amplify:ListTagsForResource

Read

amplify:ListTagsForResource is a Read access-level action in the amplify service. Grants permission to list tags for an AWS Amplify Console resource

Resource types

ARNs that amplify:ListTagsForResource can be scoped to in an IAM policy.

arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}

apps

arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}/branches/${BranchName}

branches

arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}/domains/${DomainName}

domains

arn:${Partition}:amplify:${Region}:${Account}:webhooks/${WebhookId}

webhooks

Condition keys

Keys you can use in the Condition block of a policy that grants amplify:ListTagsForResource.

aws:ResourceTag/${TagKey} String

Filters access by a tag's key associated with the resource

Example IAM policy

A minimal policy that allows amplify:ListTagsForResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowAmplifyListTagsForResource",
      "Effect": "Allow",
      "Action": "amplify:ListTagsForResource",
      "Resource": "*"
    }
  ]
}

Related actions in amplify

amplify:AssociateWebACL Write amplify:CreateApp Write amplify:CreateBackendEnvironment Write amplify:CreateBranch Write amplify:CreateDeployment Write amplify:CreateDomainAssociation Write amplify:CreateWebHook Write amplify:DeleteApp Write amplify:DeleteBackendEnvironment Write amplify:DeleteBranch Write amplify:DeleteDomainAssociation Write amplify:DeleteJob Write

View all amplify actions →