sagemaker:AddTags

Tagging

sagemaker:AddTags is a Tagging access-level action in the sagemaker service. Grants permission to add or overwrite one or more tags for the specified Amazon SageMaker resource

Resource types

ARNs that sagemaker:AddTags can be scoped to in an IAM policy.

arn:${Partition}:sagemaker:${Region}:${Account}:action/${ActionName}

action

arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/${AIBenchmarkJobName}

ai-benchmark-job

arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/${AIRecommendationJobName}

ai-recommendation-job

arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/${AIWorkloadConfigName}

ai-workload-config

arn:${Partition}:sagemaker:${Region}:${Account}:algorithm/${AlgorithmName}

algorithm

arn:${Partition}:sagemaker:${Region}:${Account}:app/${DomainId}/${UserProfileName}/${AppType}/${AppName}

app

arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/${AppImageConfigName}

app-image-config

arn:${Partition}:sagemaker:${Region}:${Account}:artifact/${HashOfArtifactSource}

artifact

arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/${AutoMLJobJobName}

automl-job

arn:${Partition}:sagemaker:${Region}:${Account}:cluster/${ClusterId}

cluster

arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/${ClusterSchedulerConfigId}

cluster-scheduler-config

arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/${CodeRepositoryName}

code-repository

arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/${CompilationJobName}

compilation-job

arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/${ComputeQuotaId}

compute-quota

arn:${Partition}:sagemaker:${Region}:${Account}:context/${ContextName}

context

arn:${Partition}:sagemaker:${Region}:${Account}:data-quality-job-definition/${DataQualityJobDefinitionName}

data-quality-job-definition

arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/${DeviceFleetName}/device/${DeviceName}

device

arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/${DeviceFleetName}

device-fleet

arn:${Partition}:sagemaker:${Region}:${Account}:domain/${DomainId}

domain

arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/${EdgeDeploymentPlanName}

edge-deployment-plan

arn:${Partition}:sagemaker:${Region}:${Account}:edge-packaging-job/${EdgePackagingJobName}

edge-packaging-job

arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/${EndpointName}

endpoint

arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/${EndpointConfigName}

endpoint-config

arn:${Partition}:sagemaker:${Region}:${Account}:experiment/${ExperimentName}

experiment

arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/${TrialName}

experiment-trial

arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/${TrialComponentName}

experiment-trial-component

arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/${FeatureGroupName}

feature-group

arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/${FlowDefinitionName}

flow-definition

arn:${Partition}:sagemaker:${Region}:${Account}:hub/${HubName}

hub

arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/${HubName}/${HubContentType}/${HubContentName}

hub-content

arn:${Partition}:sagemaker:${Region}:${Account}:human-task-ui/${HumanTaskUiName}

human-task-ui

arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/${HyperParameterTuningJobName}

hyper-parameter-tuning-job

arn:${Partition}:sagemaker:${Region}:${Account}:image/${ImageName}

image

arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/${InferenceComponentName}

inference-component

arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/${InferenceRecommendationsJobName}

inference-recommendations-job

arn:${Partition}:sagemaker:${Region}:${Account}:job/${JobCategory}/${JobName}

job

arn:${Partition}:sagemaker:${Region}:${Account}:labeling-job/${LabelingJobName}

labeling-job

arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/${MLflowAppId}

mlflow-app

arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/${MlflowTrackingServerName}

mlflow-tracking-server

arn:${Partition}:sagemaker:${Region}:${Account}:model/${ModelName}

model

arn:${Partition}:sagemaker:${Region}:${Account}:model-bias-job-definition/${ModelBiasJobDefinitionName}

model-bias-job-definition

arn:${Partition}:sagemaker:${Region}:${Account}:model-card/${ModelCardName}

model-card

arn:${Partition}:sagemaker:${Region}:${Account}:model-explainability-job-definition/${ModelExplainabilityJobDefinitionName}

model-explainability-job-definition

arn:${Partition}:sagemaker:${Region}:${Account}:model-package/${ModelPackageName}

model-package

arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/${ModelPackageGroupName}

model-package-group

arn:${Partition}:sagemaker:${Region}:${Account}:model-quality-job-definition/${ModelQualityJobDefinitionName}

model-quality-job-definition

arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/${MonitoringScheduleName}

monitoring-schedule

arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/${NotebookInstanceName}

notebook-instance

arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/${NotebookInstanceLifecycleConfigName}

notebook-instance-lifecycle-config

arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/${OptimizationJobName}

optimization-job

arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/${AppId}

partner-app

arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/${PipelineName}

pipeline

arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/${ProcessingJobName}

processing-job

arn:${Partition}:sagemaker:${Region}:${Account}:project/${ProjectName}

project

arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/${RandomString}

reserved-capacity

arn:${Partition}:sagemaker:${Region}:${Account}:space/${DomainId}/${SpaceName}

space

arn:${Partition}:sagemaker:${Region}:${Account}:studio-lifecycle-config/${StudioLifecycleConfigName}

studio-lifecycle-config

arn:${Partition}:sagemaker:${Region}:${Account}:training-job/${TrainingJobName}

training-job

arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/${TrainingPlanName}

training-plan

arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/${TransformJobName}

transform-job

arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/${DomainId}/${UserProfileName}

user-profile

arn:${Partition}:sagemaker:${Region}:${Account}:workteam/${WorkteamName}

workteam

Condition keys

Keys you can use in the Condition block of a policy that grants sagemaker:AddTags.

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair

sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} String

Filters access by a current metadata key and value pair associated with the model-package resource

sagemaker:CurrentModelLifeCycleStage String

Filters access by the current value of the Stage field in the model life cycle object associated with the model-package resource

sagemaker:CurrentModelLifeCycleStageStatus String

Filters access by the current value of the StageStatus field in the model life cycle object associated with the model-package resource

sagemaker:ResourceTag/${TagKey} String

Filters access by a tag key and value pair

Example IAM policy

A minimal policy that allows sagemaker:AddTags. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowSagemakerAddTags",
      "Effect": "Allow",
      "Action": "sagemaker:AddTags",
      "Resource": "*"
    }
  ]
}

Related actions in sagemaker

sagemaker:AccessModelPackage Read sagemaker:AddAssociation Write sagemaker:AssociateTrialComponent Write sagemaker:AttachClusterNodeVolume Write sagemaker:BatchAddClusterNodes Write sagemaker:BatchDeleteClusterNodes Write sagemaker:BatchDescribeModelPackage Read sagemaker:BatchGetMetrics Read sagemaker:BatchGetRecord Read sagemaker:BatchPutMetrics Write sagemaker:BatchWriteRecord Write sagemaker:CallMlflowAppApi Write

View all sagemaker actions →