comprehend:TagResource

Tagging

comprehend:TagResource is a Tagging access-level action in the comprehend service. Grants permission to tag a resource with given key value pairs

Resource types

ARNs that comprehend:TagResource can be scoped to in an IAM policy.

arn:${Partition}:comprehend:${Region}:${Account}:document-classification-job/${JobId}

document-classification-job

arn:${Partition}:comprehend:${Region}:${Account}:document-classifier/${DocumentClassifierName}

document-classifier

arn:${Partition}:comprehend:${Region}:${Account}:document-classifier-endpoint/${DocumentClassifierEndpointName}

document-classifier-endpoint

arn:${Partition}:comprehend:${Region}:${Account}:dominant-language-detection-job/${JobId}

dominant-language-detection-job

arn:${Partition}:comprehend:${Region}:${Account}:entities-detection-job/${JobId}

entities-detection-job

arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer/${EntityRecognizerName}

entity-recognizer

arn:${Partition}:comprehend:${Region}:${Account}:entity-recognizer-endpoint/${EntityRecognizerEndpointName}

entity-recognizer-endpoint

arn:${Partition}:comprehend:${Region}:${Account}:events-detection-job/${JobId}

events-detection-job

arn:${Partition}:comprehend:${Region}:${Account}:flywheel/${FlywheelName}

flywheel

arn:${Partition}:comprehend:${Region}:${Account}:flywheel/${FlywheelName}/dataset/${DatasetName}

flywheel-dataset

arn:${Partition}:comprehend:${Region}:${Account}:key-phrases-detection-job/${JobId}

key-phrases-detection-job

arn:${Partition}:comprehend:${Region}:${Account}:pii-entities-detection-job/${JobId}

pii-entities-detection-job

arn:${Partition}:comprehend:${Region}:${Account}:sentiment-detection-job/${JobId}

sentiment-detection-job

arn:${Partition}:comprehend:${Region}:${Account}:targeted-sentiment-detection-job/${JobId}

targeted-sentiment-detection-job

arn:${Partition}:comprehend:${Region}:${Account}:topics-detection-job/${JobId}

topics-detection-job

Condition keys

Keys you can use in the Condition block of a policy that grants comprehend:TagResource.

aws:ResourceTag/${TagKey} String

Filters access by requiring tag value associated with the resource

Example IAM policy

A minimal policy that allows comprehend:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowComprehendTagResource",
      "Effect": "Allow",
      "Action": "comprehend:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in comprehend

comprehend:BatchDetectDominantLanguage Read comprehend:BatchDetectEntities Read comprehend:BatchDetectKeyPhrases Read comprehend:BatchDetectSentiment Read comprehend:BatchDetectSyntax Read comprehend:BatchDetectTargetedSentiment Read comprehend:ClassifyDocument Read comprehend:ContainsPiiEntities Read comprehend:CreateDataset Write comprehend:CreateDocumentClassifier Write comprehend:CreateEndpoint Write comprehend:CreateEntityRecognizer Write

View all comprehend actions →