cases:TagResource

Tagging

cases:TagResource is a Tagging access-level action in the cases service. Grants permission to add the specified tags to the specified resource

Resource types

ARNs that cases:TagResource can be scoped to in an IAM policy.

arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/case/${CaseId}

Case

arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/case-rule/${CaseRuleId}

CaseRule

arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}

Domain

arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/field/${FieldId}

Field

arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/layout/${LayoutId}

Layout

arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/case/${CaseId}/related-item/${RelatedItemId}

RelatedItem

arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/template/${TemplateId}

Template

Condition keys

Keys you can use in the Condition block of a policy that grants cases:TagResource.

aws:ResourceTag/${TagKey} String

Filters access by tags associated with the resource

cases:CreatedBy String

Filters access by who created the the resource (user ARN or custom entity)

cases:RelatedItemType String

Filters access by the type of related item. Possible values: Contact, Comment, File, Sla, ConnectCase, Custom

Example IAM policy

A minimal policy that allows cases:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCasesTagResource",
      "Effect": "Allow",
      "Action": "cases:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in cases

cases:BatchGetCaseRule Read cases:BatchGetField Read cases:BatchPutFieldOptions Write cases:CreateCase Write cases:CreateCaseRule Write cases:CreateDomain Write cases:CreateField Write cases:CreateLayout Write cases:CreateRelatedItem Write cases:CreateTemplate Write cases:DeleteCase Write cases:DeleteCaseRule Write

View all cases actions →