appmesh:TagResource

Tagging

appmesh:TagResource is a Tagging access-level action in the appmesh service. Grants permission to tag a resource with a specified resourceArn

Resource types

ARNs that appmesh:TagResource can be scoped to in an IAM policy.

arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualGateway/${VirtualGatewayName}/gatewayRoute/${GatewayRouteName}

gatewayRoute

arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}

mesh

arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualRouter/${VirtualRouterName}/route/${RouteName}

route

arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualGateway/${VirtualGatewayName}

virtualGateway

arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualNode/${VirtualNodeName}

virtualNode

arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualRouter/${VirtualRouterName}

virtualRouter

arn:${Partition}:appmesh:${Region}:${Account}:mesh/${MeshName}/virtualService/${VirtualServiceName}

virtualService

Condition keys

Keys you can use in the Condition block of a policy that grants appmesh:TagResource.

aws:ResourceTag/${TagKey} String

Filters actions by the tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows appmesh:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowAppmeshTagResource",
      "Effect": "Allow",
      "Action": "appmesh:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in appmesh

appmesh:CreateGatewayRoute Write appmesh:CreateMesh Write appmesh:CreateRoute Write appmesh:CreateVirtualGateway Write appmesh:CreateVirtualNode Write appmesh:CreateVirtualRouter Write appmesh:CreateVirtualService Write appmesh:DeleteGatewayRoute Write appmesh:DeleteMesh Write appmesh:DeleteMeshPolicy Write appmesh:DeleteRoute Write appmesh:DeleteVirtualGateway Write

View all appmesh actions →