aws-marketplace:TagResource

Tagging

aws-marketplace:TagResource is a Tagging access-level action in the aws-marketplace service. Grants permission to add new tags to a resource. Supported resource: Entity, ChangeSet, InvoiceSubmissionTask, IssuedTaxInvoice

Resource types

ARNs that aws-marketplace:TagResource can be scoped to in an IAM policy.

arn:${Partition}:aws-marketplace:${Region}:${Account}:${Catalog}/ChangeSet/${ResourceId}

ChangeSet

arn:${Partition}:aws-marketplace:${Region}:${Account}:${Catalog}/${EntityType}/${ResourceId}

Entity

arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/${Catalog}/invoice-submission-task/${ResourceId}

InvoiceSubmissionTask

arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/${Catalog}/issued-tax-invoice/${ResourceId}

IssuedTaxInvoice

arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/${VerificationType}/verification-evidence/${ResourceId}

VerificationEvidence

Condition keys

Keys you can use in the Condition block of a policy that grants aws-marketplace:TagResource.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

catalog:ChangeType String

Filters access by the change type in the StartChangeSet request

Example IAM policy

A minimal policy that allows aws-marketplace:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowAwsmarketplaceTagResource",
      "Effect": "Allow",
      "Action": "aws-marketplace:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in aws-marketplace

View all aws-marketplace actions →