medialive:CreateTags

Tagging

medialive:CreateTags is a Tagging access-level action in the medialive service. Grants permission to create tags for channels, inputs, input security groups, multiplexes, reservations, nodes, networks, clusters, channel placement groups, signal maps, SDI sources, template groups, and templates

Resource types

ARNs that medialive:CreateTags can be scoped to in an IAM policy.

arn:${Partition}:medialive:${Region}:${Account}:channel:${ChannelId}
channel
arn:${Partition}:medialive:${Region}:${Account}:channelPlacementGroup:${ClusterId}/${ChannelPlacementGroupId}
channel-placement-group
arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template:${CloudWatchAlarmTemplateId}
cloudwatch-alarm-template
arn:${Partition}:medialive:${Region}:${Account}:cloudwatch-alarm-template-group:${CloudWatchAlarmTemplateGroupId}
cloudwatch-alarm-template-group
arn:${Partition}:medialive:${Region}:${Account}:cluster:${ClusterId}
cluster
arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template:${EventBridgeRuleTemplateId}
eventbridge-rule-template
arn:${Partition}:medialive:${Region}:${Account}:eventbridge-rule-template-group:${EventBridgeRuleTemplateGroupId}
eventbridge-rule-template-group
arn:${Partition}:medialive:${Region}:${Account}:input:${InputId}
input
arn:${Partition}:medialive:${Region}:${Account}:inputSecurityGroup:${InputSecurityGroupId}
input-security-group
arn:${Partition}:medialive:${Region}:${Account}:multiplex:${MultiplexId}
multiplex
arn:${Partition}:medialive:${Region}:${Account}:network:${NetworkId}
network
arn:${Partition}:medialive:${Region}:${Account}:node:${ClusterId}/${NodeId}
node
arn:${Partition}:medialive:${Region}:${Account}:reservation:${ReservationId}
reservation
arn:${Partition}:medialive:${Region}:${Account}:sdiSource:${SdiSourceId}
sdi-source
arn:${Partition}:medialive:${Region}:${Account}:signal-map:${SignalMapId}
signal-map

Condition keys

Keys you can use in the Condition block of a policy that grants medialive:CreateTags.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

Example IAM policy

A minimal policy that allows medialive:CreateTags. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowMedialiveCreateTags",
      "Effect": "Allow",
      "Action": "medialive:CreateTags",
      "Resource": "*"
    }
  ]
}

Related actions in medialive

View all medialive actions →