greengrass:TagResource

Tagging

greengrass:TagResource is a Tagging access-level action in the greengrass service. Grants permission to add tags to a resource

Resource types

ARNs that greengrass:TagResource can be scoped to in an IAM policy.

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/bulk/deployments/${BulkDeploymentId}

bulkDeployment

arn:${Partition}:greengrass:${Region}:${Account}:components:${ComponentName}

component

arn:${Partition}:greengrass:${Region}:${Account}:components:${ComponentName}:versions:${ComponentVersion}

componentVersion

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/connectors/${ConnectorDefinitionId}

connectorDefinition

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/cores/${CoreDefinitionId}

coreDefinition

arn:${Partition}:greengrass:${Region}:${Account}:coreDevices:${CoreDeviceThingName}

coreDevice

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/${GroupId}/deployments/${DeploymentId}

deployment

arn:${Partition}:greengrass:${Region}:${Account}:deployments:${DeploymentId}

deployment

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/devices/${DeviceDefinitionId}

deviceDefinition

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/functions/${FunctionDefinitionId}

functionDefinition

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/groups/${GroupId}

group

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/loggers/${LoggerDefinitionId}

loggerDefinition

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/resources/${ResourceDefinitionId}

resourceDefinition

arn:${Partition}:greengrass:${Region}:${Account}:/greengrass/definition/subscriptions/${SubscriptionDefinitionId}

subscriptionDefinition

Condition keys

Keys you can use in the Condition block of a policy that grants greengrass:TagResource.

aws:RequestTag/${TagKey} String

Filters access by checking tag key/value pairs included in the request

aws:TagKeys ArrayOfString

Filters access by checking tag keys passed in the request

aws:ResourceTag/${TagKey} String

Filters access by checking tag key/value pairs associated with a specific resource

Example IAM policy

A minimal policy that allows greengrass:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowGreengrassTagResource",
      "Effect": "Allow",
      "Action": "greengrass:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in greengrass

greengrass:AssociateRoleToGroup Write greengrass:AssociateServiceRoleToAccount Permissions management greengrass:BatchAssociateClientDeviceWithCoreDevice Write greengrass:BatchDisassociateClientDeviceFromCoreDevice Write greengrass:CancelDeployment Write greengrass:CreateComponentVersion Write greengrass:CreateConnectorDefinition Write greengrass:CreateConnectorDefinitionVersion Write greengrass:CreateCoreDefinition Write greengrass:CreateCoreDefinitionVersion Write greengrass:CreateDeployment Write greengrass:CreateDeviceDefinition Write

View all greengrass actions →