@cloud-copilot/iam-data 0.0.1

package/data/conditionKeys/kms.json

@@ -0,0 +1,197 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access to the specified AWS KMS operations based on both the key and value of the tag in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access to the specified AWS KMS operations based on tags assigned to the AWS KMS key",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access to the specified AWS KMS operations based on tag keys in the request",
+    "type": "ArrayOfString"
+  },
+  "kms:BypassPolicyLockoutSafetyCheck": {
+    "key": "kms:BypassPolicyLockoutSafetyCheck",
+    "description": "Filters access to the CreateKey and PutKeyPolicy operations based on the value of the BypassPolicyLockoutSafetyCheck parameter in the request",
+    "type": "Bool"
+  },
+  "kms:CallerAccount": {
+    "key": "kms:CallerAccount",
+    "description": "Filters access to specified AWS KMS operations based on the AWS account ID of the caller. You can use this condition key to allow or deny access to all IAM users and roles in an AWS account in a single policy statement",
+    "type": "String"
+  },
+  "kms:CustomerMasterKeySpec": {
+    "key": "kms:CustomerMasterKeySpec",
+    "description": "The kms:CustomerMasterKeySpec condition key is deprecated. Instead, use the kms:KeySpec condition key",
+    "type": "String"
+  },
+  "kms:CustomerMasterKeyUsage": {
+    "key": "kms:CustomerMasterKeyUsage",
+    "description": "The kms:CustomerMasterKeyUsage condition key is deprecated. Instead, use the kms:KeyUsage condition key",
+    "type": "String"
+  },
+  "kms:DataKeyPairSpec": {
+    "key": "kms:DataKeyPairSpec",
+    "description": "Filters access to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext operations based on the value of the KeyPairSpec parameter in the request",
+    "type": "String"
+  },
+  "kms:EncryptionAlgorithm": {
+    "key": "kms:EncryptionAlgorithm",
+    "description": "Filters access to encryption operations based on the value of the encryption algorithm in the request",
+    "type": "String"
+  },
+  "kms:EncryptionContext:${EncryptionContextKey}": {
+    "key": "kms:EncryptionContext:${EncryptionContextKey}",
+    "description": "Filters access to a symmetric AWS KMS key based on the encryption context in a cryptographic operation. This condition evaluates the key and value in each key-value encryption context pair",
+    "type": "String"
+  },
+  "kms:EncryptionContextKeys": {
+    "key": "kms:EncryptionContextKeys",
+    "description": "Filters access to a symmetric AWS KMS key based on the encryption context in a cryptographic operation. This condition key evaluates only the key in each key-value encryption context pair",
+    "type": "ArrayOfString"
+  },
+  "kms:ExpirationModel": {
+    "key": "kms:ExpirationModel",
+    "description": "Filters access to the ImportKeyMaterial operation based on the value of the ExpirationModel parameter in the request",
+    "type": "String"
+  },
+  "kms:GrantConstraintType": {
+    "key": "kms:GrantConstraintType",
+    "description": "Filters access to the CreateGrant operation based on the grant constraint in the request",
+    "type": "String"
+  },
+  "kms:GrantIsForAWSResource": {
+    "key": "kms:GrantIsForAWSResource",
+    "description": "Filters access to the CreateGrant operation when the request comes from a specified AWS service",
+    "type": "Bool"
+  },
+  "kms:GrantOperations": {
+    "key": "kms:GrantOperations",
+    "description": "Filters access to the CreateGrant operation based on the operations in the grant",
+    "type": "ArrayOfString"
+  },
+  "kms:GranteePrincipal": {
+    "key": "kms:GranteePrincipal",
+    "description": "Filters access to the CreateGrant operation based on the grantee principal in the grant",
+    "type": "String"
+  },
+  "kms:KeyAgreementAlgorithm": {
+    "key": "kms:KeyAgreementAlgorithm",
+    "description": "Filters access to the DeriveSharedSecret operation based on the value of the KeyAgreementAlgorithm parameter in the request",
+    "type": "String"
+  },
+  "kms:KeyOrigin": {
+    "key": "kms:KeyOrigin",
+    "description": "Filters access to an API operation based on the Origin property of the AWS KMS key created by or used in the operation. Use it to qualify authorization of the CreateKey operation or any operation that is authorized for a KMS key",
+    "type": "String"
+  },
+  "kms:KeySpec": {
+    "key": "kms:KeySpec",
+    "description": "Filters access to an API operation based on the KeySpec property of the AWS KMS key that is created by or used in the operation. Use it to qualify authorization of the CreateKey operation or any operation that is authorized for a KMS key resource",
+    "type": "String"
+  },
+  "kms:KeyUsage": {
+    "key": "kms:KeyUsage",
+    "description": "Filters access to an API operation based on the KeyUsage property of the AWS KMS key created by or used in the operation. Use it to qualify authorization of the CreateKey operation or any operation that is authorized for a KMS key resource",
+    "type": "String"
+  },
+  "kms:MacAlgorithm": {
+    "key": "kms:MacAlgorithm",
+    "description": "Filters access to the GenerateMac and VerifyMac operations based on the MacAlgorithm parameter in the request",
+    "type": "String"
+  },
+  "kms:MessageType": {
+    "key": "kms:MessageType",
+    "description": "Filters access to the Sign and Verify operations based on the value of the MessageType parameter in the request",
+    "type": "String"
+  },
+  "kms:MultiRegion": {
+    "key": "kms:MultiRegion",
+    "description": "Filters access to an API operation based on the MultiRegion property of the AWS KMS key created by or used in the operation. Use it to qualify authorization of the CreateKey operation or any operation that is authorized for a KMS key resource",
+    "type": "Bool"
+  },
+  "kms:MultiRegionKeyType": {
+    "key": "kms:MultiRegionKeyType",
+    "description": "Filters access to an API operation based on the MultiRegionKeyType property of the AWS KMS key created by or used in the operation. Use it to qualify authorization of the CreateKey operation or any operation that is authorized for a KMS key resource",
+    "type": "String"
+  },
+  "kms:PrimaryRegion": {
+    "key": "kms:PrimaryRegion",
+    "description": "Filters access to the UpdatePrimaryRegion operation based on the value of the PrimaryRegion parameter in the request",
+    "type": "String"
+  },
+  "kms:ReEncryptOnSameKey": {
+    "key": "kms:ReEncryptOnSameKey",
+    "description": "Filters access to the ReEncrypt operation when it uses the same AWS KMS key that was used for the Encrypt operation",
+    "type": "Bool"
+  },
+  "kms:RecipientAttestation:ImageSha384": {
+    "key": "kms:RecipientAttestation:ImageSha384",
+    "description": "Filters access to the Decrypt, DeriveSharedSecret, GenerateDataKey, GenerateDataKeyPair, and GenerateRandom operations based on the image hash in the attestation document in the request",
+    "type": "String"
+  },
+  "kms:RecipientAttestation:PCR": {
+    "key": "kms:RecipientAttestation:PCR",
+    "description": "Filters access to the Decrypt, GenerateDataKey, and GenerateRandom operations based on the platform configuration registers (PCRs) in the attestation document in the request",
+    "type": "String"
+  },
+  "kms:ReplicaRegion": {
+    "key": "kms:ReplicaRegion",
+    "description": "Filters access to the ReplicateKey operation based on the value of the ReplicaRegion parameter in the request",
+    "type": "String"
+  },
+  "kms:RequestAlias": {
+    "key": "kms:RequestAlias",
+    "description": "Filters access to cryptographic operations, DescribeKey, and GetPublicKey based on the alias in the request",
+    "type": "String"
+  },
+  "kms:ResourceAliases": {
+    "key": "kms:ResourceAliases",
+    "description": "Filters access to specified AWS KMS operations based on aliases associated with the AWS KMS key",
+    "type": "ArrayOfString"
+  },
+  "kms:RetiringPrincipal": {
+    "key": "kms:RetiringPrincipal",
+    "description": "Filters access to the CreateGrant operation based on the retiring principal in the grant",
+    "type": "String"
+  },
+  "kms:RotationPeriodInDays": {
+    "key": "kms:RotationPeriodInDays",
+    "description": "Filters access to the EnableKeyRotation operation based on the value of the RotationPeriodInDays parameter in the request",
+    "type": "Numeric"
+  },
+  "kms:ScheduleKeyDeletionPendingWindowInDays": {
+    "key": "kms:ScheduleKeyDeletionPendingWindowInDays",
+    "description": "Filters access to the ScheduleKeyDeletion operation based on the value of the PendingWindowInDays parameter in the request",
+    "type": "Numeric"
+  },
+  "kms:SigningAlgorithm": {
+    "key": "kms:SigningAlgorithm",
+    "description": "Filters access to the Sign and Verify operations based on the signing algorithm in the request",
+    "type": "String"
+  },
+  "kms:ValidTo": {
+    "key": "kms:ValidTo",
+    "description": "Filters access to the ImportKeyMaterial operation based on the value of the ValidTo parameter in the request. You can use this condition key to allow users to import key material only when it expires by the specified date",
+    "type": "Date"
+  },
+  "kms:ViaService": {
+    "key": "kms:ViaService",
+    "description": "Filters access when a request made on the principal's behalf comes from a specified AWS service",
+    "type": "String"
+  },
+  "kms:WrappingAlgorithm": {
+    "key": "kms:WrappingAlgorithm",
+    "description": "Filters access to the GetParametersForImport operation based on the value of the WrappingAlgorithm parameter in the request",
+    "type": "String"
+  },
+  "kms:WrappingKeySpec": {
+    "key": "kms:WrappingKeySpec",
+    "description": "Filters access to the GetParametersForImport operation based on the value of the WrappingKeySpec parameter in the request",
+    "type": "String"
+  }
+}

package/data/conditionKeys/lakeformation.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/lambda.json

@@ -0,0 +1,67 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
+  "lambda:CodeSigningConfigArn": {
+    "key": "lambda:CodeSigningConfigArn",
+    "description": "Filters access by the ARN of an AWS Lambda code signing config",
+    "type": "ARN"
+  },
+  "lambda:EventSourceToken": {
+    "key": "lambda:EventSourceToken",
+    "description": "Filters access by the ID from a non-AWS event source configured for the AWS Lambda function",
+    "type": "String"
+  },
+  "lambda:FunctionArn": {
+    "key": "lambda:FunctionArn",
+    "description": "Filters access by the ARN of an AWS Lambda function",
+    "type": "ARN"
+  },
+  "lambda:FunctionUrlAuthType": {
+    "key": "lambda:FunctionUrlAuthType",
+    "description": "Filters access by authorization type specified in request. Available during CreateFunctionUrlConfig, UpdateFunctionUrlConfig, DeleteFunctionUrlConfig, GetFunctionUrlConfig, ListFunctionUrlConfig, AddPermission and RemovePermission operations",
+    "type": "String"
+  },
+  "lambda:Layer": {
+    "key": "lambda:Layer",
+    "description": "Filters access by the ARN of a version of an AWS Lambda layer",
+    "type": "ArrayOfString"
+  },
+  "lambda:Principal": {
+    "key": "lambda:Principal",
+    "description": "Filters access by restricting the AWS service or account that can invoke a function",
+    "type": "String"
+  },
+  "lambda:SecurityGroupIds": {
+    "key": "lambda:SecurityGroupIds",
+    "description": "Filters access by the ID of security groups configured for the AWS Lambda function",
+    "type": "ArrayOfString"
+  },
+  "lambda:SourceFunctionArn": {
+    "key": "lambda:SourceFunctionArn",
+    "description": "Filters access by the ARN of the AWS Lambda function from which the request originated",
+    "type": "ARN"
+  },
+  "lambda:SubnetIds": {
+    "key": "lambda:SubnetIds",
+    "description": "Filters access by the ID of subnets configured for the AWS Lambda function",
+    "type": "ArrayOfString"
+  },
+  "lambda:VpcIds": {
+    "key": "lambda:VpcIds",
+    "description": "Filters access by the ID of the VPC configured for the AWS Lambda function",
+    "type": "String"
+  }
+}

package/data/conditionKeys/launchwizard.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access based on the presence of tag key-value pairs in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access based on tag key-value pairs attached to the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access based on the presence of tag keys in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/lex.json

@@ -0,0 +1,32 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access based on the tags in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags attached to a Lex resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access based on the set of tag keys in the request",
+    "type": "ArrayOfString"
+  },
+  "lex:associatedIntents": {
+    "key": "lex:associatedIntents",
+    "description": "Enables you to control access based on the intents included in the request",
+    "type": "ArrayOfString"
+  },
+  "lex:associatedSlotTypes": {
+    "key": "lex:associatedSlotTypes",
+    "description": "Enables you to control access based on the slot types included in the request",
+    "type": "ArrayOfString"
+  },
+  "lex:channelType": {
+    "key": "lex:channelType",
+    "description": "Enables you to control access based on the channel type included in the request",
+    "type": "String"
+  }
+}

package/data/conditionKeys/license-manager-linux-subscriptions.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs attached to the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/license-manager-user-subscriptions.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/license-manager.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
+  "license-manager:ResourceTag/${TagKey}": {
+    "key": "license-manager:ResourceTag/${TagKey}",
+    "description": "Filters access by the tag key-value pairs attached to the resource",
+    "type": "String"
+  }
+}

package/data/conditionKeys/lightsail.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/logs.json

@@ -0,0 +1,27 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
+  "logs:DeliveryDestinationResourceArn": {
+    "key": "logs:DeliveryDestinationResourceArn",
+    "description": "Filters access by the Log Destination ARN passed in the request",
+    "type": "ARN"
+  },
+  "logs:LogGeneratingResourceArns": {
+    "key": "logs:LogGeneratingResourceArns",
+    "description": "Filters access by the Log Generating Resource ARNs passed in the request",
+    "type": "ArrayOfARN"
+  }
+}

package/data/conditionKeys/lookoutequipment.json

@@ -0,0 +1,22 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the presence of tag key-value pairs in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs attached to the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the presence of tag keys in the request",
+    "type": "ArrayOfString"
+  },
+  "lookoutequipment:IsImportingData": {
+    "key": "lookoutequipment:IsImportingData",
+    "description": "Filters access by the import strategy of underlying data",
+    "type": "Bool"
+  }
+}

package/data/conditionKeys/lookoutmetrics.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/lookoutvision.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/m2.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/machinelearning.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/macie2.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the presence of tag keys in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/managedblockchain-query.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/managedblockchain.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters actions based on the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters actions based on the tags associated with an Amazon Managed Blockchain resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters actions based on the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/mapcredits.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/marketplacecommerceanalytics.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/mechanicalturk.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/mediaconnect.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/mediaconvert.json

@@ -0,0 +1,32 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs attached to the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by tag keys in the request",
+    "type": "ArrayOfString"
+  },
+  "mediaconvert:HttpInputsAllowed": {
+    "key": "mediaconvert:HttpInputsAllowed",
+    "description": "Filters access by an HTTP input policy present in the account",
+    "type": "Bool"
+  },
+  "mediaconvert:HttpsInputsAllowed": {
+    "key": "mediaconvert:HttpsInputsAllowed",
+    "description": "Filters access by an HTTPS input policy present in the account",
+    "type": "Bool"
+  },
+  "mediaconvert:S3InputsAllowed": {
+    "key": "mediaconvert:S3InputsAllowed",
+    "description": "Filters access by an S3 input policy present in the account",
+    "type": "Bool"
+  }
+}

package/data/conditionKeys/mediaimport.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/medialive.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/mediapackage-vod.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters actions based on the presence of tag key-value pairs in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters actions based on tag key-value pairs attached to the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters actions based on the presence of tag keys in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/mediapackage.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tag for a MediaPackage request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tag for a MediaPackage resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys for a MediaPackage resource or request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/mediapackagev2.json

@@ -0,0 +1,17 @@
+{
+  "aws:RequestTag/${TagKey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:ResourceTag/${TagKey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tags associated with the resource",
+    "type": "String"
+  },
+  "aws:TagKeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}