lambda:TagResource

Tagging

lambda:TagResource is a Tagging access-level action in the lambda service. Grants permission to add tags to an AWS Lambda function, event source mapping, capacity provider, code signing configuration, network connector or MicroVM image resource

Resource types

ARNs that lambda:TagResource can be scoped to in an IAM policy.

arn:${Partition}:lambda:${Region}:${Account}:capacity-provider:${CapacityProviderName}

capacityProvider

arn:${Partition}:lambda:${Region}:${Account}:code-signing-config:${CodeSigningConfigId}

code signing config

arn:${Partition}:lambda:${Region}:${Account}:event-source-mapping:${UUID}

eventSourceMapping

arn:${Partition}:lambda:${Region}:${Account}:function:${FunctionName}

function

arn:${Partition}:lambda:${Region}:${Account}:microvm-image:${MicrovmImageName}

microvmImage

arn:${Partition}:lambda:${Region}:${Account}:network-connector:${NetworkConnectorId}

networkConnector

Condition keys

Keys you can use in the Condition block of a policy that grants lambda:TagResource.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

Example IAM policy

A minimal policy that allows lambda:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowLambdaTagResource",
      "Effect": "Allow",
      "Action": "lambda:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in lambda

lambda:AddLayerVersionPermission Permissions management lambda:AddPermission Permissions management lambda:CheckpointDurableExecution Write lambda:ConnectMicrovm Write lambda:CreateAlias Write lambda:CreateCapacityProvider Write lambda:CreateCodeSigningConfig Write lambda:CreateEventSourceMapping Write lambda:CreateFunction Write lambda:CreateFunctionUrlConfig Write lambda:CreateMicrovmAuthToken Write lambda:CreateMicrovmImage Write

View all lambda actions →