budgets:TagResource

Tagging

budgets:TagResource is a Tagging access-level action in the budgets service. Grants permission to apply resource tags to a budget or budget action. Also needed to create a budget or budget action with tags

Resource types

ARNs that budgets:TagResource can be scoped to in an IAM policy.

arn:${Partition}:budgets::${Account}:budget/${BudgetName}

budget

arn:${Partition}:budgets::${Account}:budget/${BudgetName}/action/${ActionId}

budgetAction

Condition keys

Keys you can use in the Condition block of a policy that grants budgets:TagResource.

aws:RequestTag/${TagKey} String

Filters access based on the tags that are passed in the request

aws:ResourceTag/${TagKey} String

Filters access based on the tags associated with the resource

aws:TagKeys ArrayOfString

Filters access based on the tag keys that are passed in the request

Example IAM policy

A minimal policy that allows budgets:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowBudgetsTagResource",
      "Effect": "Allow",
      "Action": "budgets:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in budgets

budgets:CreateBudgetAction Write budgets:DeleteBudgetAction Write budgets:DescribeBudgetAction Read budgets:DescribeBudgetActionHistories Read budgets:DescribeBudgetActionsForAccount Read budgets:DescribeBudgetActionsForBudget Read budgets:ExecuteBudgetAction Write budgets:ListTagsForResource Read budgets:ModifyBudget Write budgets:UntagResource Tagging budgets:UpdateBudgetAction Write budgets:ViewBudget Read

View all budgets actions →