duo-labs#164 Updating Global Condition Keys

caroseuk · Mar 16, 2021 · f685cb1 · f685cb1
1 parent 36009bc
commit f685cb1
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/parliament/statement.py b/parliament/statement.py
@@ -148,8 +148,12 @@ def is_valid_account_id(str):
     "aws:EpochTime": "Date",  # This needs to accept Date or Numeric
     "aws:MultiFactorAuthAge": "Numeric",
     "aws:MultiFactorAuthPresent": "Bool",
+    "aws:PrincipalAccount": "String",
     "aws:PrincipalOrgID": "String",
     "aws:PrincipalArn": "Arn",
+    "aws:PrincipalOrgPaths": "String",
+    "aws:PrincipalTag": "String",
+    "aws:PrincipalType": "String",
     "aws:RequestedRegion": "String",
     "aws:SecureTransport": "Bool",
     "aws:UserAgent": "String",
@@ -159,6 +163,7 @@ def is_valid_account_id(str):
     "aws:Referer": "String",
     "aws:RequestTag/*": "String",
     "aws:ResourceTag/*": "String",
+    "aws:SecureTransport": "Bool",
     "aws:SourceAccount": "String",
     "aws:SourceArn": "Arn",
     "aws:SourceIp": "Ip",