@
+{
+  "application-status-check": {
+    "key": "application-status-check",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:application-status-check/${ApplicationStatusCheckId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "capacity-block": {
+    "key": "capacity-block",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-block/${CapacityBlockId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "capacity-manager-data-export": {
+    "key": "capacity-manager-data-export",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-manager-data-export/${CapacityManagerDataExportId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "capacity-reservation": {
+    "key": "capacity-reservation",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/${CapacityReservationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:AvailabilityZone",
+      "ec2:AvailabilityZoneId",
+      "ec2:CapacityReservationFleet",
+      "ec2:CommitmentDuration",
+      "ec2:CreateDate",
+      "ec2:DestinationCapacityReservationId",
+      "ec2:EbsOptimized",
+      "ec2:EndDate",
+      "ec2:EndDateType",
+      "ec2:EphemeralStorage",
+      "ec2:InstanceCount",
+      "ec2:InstanceMatchCriteria",
+      "ec2:InstancePlatform",
+      "ec2:InstanceType",
+      "ec2:InterruptibleCapacityReservationId",
+      "ec2:InterruptionType",
+      "ec2:IsInterruptible",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:OutpostArn",
+      "ec2:PlacementGroup",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:SourceCapacityReservationId",
+      "ec2:TargetInstanceCount",
+      "ec2:Tenancy"
+    ]
+  },
+  "capacity-reservation-cancellation-quote": {
+    "key": "capacity-reservation-cancellation-quote",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-cancellation-quote/${CapacityReservationCancellationQuoteId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "capacity-reservation-fleet": {
+    "key": "capacity-reservation-fleet",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/${CapacityReservationFleetId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "carrier-gateway": {
+    "key": "carrier-gateway",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:carrier-gateway/${CarrierGatewayId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:Tenancy",
+      "ec2:Vpc"
+    ]
+  },
+  "certificate": {
+    "key": "certificate",
+    "arn": "arn:${Partition}:acm:${Region}:${Account}:certificate/${CertificateId}"
+  },
+  "client-vpn-endpoint": {
+    "key": "client-vpn-endpoint",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/${ClientVpnEndpointId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:ClientRootCertificateChainArn",
+      "ec2:CloudwatchLogGroupArn",
+      "ec2:CloudwatchLogStreamArn",
+      "ec2:DirectoryArn",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:SamlProviderArn",
+      "ec2:ServerCertificateArn"
+    ]
+  },
+  "coip-pool": {
+    "key": "coip-pool",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:coip-pool/${Ipv4PoolCoipId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "customer-gateway": {
+    "key": "customer-gateway",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:customer-gateway/${CustomerGatewayId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "declarative-policies-report": {
+    "key": "declarative-policies-report",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:declarative-policies-report/${DeclarativePoliciesReportId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "dedicated-host": {
+    "key": "dedicated-host",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:dedicated-host/${DedicatedHostId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:AutoPlacement",
+      "ec2:AvailabilityZone",
+      "ec2:HostRecovery",
+      "ec2:InstanceType",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:Quantity",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "dhcp-options": {
+    "key": "dhcp-options",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:dhcp-options/${DhcpOptionsId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:DhcpOptionsID",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "egress-only-internet-gateway": {
+    "key": "egress-only-internet-gateway",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:egress-only-internet-gateway/${EgressOnlyInternetGatewayId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "elastic-gpu": {
+    "key": "elastic-gpu",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:elastic-gpu/${ElasticGpuId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:ElasticGpuType",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "elastic-inference": {
+    "key": "elastic-inference",
+    "arn": "arn:${Partition}:elastic-inference:${Region}:${Account}:elastic-inference-accelerator/${AcceleratorId}"
+  },
+  "elastic-ip": {
+    "key": "elastic-ip",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/${AllocationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:AllocationId",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Domain",
+      "ec2:PublicIpAddress",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "export-image-task": {
+    "key": "export-image-task",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:export-image-task/${ExportImageTaskId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "export-instance-task": {
+    "key": "export-instance-task",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:export-instance-task/${ExportTaskId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "fleet": {
+    "key": "fleet",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:fleet/${FleetId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "fpga-image": {
+    "key": "fpga-image",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:fpga-image/${FpgaImageId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Owner",
+      "ec2:Public",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "group": {
+    "key": "group",
+    "arn": "arn:${Partition}:resource-groups:${Region}:${Account}:group/${GroupName}"
+  },
+  "host-reservation": {
+    "key": "host-reservation",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:host-reservation/${HostReservationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "image": {
+    "key": "image",
+    "arn": "arn:${Partition}:ec2:${Region}::image/${ImageId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:ImageID",
+      "ec2:ImageType",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:Owner",
+      "ec2:Public",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:RootDeviceType"
+    ]
+  },
+  "image-usage-report": {
+    "key": "image-usage-report",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:image-usage-report/${ImageUsageReportId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "import-image-task": {
+    "key": "import-image-task",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:import-image-task/${ImportImageTaskId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "import-snapshot-task": {
+    "key": "import-snapshot-task",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:import-snapshot-task/${ImportSnapshotTaskId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "instance": {
+    "key": "instance",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:instance/${InstanceId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:AvailabilityZone",
+      "ec2:AvailabilityZoneId",
+      "ec2:CpuOptionsAmdSevSnp",
+      "ec2:EbsOptimized",
+      "ec2:InstanceAutoRecovery",
+      "ec2:InstanceBandwidthWeighting",
+      "ec2:InstanceID",
+      "ec2:InstanceMarketType",
+      "ec2:InstanceMetadataTags",
+      "ec2:InstanceProfile",
+      "ec2:InstanceType",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:ManagedResourceOperator",
+      "ec2:MetadataHttpEndpoint",
+      "ec2:MetadataHttpPutResponseHopLimit",
+      "ec2:MetadataHttpTokens",
+      "ec2:NewInstanceProfile",
+      "ec2:PlacementGroup",
+      "ec2:ProductCode",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:RootDeviceType",
+      "ec2:Tenancy"
+    ]
+  },
+  "instance-connect-endpoint": {
+    "key": "instance-connect-endpoint",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:instance-connect-endpoint/${InstanceConnectEndpointId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:SubnetID"
+    ]
+  },
+  "instance-event-window": {
+    "key": "instance-event-window",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:instance-event-window/${InstanceEventWindowId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "internet-gateway": {
+    "key": "internet-gateway",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/${InternetGatewayId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:InternetGatewayID",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam": {
+    "key": "ipam",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam/${IpamId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-external-resource-verification-token": {
+    "key": "ipam-external-resource-verification-token",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-external-resource-verification-token/${IpamExternalResourceVerificationTokenId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-policy": {
+    "key": "ipam-policy",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-policy/${IpamPolicyId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-pool": {
+    "key": "ipam-pool",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-pool/${IpamPoolId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-pool-allocation": {
+    "key": "ipam-pool-allocation",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:ipam-pool-allocation/${IpamPoolAllocationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-prefix-list-resolver": {
+    "key": "ipam-prefix-list-resolver",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/${IpamPrefixListResolverId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-prefix-list-resolver-target": {
+    "key": "ipam-prefix-list-resolver-target",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver-target/${IpamPrefixListResolverTargetId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-resource-discovery": {
+    "key": "ipam-resource-discovery",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-resource-discovery/${IpamResourceDiscoveryId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-resource-discovery-association": {
+    "key": "ipam-resource-discovery-association",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-resource-discovery-association/${IpamResourceDiscoveryAssociationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-scope": {
+    "key": "ipam-scope",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-scope/${IpamScopeId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipv4pool-ec2": {
+    "key": "ipv4pool-ec2",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/${Ipv4PoolEc2Id}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipv6pool-ec2": {
+    "key": "ipv6pool-ec2",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:ipv6pool-ec2/${Ipv6PoolEc2Id}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "key-pair": {
+    "key": "key-pair",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:key-pair/${KeyPairName}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:KeyPairName",
+      "ec2:KeyPairType",
+      "ec2:LaunchTemplate",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "launch-template": {
+    "key": "launch-template",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:launch-template/${LaunchTemplateId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:ManagedResourceOperator",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "license-configuration": {
+    "key": "license-configuration",
+    "arn": "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:${LicenseConfigurationId}"
+  },
+  "local-gateway": {
+    "key": "local-gateway",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:local-gateway/${LocalGatewayId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "local-gateway-route-table": {
+    "key": "local-gateway-route-table",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/${LocalGatewayRoutetableId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "local-gateway-route-table-virtual-interface-group-association": {
+    "key": "local-gateway-route-table-virtual-interface-group-association",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-virtual-interface-group-association/${LocalGatewayRouteTableVirtualInterfaceGroupAssociationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "local-gateway-route-table-vpc-association": {
+    "key": "local-gateway-route-table-vpc-association",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-vpc-association/${LocalGatewayRouteTableVpcAssociationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "local-gateway-virtual-interface": {
+    "key": "local-gateway-virtual-interface",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface/${LocalGatewayVirtualInterfaceId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "local-gateway-virtual-interface-group": {
+    "key": "local-gateway-virtual-interface-group",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/${LocalGatewayVirtualInterfaceGroupId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "mac-modification-task": {
+    "key": "mac-modification-task",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:mac-modification-task/${MacModificationTaskId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "natgateway": {
+    "key": "natgateway",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:natgateway/${NatGatewayId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:Vpc"
+    ]
+  },
+  "network-acl": {
+    "key": "network-acl",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:network-acl/${NaclId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:NetworkAclID",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:Vpc"
+    ]
+  },
+  "network-insights-access-scope": {
+    "key": "network-insights-access-scope",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope/${NetworkInsightsAccessScopeId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "network-insights-access-scope-analysis": {
+    "key": "network-insights-access-scope-analysis",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope-analysis/${NetworkInsightsAccessScopeAnalysisId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "network-insights-analysis": {
+    "key": "network-insights-analysis",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:network-insights-analysis/${NetworkInsightsAnalysisId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "network-insights-path": {
+    "key": "network-insights-path",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:network-insights-path/${NetworkInsightsPathId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "network-interface": {
+    "key": "network-interface",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:network-interface/${NetworkInterfaceId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:AssociatePublicIpAddress",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:AuthorizedService",
+      "ec2:AuthorizedUser",
+      "ec2:AvailabilityZone",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:ManagedResourceOperator",
+      "ec2:NetworkInterfaceID",
+      "ec2:Permission",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:Subnet",
+      "ec2:Vpc"
+    ]
+  },
+  "outpost-lag": {
+    "key": "outpost-lag",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:outpost-lag/${OutpostLagId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "placement-group": {
+    "key": "placement-group",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:placement-group/${PlacementGroupName}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:PlacementGroupName",
+      "ec2:PlacementGroupStrategy",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "prefix-list": {
+    "key": "prefix-list",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:prefix-list/${PrefixListId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:IpamPrefixListResolverTargetId",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "replace-root-volume-task": {
+    "key": "replace-root-volume-task",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:replace-root-volume-task/${ReplaceRootVolumeTaskId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "reserved-instances": {
+    "key": "reserved-instances",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:reserved-instances/${ReservationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:AvailabilityZone",
+      "ec2:InstanceType",
+      "ec2:Region",
+      "ec2:ReservedInstancesOfferingType",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:Tenancy"
+    ]
+  },
+  "role": {
+    "key": "role",
+    "arn": "arn:${Partition}:iam::${Account}:role/${RoleNameWithPath}"
+  },
+  "route-server": {
+    "key": "route-server",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:route-server/${RouteServerId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "route-server-endpoint": {
+    "key": "route-server-endpoint",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:route-server-endpoint/${RouteServerEndpointId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:AvailabilityZone",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "route-server-peer": {
+    "key": "route-server-peer",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:route-server-peer/${RouteServerPeerId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:AvailabilityZone",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "route-table": {
+    "key": "route-table",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:route-table/${RouteTableId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:RouteTableID",
+      "ec2:Vpc"
+    ]
+  },
+  "secondary-interface": {
+    "key": "secondary-interface",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:secondary-interface/${SecondaryInterfaceId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:AvailabilityZone",
+      "ec2:AvailabilityZoneId",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "secondary-network": {
+    "key": "secondary-network",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:secondary-network/${SecondaryNetworkId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "secondary-subnet": {
+    "key": "secondary-subnet",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:secondary-subnet/${SecondarySubnetId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "security-group": {
+    "key": "security-group",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:security-group/${SecurityGroupId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:SecurityGroupID",
+      "ec2:Vpc"
+    ]
+  },
+  "security-group-rule": {
+    "key": "security-group-rule",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:security-group-rule/${SecurityGroupRuleId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "snapshot": {
+    "key": "snapshot",
+    "arn": "arn:${Partition}:ec2:${Region}::snapshot/${SnapshotId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Add/group",
+      "ec2:Add/userId",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:AvailabilityZone",
+      "ec2:Encrypted",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:Location",
+      "ec2:OutpostArn",
+      "ec2:Owner",
+      "ec2:ParentSnapshot",
+      "ec2:ParentVolume",
+      "ec2:ProductCode",
+      "ec2:Region",
+      "ec2:Remove/group",
+      "ec2:Remove/userId",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:SnapshotCoolOffPeriod",
+      "ec2:SnapshotID",
+      "ec2:SnapshotLockDuration",
+      "ec2:SnapshotTime",
+      "ec2:SourceAvailabilityZone",
+      "ec2:SourceOutpostArn",
+      "ec2:VolumeSize"
+    ]
+  },
+  "spot-fleet-request": {
+    "key": "spot-fleet-request",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:spot-fleet-request/${SpotFleetRequestId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "spot-instances-request": {
+    "key": "spot-instances-request",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:spot-instances-request/${SpotInstanceRequestId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "subnet": {
+    "key": "subnet",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:subnet/${SubnetId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:AvailabilityZone",
+      "ec2:AvailabilityZoneId",
+      "ec2:Ipv4IpamPoolId",
+      "ec2:Ipv6IpamPoolId",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:LaunchTemplate",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:SubnetID",
+      "ec2:Vpc"
+    ]
+  },
+  "subnet-cidr-reservation": {
+    "key": "subnet-cidr-reservation",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:subnet-cidr-reservation/${SubnetCidrReservationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "traffic-mirror-filter": {
+    "key": "traffic-mirror-filter",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/${TrafficMirrorFilterId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "traffic-mirror-filter-rule": {
+    "key": "traffic-mirror-filter-rule",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter-rule/${TrafficMirrorFilterRuleId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "traffic-mirror-session": {
+    "key": "traffic-mirror-session",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-session/${TrafficMirrorSessionId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "traffic-mirror-target": {
+    "key": "traffic-mirror-target",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-target/${TrafficMirrorTargetId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "transit-gateway": {
+    "key": "transit-gateway",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/${TransitGatewayId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:transitGatewayId"
+    ]
+  },
+  "transit-gateway-attachment": {
+    "key": "transit-gateway-attachment",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/${TransitGatewayAttachmentId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:transitGatewayAttachmentId"
+    ]
+  },
+  "transit-gateway-connect-peer": {
+    "key": "transit-gateway-connect-peer",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-connect-peer/${TransitGatewayConnectPeerId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:transitGatewayConnectPeerId"
+    ]
+  },
+  "transit-gateway-metering-policy": {
+    "key": "transit-gateway-metering-policy",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/${TransitGatewayMeteringPolicyId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:transitGatewayMeteringPolicyId"
+    ]
+  },
+  "transit-gateway-multicast-domain": {
+    "key": "transit-gateway-multicast-domain",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/${TransitGatewayMulticastDomainId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:transitGatewayMulticastDomainId"
+    ]
+  },
+  "transit-gateway-policy-table": {
+    "key": "transit-gateway-policy-table",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/${TransitGatewayPolicyTableId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:transitGatewayPolicyTableId"
+    ]
+  },
+  "transit-gateway-route-table": {
+    "key": "transit-gateway-route-table",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/${TransitGatewayRouteTableId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:transitGatewayRouteTableId"
+    ]
+  },
+  "transit-gateway-route-table-announcement": {
+    "key": "transit-gateway-route-table-announcement",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table-announcement/${TransitGatewayRouteTableAnnouncementId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:transitGatewayRouteTableAnnouncementId"
+    ]
+  },
+  "verified-access-endpoint": {
+    "key": "verified-access-endpoint",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/${VerifiedAccessEndpointId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "verified-access-endpoint-target": {
+    "key": "verified-access-endpoint-target",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint-target/${VerifiedAccessEndpointTargetId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "verified-access-group": {
+    "key": "verified-access-group",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/${VerifiedAccessGroupId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "verified-access-instance": {
+    "key": "verified-access-instance",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/${VerifiedAccessInstanceId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "verified-access-policy": {
+    "key": "verified-access-policy",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:verified-access-policy/${VerifiedAccessPolicyId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "verified-access-trust-provider": {
+    "key": "verified-access-trust-provider",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:verified-access-trust-provider/${VerifiedAccessTrustProviderId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "volume": {
+    "key": "volume",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:volume/${VolumeId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:AvailabilityZone",
+      "ec2:AvailabilityZoneId",
+      "ec2:Encrypted",
+      "ec2:IsLaunchTemplateResource",
+      "ec2:KmsKeyId",
+      "ec2:LaunchTemplate",
+      "ec2:ManagedResourceOperator",
+      "ec2:ParentSnapshot",
+      "ec2:ParentVolume",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:VolumeID",
+      "ec2:VolumeInitializationRate",
+      "ec2:VolumeIops",
+      "ec2:VolumeSize",
+      "ec2:VolumeThroughput",
+      "ec2:VolumeType"
+    ]
+  },
+  "vpc": {
+    "key": "vpc",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc/${VpcId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Ipv4IpamPoolId",
+      "ec2:Ipv6IpamPoolId",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:Tenancy",
+      "ec2:VpcID"
+    ]
+  },
+  "vpc-block-public-access-exclusion": {
+    "key": "vpc-block-public-access-exclusion",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-block-public-access-exclusion/${VpcBlockPublicAccessExclusionId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "vpc-encryption-control": {
+    "key": "vpc-encryption-control",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-encryption-control/${VpcEncryptionControlId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "vpc-endpoint": {
+    "key": "vpc-endpoint",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/${VpcEndpointId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:VpceMultiRegion",
+      "ec2:VpcePrivateDnsPreference",
+      "ec2:VpcePrivateDnsSpecifiedDomains",
+      "ec2:VpceServiceName",
+      "ec2:VpceServiceOwner",
+      "ec2:VpceServiceRegion"
+    ]
+  },
+  "vpc-endpoint-connection": {
+    "key": "vpc-endpoint-connection",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-connection/${VpcEndpointConnectionId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "vpc-endpoint-service": {
+    "key": "vpc-endpoint-service",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/${VpcEndpointServiceId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:VpceMultiRegion",
+      "ec2:VpceServicePrivateDnsName",
+      "ec2:VpceServiceRegion",
+      "ec2:VpceSupportedRegion"
+    ]
+  },
+  "vpc-endpoint-service-permission": {
+    "key": "vpc-endpoint-service-permission",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service-permission/${VpcEndpointServicePermissionId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "vpc-flow-log": {
+    "key": "vpc-flow-log",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-flow-log/${VpcFlowLogId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "vpc-peering-connection": {
+    "key": "vpc-peering-connection",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/${VpcPeeringConnectionId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:AccepterVpc",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:RequesterVpc",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:VpcPeeringConnectionID"
+    ]
+  },
+  "vpn-concentrator": {
+    "key": "vpn-concentrator",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpn-concentrator/${VpnConcentratorId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "vpn-connection": {
+    "key": "vpn-connection",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/${VpnConnectionId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:AuthenticationType",
+      "ec2:DPDTimeoutSeconds",
+      "ec2:GatewayType",
+      "ec2:IKEVersions",
+      "ec2:InsideTunnelCidr",
+      "ec2:InsideTunnelIpv6Cidr",
+      "ec2:Phase1DHGroup",
+      "ec2:Phase1EncryptionAlgorithms",
+      "ec2:Phase1IntegrityAlgorithms",
+      "ec2:Phase1LifetimeSeconds",
+      "ec2:Phase2DHGroup",
+      "ec2:Phase2EncryptionAlgorithms",
+      "ec2:Phase2IntegrityAlgorithms",
+      "ec2:Phase2LifetimeSeconds",
+      "ec2:Region",
+      "ec2:RekeyFuzzPercentage",
+      "ec2:RekeyMarginTimeSeconds",
+      "ec2:ReplayWindowSizePackets",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:RoutingType"
+    ]
+  },
+  "vpn-connection-device-type": {
+    "key": "vpn-connection-device-type",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection-device-type/${VpnConnectionDeviceTypeId}",
+    "conditionKeys": [
+      "ec2:Region"
+    ]
+  },
+  "vpn-gateway": {
+    "key": "vpn-gateway",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/${VpnGatewayId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  }
+}