NewBinaryEqualsFunc - returns new BinaryEquals function.

NewBoolFunc - returns new Bool function.

NewBoolValue - returns new bool value.

NewDateEqualsFunc - returns new DateEquals function.

NewDateGreaterThanEqualsFunc - returns new DateGreaterThanEquals function.

NewDateGreaterThanFunc - returns new DateGreaterThan function.

NewDateLessThanEqualsFunc - returns new DateLessThanEquals function.

NewDateLessThanFunc - returns new DateLessThan function.

NewDateNotEqualsFunc - returns new DateNotEquals function.

NewFunctions - returns new Functions with given function list.

NewIntValue - returns new int value.

NewIPAddressFunc - returns new IP address function.

NewKey - creates new key.

NewKeySet - returns new KeySet contains given keys.

NewNotIPAddressFunc - returns new Not IP address function.

NewNullFunc - returns new Null function.

NewNumericEqualsFunc - returns new NumericEquals function.

NewNumericGreaterThanEqualsFunc - returns new NumericGreaterThanEquals function.

NewNumericGreaterThanFunc - returns new NumericGreaterThan function.

NewNumericGreaterThanIfExistsFunc - returns new NumericGreaterThanIfExists function.

NewNumericLessThanEqualsFunc - returns new NumericLessThanEquals function.

NewNumericLessThanFunc - returns new NumericLessThan function.

NewNumericNotEqualsFunc - returns new NumericNotEquals function.

NewStringEqualsFunc - returns new StringEquals function.

NewStringEqualsIgnoreCaseFunc - returns new StringEqualsIgnoreCase function.

NewStringLikeFunc - returns new StringLike function.

NewStringNotEqualsFunc - returns new StringNotEquals function.

NewStringNotEqualsIgnoreCaseFunc - returns new StringNotEqualsIgnoreCase function.

NewStringNotLikeFunc - returns new StringNotLike function.

NewStringValue - returns new string value.

NewValueSet - returns new value set containing given values.

AWSCurrentTime - key representing the current time.

AWSEpochTime - key representing the current epoch time.

AWSGroups - groups for any authenticating Access Key.

AWSPrincipalType - user principal type currently supported values are "User" and "Anonymous".

AWSReferer - key representing Referer header of any API.

AWSSecureTransport - key representing if the clients request is authenticated or not.

AWSSourceIP - key representing client's IP address (not intermittent proxies) of any API.

AWSUserAgent - key representing UserAgent header for any API.

AWSUserID - user unique ID, in MinIO this value is same as your user Access Key.

AWSUsername - user friendly name, in MinIO this value is same as your user Access Key.

Refer https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging-and-policies.html.

JWT claims supported substitutions.

JWTAud audience claim substitution.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWTIss issuer claim substitution.

JWTJti JWT unique identifier claim substitution.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWT claims supported substitutions.

JWTSub - JWT subject claim substitution.

JWT claims supported substitutions.

JWT claims supported substitutions.

LDAPGroups - LDAP groups, in MinIO this value is equal LDAP Group DNs for the authenticating user.

LDAPUser - LDAP username, in MinIO this value is equal to your authenticating LDAP user DN.

LDAPUsername - LDAP username, in MinIO is the authenticated simple user.

Condition key names.

Condition key names.

S3AuthType - optionally use this condition key to restrict incoming requests to use a specific authentication method.

S3Delimiter - key representing delimiter query parameter of ListBucket API only.

S3LocationConstraint - key representing LocationConstraint XML tag of CreateBucket API only.

S3MaxKeys - key representing max-keys query parameter of ListBucket API only.

S3ObjectLockLegalHold - key representing object-local-legal-hold Enables enforcement of the specified object legal hold status.

S3ObjectLockMode - key representing object-lock-mode Enables enforcement of the specified object retention mode.

S3ObjectLockRemainingRetentionDays - key representing object-lock-remaining-retention-days Enables enforcement of an object relative to the remaining retention days, you can set minimum and maximum allowable retention periods for a bucket using a bucket policy.

S3ObjectLockRetainUntilDate - key representing object-lock-retain-util-date Enables enforcement of a specific retain-until-date.

S3Prefix - key representing prefix query parameter of ListBucket API only.

S3SignatureAge - identifies the maximum age of presgiend URL allowed.

S3SignatureVersion - identifies the version of AWS Signature that you want to support for authenticated requests.

S3VersionID - Enables you to limit the permission for the s3:PutObjectVersionTagging action to a specific object version.

S3XAmzContentSha256 - set a static content-sha256 for all calls for a given action.

S3XAmzCopySource - key representing x-amz-copy-source HTTP header applicable to PutObject API only.

S3XAmzMetadataDirective - key representing x-amz-metadata-directive HTTP header applicable to PutObject API only.

S3XAmzServerSideEncryption - key representing x-amz-server-side-encryption HTTP header applicable to PutObject API only.

S3XAmzServerSideEncryptionAwsKmsKeyID - key representing x-amz-server-side-encryption-aws-kms-key-id HTTP header for S3 API calls.

S3XAmzServerSideEncryptionCustomerAlgorithm - key representing x-amz-server-side-encryption-customer-algorithm HTTP header applicable to PutObject API only.

S3XAmzStorageClass - key representing x-amz-storage-class HTTP header applicable to PutObject API only.

STSDurationSeconds - Duration seconds condition for STS policy.

SVCDurationSeconds - Duration seconds condition for Admin policy.

AllSupportedAdminKeys - is list of all admin supported keys.

AllSupportedKeys - is list of all all supported keys.

AllSupportedSTSKeys is the all supported conditions for STS policies.

CommonKeys - is list of all common condition keys.

JWTKeys - Supported JWT keys, non-exhaustive list please expand as new claims are standardized.

Key - conditional key whose name and it's optional variable.

Value - is enum type of string, int or bool.

Function - condition function interface.

Functions - list of functions.

KeyName - conditional key which is used to fetch values for any condition.

KeySet - set representation of slice of keys.

ValueSet - unique list of values.