[ aws . resourcegroupstaggingapi ]
Applies one or more tags to the specified resources. Note the following:
Not all resources can have tags. For a list of services with resources that support tagging using this operation, see Services that support the Resource Groups Tagging API .
Each resource can have up to 50 tags. For other limits, see Tag Naming and Usage Conventions in the AWS General Reference.
You can only tag resources that are located in the specified AWS Region for the AWS account.
To add tags to a resource, you need the necessary permissions for the service that the resource belongs to as well as permissions for adding tags. For more information, see the documentation for each service.
Warning
Do not store personally identifiable information (PII) or other confidential or sensitive information in tags. We use tags to provide you with billing and administration services. Tags are not intended to be used for private or sensitive data.
See also: AWS API Documentation
See ‘aws help’ for descriptions of global parameters.
tag-resources
--resource-arn-list <value>
--tags <value>
[--cli-input-json | --cli-input-yaml]
[--generate-cli-skeleton <value>]
--resource-arn-list
(list)
Specifies the list of ARNs of the resources that you want to apply tags to.
An ARN (Amazon Resource Name) uniquely identifies a resource. For more information, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference .
(string)
Syntax:
"string" "string" ...
--tags
(map)
Specifies a list of tags that you want to add to the specified resources. A tag consists of a key and a value that you define.
key -> (string)
value -> (string)
Shorthand Syntax:
KeyName1=string,KeyName2=string
JSON Syntax:
{"string": "string"
...}
--cli-input-json
| --cli-input-yaml
(string)
Reads arguments from the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton
. If other arguments are provided on the command line, those values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally. This may not be specified along with --cli-input-yaml
.
--generate-cli-skeleton
(string)
Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input
, prints a sample input JSON that can be used as an argument for --cli-input-json
. Similarly, if provided yaml-input
it will print a sample input YAML that can be used with --cli-input-yaml
. If provided with the value output
, it validates the command inputs and returns a sample output JSON for that command.
See ‘aws help’ for descriptions of global parameters.
To attach a tag to a resource
The following tag-resources
example tags the specified resource with a key name and value.
aws resourcegroupstaggingapi tag-resources \
--resource-arn-list arn:aws:s3:::MyProductionBucket \
--tags Environment=Production,CostCenter=1234
Output:
{
"FailedResourcesMap": {}
}
For more information, see TagResources in the Resource Groups Tagging API Reference.
FailedResourcesMap -> (map)
A map containing a key-value pair for each failed item that couldn’t be tagged. The key is the ARN of the failed resource. The value is a
FailureInfo
object that contains an error code, a status code, and an error message. If there are no errors, theFailedResourcesMap
is empty.key -> (string)
value -> (structure)
Information about the errors that are returned for each failed resource. This information can include
InternalServiceException
andInvalidParameterException
errors. It can also include any valid error code returned by the AWS service that hosts the resource that the ARN key represents.The following are common error codes that you might receive from other AWS services:
InternalServiceException – This can mean that the Resource Groups Tagging API didn’t receive a response from another AWS service. It can also mean the the resource type in the request is not supported by the Resource Groups Tagging API. In these cases, it’s safe to retry the request and then call GetResources to verify the changes.
AccessDeniedException – This can mean that you need permission to calling tagging operations in the AWS service that contains the resource. For example, to use the Resource Groups Tagging API to tag a CloudWatch alarm resource, you need permission to call `
TagResources
http://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/API_TagResources.html`__ and `TagResource
http://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_TagResource.html`__ in the CloudWatch API.For more information on errors that are generated from other AWS services, see the documentation for that service.
StatusCode -> (integer)
The HTTP status code of the common error.
ErrorCode -> (string)
The code of the common error. Valid values include
InternalServiceException
,InvalidParameterException
, and any valid error code returned by the AWS service that hosts the resource that you want to tag.ErrorMessage -> (string)
The message of the common error.