AWS Identity Matcher

partitions

List of string
Match workloads in these AWS Partitions.

E.g., aws, aws-cn, aws-us-gov, etc.

Empty list means match any partition.

See https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html

repeated = {
  items: {string:{min_len:1}}
}

accounts

List of string
REQUIRED
Match workloads in these AWS Accounts.

E.g., 123456789012.

Cannot be empty.

See https://docs.aws.amazon.com/general/latest/gr/acct-identifiers.html

repeated = {
  min_items: 1
  items: {string:{pattern:^[0-9]{12}$}}
}

regions

List of string
Match workloads in these AWS Regions.

E.g., us-east-2, eu-west-3, cn-north-1, etc.

Empty list means match any region.

See https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints

repeated = {
  items: {string:{min_len:1}}
}

zones

List of string
Match workloads in these AWS Availability Zones.

E.g., us-east-2a, eu-west-3b, ap-southeast-1c, etc.

Empty list means match any availability zone.

See https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

repeated = {
  items: {string:{min_len:1}}
}

ec2

tetrateio.api.onboarding.authorization.aws.v1alpha1.Ec2InstanceMatcher ^{oneof kind}
Match AWS EC2 instances with these instance specific criteria.

If present but empty, it matches any EC2 instance matching the other fields.

–

iamRoleNames

List of string
Match AWS EC2 instances associated with these AWS IAM Role names.

E.g., example-role.

Empty list means match any EC2 instance (no matter whether it has an AWS IAM Role associated with it or not).

See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html

repeated = {
  items: {string:{min_len:1}}
}