rekognition:TagResource
Tagging rekognition:TagResource is
a Tagging
access-level action in the
rekognition
service.
Grants permission to add one or more tags to a resource
Resource types
ARNs that rekognition:TagResource can be scoped to in an IAM policy.
arn:${Partition}:rekognition:${Region}:${Account}:collection/${CollectionId}
collection arn:${Partition}:rekognition:${Region}:${Account}:project/${ProjectName}/dataset/${DatasetType}/${CreationTimestamp}
dataset arn:${Partition}:rekognition:${Region}:${Account}:project/${ProjectName}/${CreationTimestamp}
project arn:${Partition}:rekognition:${Region}:${Account}:project/${ProjectName}/version/${VersionName}/${CreationTimestamp}
projectversion arn:${Partition}:rekognition:${Region}:${Account}:streamprocessor/${StreamprocessorId}
streamprocessor Condition keys
Keys you can use in the Condition block of a policy that
grants rekognition:TagResource.
aws:ResourceTag/${TagKey} String
Filters access by tags associated with the resource
Example IAM policy
A minimal policy that allows rekognition:TagResource. Replace
"Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRekognitionTagResource",
"Effect": "Allow",
"Action": "rekognition:TagResource",
"Resource": "*"
}
]
}