{
  "permissionset": {
    "key": "PermissionSet",
    "arn": "arn:${Partition}:sso:::permissionSet/${InstanceId}/${PermissionSetId}",
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ]
  },
  "account": {
    "key": "Account",
    "arn": "arn:${Partition}:sso:::account/${AccountId}"
  },
  "instance": {
    "key": "Instance",
    "arn": "arn:${Partition}:sso:::instance/${InstanceId}",
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ]
  },
  "application": {
    "key": "Application",
    "arn": "arn:${Partition}:sso::${AccountId}:application/${InstanceId}/${ApplicationId}",
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "sso:ApplicationAccount"
    ]
  },
  "trustedtokenissuer": {
    "key": "TrustedTokenIssuer",
    "arn": "arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/${InstanceId}/${TrustedTokenIssuerId}",
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}"
    ]
  },
  "applicationprovider": {
    "key": "ApplicationProvider",
    "arn": "arn:${Partition}:sso::aws:applicationProvider/${ApplicationProviderId}"
  }
}