codedeploy:TagResource

Tagging

codedeploy:TagResource is a Tagging access-level action in the codedeploy service. Grants permission to associate the list of tags in the input Tags parameter with the resource identified by the ResourceArn input parameter

Resource types

ARNs that codedeploy:TagResource can be scoped to in an IAM policy.

arn:${Partition}:codedeploy:${Region}:${Account}:application:${ApplicationName}

application

arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:${ApplicationName}/${DeploymentGroupName}

deploymentgroup

Condition keys

Keys you can use in the Condition block of a policy that grants codedeploy:TagResource.

aws:RequestTag/${TagKey} String

Filters actions based on the presence of tag key-value pairs in the request

aws:TagKeys ArrayOfString

Filters actions based on the presence of tag keys in the request

aws:ResourceTag/${TagKey} String

Filters actions based on tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows codedeploy:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCodedeployTagResource",
      "Effect": "Allow",
      "Action": "codedeploy:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in codedeploy

codedeploy:AddTagsToOnPremisesInstances Tagging codedeploy:BatchGetApplicationRevisions Read codedeploy:BatchGetApplications Read codedeploy:BatchGetDeploymentGroups Read codedeploy:BatchGetDeploymentInstances Read codedeploy:BatchGetDeployments Read codedeploy:BatchGetDeploymentTargets Read codedeploy:BatchGetOnPremisesInstances Read codedeploy:ContinueDeployment Write codedeploy:CreateApplication Write codedeploy:CreateCloudFormationDeployment Write codedeploy:CreateDeployment Write

View all codedeploy actions →