vpc-lattice:TagResource

Tagging

vpc-lattice:TagResource is a Tagging access-level action in the vpc-lattice service. Grants permission to tag a vpc-lattice resource

Resource types

ARNs that vpc-lattice:TagResource can be scoped to in an IAM policy.

arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/${AccessLogSubscriptionId}

AccessLogSubscription

arn:${Partition}:vpc-lattice:${Region}:${Account}:domainverification/${DomainVerificationId}

DomainVerification

arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}/listener/${ListenerId}

Listener

arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/${ResourceConfigurationId}

ResourceConfiguration

arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceendpointassociation/${ResourceEndpointAssociationId}

ResourceEndpointAssociation

arn:${Partition}:vpc-lattice:${Region}:${Account}:resourcegateway/${ResourceGatewayId}

ResourceGateway

arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}/listener/${ListenerId}/rule/${RuleId}

Rule

arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}

Service

arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/${ServiceNetworkId}

ServiceNetwork

arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkresourceassociation/${ServiceNetworkResourceAssociationId}

ServiceNetworkResourceAssociation

arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkserviceassociation/${ServiceNetworkServiceAssociationId}

ServiceNetworkServiceAssociation

arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetworkvpcassociation/${ServiceNetworkVpcAssociationId}

ServiceNetworkVpcAssociation

arn:${Partition}:vpc-lattice:${Region}:${Account}:targetgroup/${TargetGroupId}

TargetGroup

Condition keys

Keys you can use in the Condition block of a policy that grants vpc-lattice:TagResource.

aws:RequestTag/${TagKey} String

Filters access by the presence of tag key-value pairs in the request

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

aws:TagKeys ArrayOfString

Filters access by the presence of tag keys in the request

vpc-lattice:AuthType String

Filters access by the auth type specified in the request

vpc-lattice:CreateAction String

Filters access by the name of a resource-creating API action

vpc-lattice:DomainName String

Filters access by the domain name

vpc-lattice:PrivateDnsPreference String

Filters access by the private dns preference

vpc-lattice:PrivateDnsSpecifiedDomains ArrayOfString

Filters access by the private dns domains

vpc-lattice:Protocol String

Filters access by the protocol specified in the request

vpc-lattice:ResourceConfigurationArn ARN

Filters access by the ARN of a resource configuration

vpc-lattice:SecurityGroupIds ArrayOfString

Filters access by the IDs of security groups

vpc-lattice:ServiceArn ARN

Filters access by the ARN of a service

vpc-lattice:ServiceNetworkArn ARN

Filters access by the ARN of a service network

vpc-lattice:TargetGroupArns ArrayOfARN

Filters access by the ARNs of target groups

vpc-lattice:VpcEndpointId String

Filters access by the ID of a VPC endpoint

vpc-lattice:VpcId String

Filters access by the ID of a virtual private cloud (VPC)

Example IAM policy

A minimal policy that allows vpc-lattice:TagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowVpclatticeTagResource",
      "Effect": "Allow",
      "Action": "vpc-lattice:TagResource",
      "Resource": "*"
    }
  ]
}

Related actions in vpc-lattice

View all vpc-lattice actions →