groundstation:TagResource

Tagging

groundstation:TagResource is a Tagging access-level action in the groundstation service. Grants permission to assign a resource tag

Resource types

ARNs that groundstation:TagResource can be scoped to in an IAM policy.

arn:${Partition}:groundstation:${Region}:${Account}:config/${ConfigType}/${ConfigId}

Config

arn:${Partition}:groundstation:${Region}:${Account}:contact/${ContactId}

Contact

arn:${Partition}:groundstation:${Region}:${Account}:dataflow-endpoint-group/${DataflowEndpointGroupId}

DataflowEndpointGroup

arn:${Partition}:groundstation:${Region}:${Account}:ephemeris/${EphemerisId}

EphemerisItem

arn:${Partition}:groundstation:${Region}:${Account}:mission-profile/${MissionProfileId}

MissionProfile

Condition keys

Keys you can use in the Condition block of a policy that grants groundstation:TagResource.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

groundstation:ConfigId String

Filters access by the ID of a config

groundstation:ConfigType String

Filters access by the type of a config

groundstation:ContactId String

Filters access by the ID of a contact

groundstation:DataflowEndpointGroupId String

Filters access by the ID of a dataflow endpoint group

groundstation:EphemerisId String

Filters access by the ID of an ephemeris

groundstation:MissionProfileId String

Filters access by the ID of a mission profile

Example IAM policy

A minimal policy that allows groundstation:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowGroundstationTagResource",
      "Effect": "Allow",
      "Action": "groundstation:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in groundstation

groundstation:CancelContact Write groundstation:CreateConfig Write groundstation:CreateDataflowEndpointGroup Write groundstation:CreateDataflowEndpointGroupV2 Write groundstation:CreateEphemeris Write groundstation:CreateMissionProfile Write groundstation:DeleteConfig Write groundstation:DeleteDataflowEndpointGroup Write groundstation:DeleteEphemeris Write groundstation:DeleteMissionProfile Write groundstation:DescribeContact Read groundstation:DescribeContactVersion Read

View all groundstation actions →