{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by a tag key and value pair that is allowed in the request",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by a tag key and value pair of a resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by a list of tag keys that are allowed in the request",
    "type": "ArrayOfString"
  },
  "mpa:protectedresourceaccount": {
    "key": "mpa:ProtectedResourceAccount",
    "description": "Filters access by the account that owns the resource that is the target of the operation that requires approval",
    "type": "String"
  },
  "mpa:requestedoperation": {
    "key": "mpa:RequestedOperation",
    "description": "Filters access by a requested operation that requires team approval before it can be executed",
    "type": "String"
  }
}