{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by the presence of tags in the request",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by tags associated with the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by the presence of tags in the request",
    "type": "ArrayOfString"
  },
  "cloudwatch:alarmactions": {
    "key": "cloudwatch:AlarmActions",
    "description": "Filters access by defined alarm actions",
    "type": "ArrayOfString"
  },
  "cloudwatch:namespace": {
    "key": "cloudwatch:namespace",
    "description": "Filters access by the presence of optional namespace values",
    "type": "String"
  },
  "cloudwatch:requestinsightruleloggroups": {
    "key": "cloudwatch:requestInsightRuleLogGroups",
    "description": "Filters access by the Log Groups specified in an Insight Rule",
    "type": "ArrayOfString"
  },
  "cloudwatch:requestmanagedresourcearns": {
    "key": "cloudwatch:requestManagedResourceARNs",
    "description": "Filters access by the Resource ARNs specified in a managed Insight Rule",
    "type": "ArrayOfARN"
  }
}