cleanrooms-ml:TagResource

Tagging

cleanrooms-ml:TagResource is a Tagging access-level action in the cleanrooms-ml service. Grants permission to tag a specific resource

Resource types

ARNs that cleanrooms-ml:TagResource can be scoped to in an IAM policy.

arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-model-algorithm/${ResourceId}
ConfiguredModelAlgorithm
arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/configured-model-algorithm-association/${ResourceId}
ConfiguredModelAlgorithmAssociation
arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/ml-input-channel/${ResourceId}
MLInputChannel
arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/trained-model/${ResourceId}
TrainedModel
arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/trained-model-inference-job/${ResourceId}
TrainedModelInferenceJob
arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-generation-job/${ResourceId}
audiencegenerationjob
arn:${Partition}:cleanrooms-ml:${Region}:${Account}:audience-model/${ResourceId}
audiencemodel
arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-audience-model/${ResourceId}
configuredaudiencemodel
arn:${Partition}:cleanrooms-ml:${Region}:${Account}:training-dataset/${ResourceId}
trainingdataset

Condition keys

Keys you can use in the Condition block of a policy that grants cleanrooms-ml:TagResource.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows cleanrooms-ml:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCleanroomsmlTagResource",
      "Effect": "Allow",
      "Action": "cleanrooms-ml:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in cleanrooms-ml

View all cleanrooms-ml actions →