{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by the presence of tag key-value pairs in the request",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by the presence of tag key-value pairs attached to the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by the presence of tag keys in the request",
    "type": "ArrayOfString"
  },
  "route53profiles:firewallrulegrouppriority": {
    "key": "route53profiles:FirewallRuleGroupPriority",
    "description": "Filters access by priority range of a Firewall Rule Group",
    "type": "Numeric"
  },
  "route53profiles:hostedzonedomains": {
    "key": "route53profiles:HostedZoneDomains",
    "description": "Filters access by Hosted Zone domains",
    "type": "String"
  },
  "route53profiles:resolverruledomains": {
    "key": "route53profiles:ResolverRuleDomains",
    "description": "Filters access by Resolver Rule domains",
    "type": "String"
  },
  "route53profiles:resourcearns": {
    "key": "route53profiles:ResourceArns",
    "description": "Filters access by specific resource ARNs",
    "type": "ARN"
  },
  "route53profiles:resourceids": {
    "key": "route53profiles:ResourceIds",
    "description": "Filters access by given VPCs",
    "type": "String"
  },
  "route53profiles:resourcetypes": {
    "key": "route53profiles:ResourceTypes",
    "description": "Filters access by specific resource type. Possible options include 'HostedZone', 'FirewallRuleGroup', 'ResolverQueryLoggingConfig', 'ResolverRule', and 'VpcEndpoint'",
    "type": "String"
  }
}