ABAC condition keys for Amazon SQS
You can use the following condition keys to control function actions:
ABAC condition key | Description | Policy type | Amazon SQS operations |
---|---|---|---|
aws:ResourceTag | Tag (key and value) on the Amazon SQS queue matches the tag (key and value) or tag pattern in the policy | IAM policy only | Amazon SQS queue resource operations |
aws:RequestTag | Tag (key and value) on the Amazon SQS queue resource operations matches the tag (key and value) or tag pattern in the policy | Queue policy and IAM policies | TagQueue, UntagQueue, CreateQueue |
aws:TagKeys |
Tag keys in the request match the tag keys in the policy |
Queue policy and IAM policies | TagQueue, UntagQueue, CreateQueue |