allowResources

A list of allowed resource ARNs that a API key bearer can perform actions on.

• The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type.

• The resources must be in the same partition, region, and account-id as the key that is being created.

• Other than wildcards, you must include the full ARN, including the arn, partition, service, region, account-id and resource-id delimited by colons (:).

• No spaces allowed, even with wildcards. For example, arn:aws:geo:region:<i>account-id</i>:map/ExampleMap*.

For more information about ARN format, see Amazon Resource Names (ARNs).