{
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by the AWS DS Resource being acted upon",
    "type": "String"
  },
  "ds-data:identifier": {
    "key": "ds-data:Identifier",
    "description": "Filters access by the type of identifier provided in the request (i.e. SAM Account Name)",
    "type": "String"
  },
  "ds-data:membername": {
    "key": "ds-data:MemberName",
    "description": "Filters access by the directory SAM Account Name included in the MemberName input of the request",
    "type": "String"
  },
  "ds-data:memberrealm": {
    "key": "ds-data:MemberRealm",
    "description": "Filters access by the directory realm name included in the MemberRealm input of the request",
    "type": "String"
  },
  "ds-data:realm": {
    "key": "ds-data:Realm",
    "description": "Filters access by the directory realm name for the request",
    "type": "String"
  },
  "ds-data:samaccountname": {
    "key": "ds-data:SAMAccountName",
    "description": "Filters access by the directory SAM Account Name included in the SAMAccountName input of the request",
    "type": "String"
  }
}