Home / IAM Services / apprunner / ListTagsForResource
apprunner:ListTagsForResource Read apprunner:ListTagsForResource is
a Read
access-level action in the
apprunner
service.
Grants permission to list tags associated with an AWS App Runner resource
Resource types ARNs that apprunner:ListTagsForResource can be scoped to in an IAM policy.
arn:${Partition}:apprunner:${Region}:${Account}:autoscalingconfiguration/${AutoscalingConfigurationName}/${AutoscalingConfigurationVersion}/${AutoscalingConfigurationId}
autoscalingconfiguration arn:${Partition}:apprunner:${Region}:${Account}:connection/${ConnectionName}/${ConnectionId}
connection arn:${Partition}:apprunner:${Region}:${Account}:observabilityconfiguration/${ObservabilityConfigurationName}/${ObservabilityConfigurationVersion}/${ObservabilityConfigurationId}
observabilityconfiguration arn:${Partition}:apprunner:${Region}:${Account}:service/${ServiceName}/${ServiceId}
service arn:${Partition}:apprunner:${Region}:${Account}:vpcconnector/${VpcConnectorName}/${VpcConnectorVersion}/${VpcConnectorId}
vpcconnector Condition keys Keys you can use in the Condition block of a policy that
grants apprunner:ListTagsForResource .
aws:ResourceTag/${TagKey} String
Filters access by actions based on tag key-value pairs attached to the resource
Example IAM policy Copy A minimal policy that allows apprunner:ListTagsForResource . Replace
"Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowApprunnerListTagsForResource",
"Effect": "Allow",
"Action": "apprunner:ListTagsForResource",
"Resource": "*"
}
]
}