profile:ListTagsForResource

Read

profile:ListTagsForResource is a Read access-level action in the profile service. Grants permission to list tags for a resource

Resource types

ARNs that profile:ListTagsForResource can be scoped to in an IAM policy.

arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/calculated-attributes/${CalculatedAttributeName}
calculated-attributes
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/domain-object-types/${ObjectTypeName}
domain-object-types
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}
domains
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/event-streams/${EventStreamName}
event-streams
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/event-triggers/${EventTriggerName}
event-triggers
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/integrations/${Uri}
integrations
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/layouts/${LayoutDefinitionName}
layouts
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/object-types/${ObjectTypeName}
object-types
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/recommender-filters/${RecommenderFilterName}
recommender-filters
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/recommender-schemas/${RecommenderSchemaName}
recommender-schemas
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/recommenders/${RecommenderTypeName}
recommenders
arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/segment-definitions/${SegmentDefinitionName}
segment-definitions

Condition keys

Keys you can use in the Condition block of a policy that grants profile:ListTagsForResource.

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair

Example IAM policy

A minimal policy that allows profile:ListTagsForResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowProfileListTagsForResource",
      "Effect": "Allow",
      "Action": "profile:ListTagsForResource",
      "Resource": "*"
    }
  ]
}

Related actions in profile

View all profile actions →