elasticbeanstalk:UpdateTagsForResource

Tagging

elasticbeanstalk:UpdateTagsForResource is a Tagging access-level action in the elasticbeanstalk service. Doesn't grant permission to update tags. To grant permission to add tags to an Elastic Beanstalk resource, remove tags, and to update tag values, specify elasticbeanstalk:AddTags and elasticbeanstalk:RemoveTags

Resource types

ARNs that elasticbeanstalk:UpdateTagsForResource can be scoped to in an IAM policy.

arn:${Partition}:elasticbeanstalk:${Region}:${Account}:application/${ApplicationName}

application

arn:${Partition}:elasticbeanstalk:${Region}:${Account}:applicationversion/${ApplicationName}/${VersionLabel}

applicationversion

arn:${Partition}:elasticbeanstalk:${Region}:${Account}:configurationtemplate/${ApplicationName}/${TemplateName}

configurationtemplate

arn:${Partition}:elasticbeanstalk:${Region}:${Account}:environment/${ApplicationName}/${EnvironmentName}

environment

arn:${Partition}:elasticbeanstalk:${Region}::platform/${PlatformNameWithVersion}

platform

Condition keys

Keys you can use in the Condition block of a policy that grants elasticbeanstalk:UpdateTagsForResource.

aws:ResourceTag/${TagKey} String

Filters actions based on tag key-value pairs attached to the resource

elasticbeanstalk:InApplication ARN

Filters access by the application that contains the resource that the action operates on

Example IAM policy

A minimal policy that allows elasticbeanstalk:UpdateTagsForResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowElasticbeanstalkUpdateTagsForResource",
      "Effect": "Allow",
      "Action": "elasticbeanstalk:UpdateTagsForResource",
      "Resource": "*"
    }
  ]
}

Related actions in elasticbeanstalk

View all elasticbeanstalk actions →