Every Condition Operator You Technically CAN Put in an IAM Policy
Just because you can, doesn't mean you should.
This page has every single possible condition operator you can put in an AWS IAM policy without being flatly rejected by the IAM API. If you got here on accident, you probably want to look at this list.
ARN Operators
- ArnEquals
- ArnEqualsIfExists
- ForAllValues: ArnEquals
- ForAllValues: ArnEqualsIfExists
- ForAnyValue: ArnEquals
- ForAnyValue: ArnEqualsIfExists
- ArnLike
- ArnLikeIfExists
- ForAllValues: ArnLike
- ForAllValues: ArnLikeIfExists
- ForAnyValue: ArnLike
- ForAnyValue: ArnLikeIfExists
- ArnNotEquals
- ArnNotEqualsIfExists
- ForAllValues: ArnNotEquals
- ForAllValues: ArnNotEqualsIfExists
- ForAnyValue: ArnNotEquals
- ForAnyValue: ArnNotEqualsIfExists
- ArnNotLike
- ArnNotLikeIfExists
- ForAllValues: ArnNotLike
- ForAllValues: ArnNotLikeIfExists
- ForAnyValue: ArnNotLike
- ForAnyValue: ArnNotLikeIfExists
Binary value Operators
Boolean Operators
Datetime Operators
- DateEquals
- DateEqualsIfExists
- ForAllValues: DateEquals
- ForAllValues: DateEqualsIfExists
- ForAnyValue: DateEquals
- ForAnyValue: DateEqualsIfExists
- DateGreaterThan
- DateGreaterThanIfExists
- ForAllValues: DateGreaterThan
- ForAllValues: DateGreaterThanIfExists
- ForAnyValue: DateGreaterThan
- ForAnyValue: DateGreaterThanIfExists
- DateGreaterThanEquals
- DateGreaterThanEqualsIfExists
- ForAllValues: DateGreaterThanEquals
- ForAllValues: DateGreaterThanEqualsIfExists
- ForAnyValue: DateGreaterThanEquals
- ForAnyValue: DateGreaterThanEqualsIfExists
- DateLessThan
- DateLessThanIfExists
- ForAllValues: DateLessThan
- ForAllValues: DateLessThanIfExists
- ForAnyValue: DateLessThan
- ForAnyValue: DateLessThanIfExists
- DateLessThanEquals
- DateLessThanEqualsIfExists
- ForAllValues: DateLessThanEquals
- ForAllValues: DateLessThanEqualsIfExists
- ForAnyValue: DateLessThanEquals
- ForAnyValue: DateLessThanEqualsIfExists
- DateNotEquals
- DateNotEqualsIfExists
- ForAllValues: DateNotEquals
- ForAllValues: DateNotEqualsIfExists
- ForAnyValue: DateNotEquals
- ForAnyValue: DateNotEqualsIfExists
IP address Operators
Key Operators
Number Operators
- NumericEquals
- NumericEqualsIfExists
- ForAllValues: NumericEquals
- ForAllValues: NumericEqualsIfExists
- ForAnyValue: NumericEquals
- ForAnyValue: NumericEqualsIfExists
- NumericGreaterThan
- NumericGreaterThanIfExists
- ForAllValues: NumericGreaterThan
- ForAllValues: NumericGreaterThanIfExists
- ForAnyValue: NumericGreaterThan
- ForAnyValue: NumericGreaterThanIfExists
- NumericGreaterThanEquals
- NumericGreaterThanEqualsIfExists
- ForAllValues: NumericGreaterThanEquals
- ForAllValues: NumericGreaterThanEqualsIfExists
- ForAnyValue: NumericGreaterThanEquals
- ForAnyValue: NumericGreaterThanEqualsIfExists
- NumericLessThan
- NumericLessThanIfExists
- ForAllValues: NumericLessThan
- ForAllValues: NumericLessThanIfExists
- ForAnyValue: NumericLessThan
- ForAnyValue: NumericLessThanIfExists
- NumericLessThanEquals
- NumericLessThanEqualsIfExists
- ForAllValues: NumericLessThanEquals
- ForAllValues: NumericLessThanEqualsIfExists
- ForAnyValue: NumericLessThanEquals
- ForAnyValue: NumericLessThanEqualsIfExists
- NumericNotEquals
- NumericNotEqualsIfExists
- ForAllValues: NumericNotEquals
- ForAllValues: NumericNotEqualsIfExists
- ForAnyValue: NumericNotEquals
- ForAnyValue: NumericNotEqualsIfExists
String Operators
- StringEquals
- StringEqualsIfExists
- ForAllValues: StringEquals
- ForAllValues: StringEqualsIfExists
- ForAnyValue: StringEquals
- ForAnyValue: StringEqualsIfExists
- StringEqualsIgnoreCase
- StringEqualsIgnoreCaseIfExists
- ForAllValues: StringEqualsIgnoreCase
- ForAllValues: StringEqualsIgnoreCaseIfExists
- ForAnyValue: StringEqualsIgnoreCase
- ForAnyValue: StringEqualsIgnoreCaseIfExists
- StringLike
- StringLikeIfExists
- ForAllValues: StringLike
- ForAllValues: StringLikeIfExists
- ForAnyValue: StringLike
- ForAnyValue: StringLikeIfExists
- StringNotEquals
- StringNotEqualsIfExists
- ForAllValues: StringNotEquals
- ForAllValues: StringNotEqualsIfExists
- ForAnyValue: StringNotEquals
- ForAnyValue: StringNotEqualsIfExists
- StringNotEqualsIgnoreCase
- StringNotEqualsIgnoreCaseIfExists
- ForAllValues: StringNotEqualsIgnoreCase
- ForAllValues: StringNotEqualsIgnoreCaseIfExists
- ForAnyValue: StringNotEqualsIgnoreCase
- ForAnyValue: StringNotEqualsIgnoreCaseIfExists
- StringNotLike
- StringNotLikeIfExists
- ForAllValues: StringNotLike
- ForAllValues: StringNotLikeIfExists
- ForAnyValue: StringNotLike
- ForAnyValue: StringNotLikeIfExists