Help us understand the problem. What is going on with this article?

ArchiveRule Filterの設定値一覧

はじめに

この記事はAWS re:Inventで発表されたAccess Analyzerに関する記事です。
ArchiveRule Filterの設定値の対応表です。

本題

AWS CLIとCloudformationでArchiveRuleを作成するときに、
公式ドキュメントに値一覧が見つからなかったのでまとめました。

Access Analyzerのドキュメント
CLI: https://docs.aws.amazon.com/cli/latest/reference/accessanalyzer/index.html
Cloudformation: https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/AWS_AccessAnalyzer.html

日本語(GUI) 設定値(CLI)
Googleオーディエンス condition.accounts.google.com:aud
プリンシパルARN condition.aws:PrincipalArn
プリンシパルOrgID condition.aws:PrincipalOrgID
プリンシパルOrgパス condition.aws:PrincipalOrgPaths
ソースアカウント condition.aws:SourceAccount
ソースARN condition.aws:SourceArn
送信元IP condition.aws:SourceIp
ソースVPC condition.aws:SourceVpc
ソースVPCE condition.aws:SourceVpce
ユーザーID condition.aws:UserId
Cognitoオーディエンス condition.cognito-identity.amazonaws.com:aud
FacebookアプリID condition.graph.facebook.com:app_id
発信者アカウント condition.kms:CallerAccount
Lambdaイベントソーストークン condition.lambda:EventSourceToken
KMSキーID condition.s3:x-amz-server-side-encryption-aws-kms-key-id
AmazonアプリID condition.www.amazon.com:app_id
AWSアカウント principal.AWS
正規ユーザー principal.CanonicalUser
フェデレーションユーザー principal.Federated
リソース resource
リソースタイプ resourceType

値の取得方法

マネジメントコンソール上でArchiveRuleを全ての設定で作成し、
AWS CLIのget-archive-ruleで設定を取得してください。

Why not register and get more from Qiita?
  1. We will deliver articles that match you
    By following users and tags, you can catch up information on technical fields that you are interested in as a whole
  2. you can read useful information later efficiently
    By "stocking" the articles you like, you can search right away
Comments
Sign up for free and join this conversation.
If you already have a Qiita account
Why do not you register as a user and use Qiita more conveniently?
You need to log in to use this function. Qiita can be used more conveniently after logging in.
You seem to be reading articles frequently this month. Qiita can be used more conveniently after logging in.
  1. We will deliver articles that match you
    By following users and tags, you can catch up information on technical fields that you are interested in as a whole
  2. you can read useful information later efficiently
    By "stocking" the articles you like, you can search right away