kinesis:TagResource

Tagging

kinesis:TagResource is a Tagging access-level action in the kinesis service. Grants permission to add or update tags for the specified Amazon Kinesis resource. Each resource can have up to 50 tags

Resource types

ARNs that kinesis:TagResource can be scoped to in an IAM policy.

arn:${Partition}:kinesis:${Region}:${Account}:${StreamType}/${StreamName}/consumer/${ConsumerName}:${ConsumerCreationTimpstamp}

consumer

arn:${Partition}:kinesis:${Region}:${Account}:stream/${StreamName}

stream

Condition keys

Keys you can use in the Condition block of a policy that grants kinesis:TagResource.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows kinesis:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowKinesisTagResource",
      "Effect": "Allow",
      "Action": "kinesis:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in kinesis

kinesis:AddTagsToStream Tagging kinesis:CreateStream Write kinesis:DecreaseStreamRetentionPeriod Write kinesis:DeleteResourcePolicy Write kinesis:DeleteStream Write kinesis:DeregisterStreamConsumer Write kinesis:DescribeAccountSettings Read kinesis:DescribeLimits Read kinesis:DescribeStream Read kinesis:DescribeStreamConsumer Read kinesis:DescribeStreamSummary Read kinesis:DisableEnhancedMonitoring Write

View all kinesis actions →