quicksight:ListTagsForResource

Read

quicksight:ListTagsForResource is a Read access-level action in the quicksight service. Grants permission to list tags of a QuickSight resource

Resource types

ARNs that quicksight:ListTagsForResource can be scoped to in an IAM policy.

arn:${Partition}:quicksight:${Region}:${Account}:action-connector/${ResourceId}
actionconnector
arn:${Partition}:quicksight:${Region}:${Account}:analysis/${ResourceId}
analysis
arn:${Partition}:quicksight:${Region}:${Account}:brand/${ResourceId}
brand
arn:${Partition}:quicksight:${Region}:${Account}:customization/${ResourceId}
customization
arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/${ResourceId}
custompermissions
arn:${Partition}:quicksight:${Region}:${Account}:dashboard/${ResourceId}
dashboard
arn:${Partition}:quicksight:${Region}:${Account}:dataset/${ResourceId}
dataset
arn:${Partition}:quicksight:${Region}:${Account}:datasource/${ResourceId}
datasource
arn:${Partition}:quicksight:${Region}:${Account}:email-customization-template/${ResourceId}
emailCustomizationTemplate
arn:${Partition}:quicksight:${Region}:${Account}:flow/${ResourceId}
flow
arn:${Partition}:quicksight:${Region}:${Account}:folder/${ResourceId}
folder
arn:${Partition}:quicksight:${Region}:${Account}:namespace/${ResourceId}
namespace
arn:${Partition}:quicksight:${Region}:${Account}:oauthClientApplication/${ResourceId}
oauthClientApplication
arn:${Partition}:quicksight:${Region}:${Account}:template/${ResourceId}
template
arn:${Partition}:quicksight:${Region}:${Account}:theme/${ResourceId}
theme
arn:${Partition}:quicksight:${Region}:${Account}:topic/${ResourceId}
topic
arn:${Partition}:quicksight:${Region}:${Account}:user/${ResourceId}
user
arn:${Partition}:quicksight:${Region}:${Account}:vpcConnection/${ResourceId}
vpcconnection

Condition keys

Keys you can use in the Condition block of a policy that grants quicksight:ListTagsForResource.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows quicksight:ListTagsForResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowQuicksightListTagsForResource",
      "Effect": "Allow",
      "Action": "quicksight:ListTagsForResource",
      "Resource": "*"
    }
  ]
}

Related actions in quicksight

View all quicksight actions →