{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by the allowed set of values for each of the tags",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by tag-value associated with the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by the presence of mandatory tags in the request",
    "type": "ArrayOfString"
  },
  "config:configurationrecorderserviceprincipal": {
    "key": "config:ConfigurationRecorderServicePrincipal",
    "description": "Filters access by service principal of the configuration recorder",
    "type": "String"
  }
}