Schema Objects and Attributes

The following schema objects are supported:

  • Account

  • Group (Primary)

  • *AWS Managed Policy

  • *Customer Managed Policy

  • *Inline Policy

  • *Service Control Policy

  • *Roles

  • *Organization Unit

  • *AWS Accounts

Note
Schema objects with an asterisk (*) are only functional when you purchase Cloud Access Management or SailPoint CIEM.

Tags Attribute

A new Tags Attribute is available for aggregation to identify and organize AWS resources. Tags are displayed as Key/Value pairs for the aggregated entities.

This multivalued, string attribute stores the Key/Value pair as a single string in K=V,K2=V2 format with tags separated by commas. For example:

[Key~Value, Costcenter~Austin, Department~QA, Location~Offshore ]

The form-data appears as follows:

  • Key: Costcenter, Department, Location

  • Value: Austin, QA, Offshore

By default the tilda(~) delimiter is between the key value pair. However, the separator can be configured as tagKeyValueSeparator.

<entry key="tagKeyValueSeparator"value="="/>