firehose:TagDeliveryStream is a Tagging access-level action in the firehose service. Grants permission to add or update tags for the specified delivery stream
ARNs that firehose:TagDeliveryStream can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants firehose:TagDeliveryStream.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the tags associated with the resource
A minimal policy that allows firehose:TagDeliveryStream. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowFirehoseTagDeliveryStream",
"Effect": "Allow",
"Action": "firehose:TagDeliveryStream",
"Resource": "*"
}
]
}