proton:TagResource

Tagging

proton:TagResource is a Tagging access-level action in the proton service. Grants permission to add tags to a resource

Resource types

ARNs that proton:TagResource can be scoped to in an IAM policy.

arn:${Partition}:proton:${Region}:${Account}:component/${Id}

component

arn:${Partition}:proton:${Region}:${Account}:environment/${Name}

environment

arn:${Partition}:proton:${Region}:${Account}:environment-account-connection/${Id}

environment-account-connection

arn:${Partition}:proton:${Region}:${Account}:environment-template/${Name}

environment-template

arn:${Partition}:proton:${Region}:${Account}:environment-template/${TemplateName}:${MajorVersionId}

environment-template-major-version

arn:${Partition}:proton:${Region}:${Account}:environment-template/${TemplateName}:${MajorVersionId}.${MinorVersionId}

environment-template-minor-version

arn:${Partition}:proton:${Region}:${Account}:environment-template/${TemplateName}:${MajorVersion}.${MinorVersion}

environment-template-version

arn:${Partition}:proton:${Region}:${Account}:repository/${Provider}:${Name}

repository

arn:${Partition}:proton:${Region}:${Account}:service/${Name}

service

arn:${Partition}:proton:${Region}:${Account}:service/${ServiceName}/service-instance/${Name}

service-instance

arn:${Partition}:proton:${Region}:${Account}:service-template/${Name}

service-template

arn:${Partition}:proton:${Region}:${Account}:service-template/${TemplateName}:${MajorVersionId}

service-template-major-version

arn:${Partition}:proton:${Region}:${Account}:service-template/${TemplateName}:${MajorVersionId}.${MinorVersionId}

service-template-minor-version

arn:${Partition}:proton:${Region}:${Account}:service-template/${TemplateName}:${MajorVersion}.${MinorVersion}

service-template-version

Condition keys

Keys you can use in the Condition block of a policy that grants proton:TagResource.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows proton:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowProtonTagResource",
      "Effect": "Allow",
      "Action": "proton:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in proton

proton:AcceptEnvironmentAccountConnection Write proton:CancelComponentDeployment Write proton:CancelEnvironmentDeployment Write proton:CancelServiceInstanceDeployment Write proton:CancelServicePipelineDeployment Write proton:CreateComponent Write proton:CreateEnvironment Write proton:CreateEnvironmentAccountConnection Write proton:CreateEnvironmentTemplate Write proton:CreateEnvironmentTemplateMajorVersion Write proton:CreateEnvironmentTemplateMinorVersion Write proton:CreateEnvironmentTemplateVersion Write

View all proton actions →