glue:GetTags

Read

glue:GetTags is a Read access-level action in the glue service. Grants permission to retrieve all tags associated with a resource

Resource types

ARNs that glue:GetTags can be scoped to in an IAM policy.

arn:${Partition}:glue:${Region}:${Account}:blueprint/${BlueprintName}

blueprint

arn:${Partition}:glue:${Region}:${Account}:catalog/${CatalogName}

catalog

arn:${Partition}:glue:${Region}:${Account}:connection/${ConnectionName}

connection

arn:${Partition}:glue:${Region}:${Account}:connectionType:${ConnectionTypeName}

connectionType

arn:${Partition}:glue:${Region}:${Account}:crawler/${CrawlerName}

crawler

arn:${Partition}:glue:${Region}:${Account}:customEntityType/${CustomEntityTypeId}

customEntityType

arn:${Partition}:glue:${Region}:${Account}:database/${DatabaseName}

database

arn:${Partition}:glue:${Region}:${Account}:devEndpoint/${DevEndpointName}

devendpoint

arn:${Partition}:glue:${Region}:${Account}:job/${JobName}

job

arn:${Partition}:glue:${Region}:${Account}:trigger/${TriggerName}

trigger

arn:${Partition}:glue:${Region}:${Account}:usageProfile/${UsageProfileId}

usageProfile

arn:${Partition}:glue:${Region}:${Account}:workflow/${WorkflowName}

workflow

Condition keys

Keys you can use in the Condition block of a policy that grants glue:GetTags.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows glue:GetTags. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowGlueGetTags",
      "Effect": "Allow",
      "Action": "glue:GetTags",
      "Resource": "*"
    }
  ]
}

Related actions in glue

glue:AuthorizeInboundIntegration Write glue:BatchCreatePartition Write glue:BatchDeleteConnection Write glue:BatchDeletePartition Write glue:BatchDeleteTable Write glue:BatchDeleteTableVersion Write glue:BatchGetBlueprints Read glue:BatchGetCrawlers Read glue:BatchGetCustomEntityTypes Read glue:BatchGetDevEndpoints Read glue:BatchGetJobs Read glue:BatchGetPartition Read

View all glue actions →