{
  "certificate": {
    "key": "certificate",
    "arn": "arn:${Partition}:acm:${Region}:${Account}:certificate/${CertificateId}",
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ]
  }
}