discovery:CreateTags is a Tagging access-level action in the discovery service. Grants permission to CreateTags API. CreateTags creates one or more tags for configuration items. Tags are metadata that help you categorize IT assets. This API accepts a list of multiple configuration items
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows discovery:CreateTags. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowDiscoveryCreateTags",
"Effect": "Allow",
"Action": "discovery:CreateTags",
"Resource": "*"
}
]
}