tnb:TagResource

Tagging

tnb:TagResource is a Tagging access-level action in the tnb service. Grants permission to add tags to the specified resource

Resource types

ARNs that tnb:TagResource can be scoped to in an IAM policy.

arn:${Partition}:tnb:${Region}:${Account}:function-instance/${FunctionInstanceId}

function-instance

arn:${Partition}:tnb:${Region}:${Account}:function-package/${FunctionPackageId}

function-package

arn:${Partition}:tnb:${Region}:${Account}:network-instance/${NetworkInstanceId}

network-instance

arn:${Partition}:tnb:${Region}:${Account}:network-operation/${NetworkOperationId}

network-operation

arn:${Partition}:tnb:${Region}:${Account}:network-package/${NetworkPackageId}

network-package

Condition keys

Keys you can use in the Condition block of a policy that grants tnb:TagResource.

aws:ResourceTag/${TagKey} String

Filters access by checking tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows tnb:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowTnbTagResource",
      "Effect": "Allow",
      "Action": "tnb:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in tnb

tnb:CancelSolNetworkOperation Write tnb:CreateSolFunctionPackage Write tnb:CreateSolNetworkInstance Write tnb:CreateSolNetworkPackage Write tnb:DeleteSolFunctionPackage Write tnb:DeleteSolNetworkInstance Write tnb:DeleteSolNetworkPackage Write tnb:GetSolFunctionInstance Read tnb:GetSolFunctionPackage Read tnb:GetSolFunctionPackageContent Read tnb:GetSolFunctionPackageDescriptor Read tnb:GetSolNetworkInstance Read

View all tnb actions →