Resource bound condition keys not understood

[0xdabbad00]

The following policy is mentioned in https://aws.amazon.com/blogs/security/securing-resource-tags-used-for-authorization-using-service-control-policy-in-aws-organizations/

			"Sid": "DenyModifyTagsIfResAuthzTagAndPrinTagNotMatchedIam",
			"Effect": "Deny",
			"Action": [
				"iam:TagRole",
				"iam:TagUser",
				"iam:UntagRole",
				"iam:UntagUser"
			],
			"Resource": [
				"*"
			],
			"Condition": {
				"StringNotEquals": {
					"iam:ResourceTag/access-project": "${aws:PrincipalTag/access-project}",
					"aws:PrincipalArn": "arn:aws:iam::123456789012:role/org-admins/iam-admin"
				},
				"Null": {
					"iam:ResourceTag/access-project": false
				}
			}
		},

Parliament creates findings of Unknown condition for action - Unknown condition iam:ResourceTag/access-project for action iam:TagRole for each of the actions.

Looking at https://docs.aws.amazon.com/IAM/latest/UserGuide/list_identityandaccessmanagement.html the condition key iam:ResourceTag/${TagKey} is associated with the resource, not the action, and ends up not being understood by Parliament.