ram:TagResource is a Tagging access-level action in the ram service. Grants permission to tag the specified resource share or permission
ARNs that ram:TagResource can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ram:TagResource.
Filters access by the tags that are passed in the request when creating or tagging a resource share. If users don't pass these specific tags, or if they don't specify tags at all, the request fails
Filters access by the tag keys that are passed when creating or tagging a resource share
Filters access by the tags associated with the resource
Filters access by the specified Permission ARN
Filters access by permissions of specified resource type
Filters access by resource shares that allow or deny sharing with external principals. For example, specify true if the action can only be performed on resource shares that allow sharing with external principals. External principals are AWS accounts that are outside of its AWS organization
Filters access by a resource share with the specified name
A minimal policy that allows ram:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRamTagResource",
"Effect": "Allow",
"Action": "ram:TagResource",
"Resource": "*"
}
]
}