kinesis:TagResource

Tagging

kinesis:TagResource is a Tagging access-level action in the kinesis service. Grants permission to add or update tags for the specified Amazon Kinesis resource. Each resource can have up to 50 tags

Resource types

ARNs that kinesis:TagResource can be scoped to in an IAM policy.

arn:${Partition}:kinesis:${Region}:${Account}:channel/${ChannelId} required
channel
arn:${Partition}:kinesis:${Region}:${Account}:${StreamType}/${StreamName}/consumer/${ConsumerName}:${ConsumerCreationTimpstamp} required
consumer
arn:${Partition}:kinesis:${Region}:${Account}:stream/${StreamName} required
stream

Condition keys

Keys you can use in the Condition block of a policy that grants kinesis:TagResource.

aws:RequestTag/${TagKey} String

Filters access by the presence of tag key-value pairs in the request

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

aws:TagKeys ArrayOfString

Filters access by the presence of tag keys in the request

Example IAM policy

A minimal policy that allows kinesis:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowKinesisTagResource",
      "Effect": "Allow",
      "Action": "kinesis:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in kinesis

kinesis:AddTagsToStream Tagging kinesis:AssociateStreamsWithChannel Write kinesis:CreateChannel Tagging kinesis:CreateStream Write kinesis:DecreaseStreamRetentionPeriod Write kinesis:DeleteChannel Write kinesis:DeleteResourcePolicy Write kinesis:DeleteStream Write kinesis:DeregisterStreamConsumer Write kinesis:DescribeAccountSettings Read kinesis:DescribeChannel Read kinesis:DescribeLimits Read

View all kinesis actions →