Menu
AWS Billing and Cost Management
User Guide (Version 2.0)

AWS-Generated Cost Allocation Tags

The AWS-generated tag createdBy is a tag that AWS defines and applies to supported AWS resources for cost allocation purposes. To use the AWS-generated tag, you must activate them in the Billing and Cost Management console. After the tag is activated, AWS starts applying the tag to resources that are created after the AWS-generated tag is activated. The AWS-generated tag is available only in the Billing and Cost Management console and reports, and doesn't appear anywhere else in the AWS console, including the AWS Tag Editor. The createdBy tag does not count towards your tags per resource limit.

Note

Only master accounts in an organization and single accounts that are not members of an organization have access to the Cost Allocation Tags manager in the Billing console.

Important

AWS-generated cost allocation tags are applied on a best-effort basis. Issues with services that AWS-generated tags depend on, such as CloudTrail, can cause a gap in tagging.

The createdBy tag uses the following key-value definition:

Copy
key = aws:createdBy
Copy
value = account-type:account-ID or access-key:user-name or role session name

Not all values include all of the value parameters. For example, the value for a AWS-generated tag for a root account does not always have a user name.

Valid values for the account-type are Root, IAMUser, AssumedRole, and FederatedUser.

If the tag has an account-ID, then the account-id tracks the account number of the root account or federated user who created the resource. If the tag has an access-key, then the access-key tracks the IAM access key used, and, if applicable, the session role name.

The user-name is the user name, if one is available.

Here are some examples of tag values:

Copy
Root:1234567890 Root:1234567890:exampleUser IAMUser:EXAMPLEACCESSKEY:exampleUser AssumedRole:EXAMPLEACCESSKEY:exampleRole FederatedUser:1234567890:exampleUser

For more information about IAM users, roles, and federation, see the IAM User Guide.

The createdBy tag is applied only to the following services and resources after the following events:

AWS Product API or Console Event Resource Type
AWS CloudFormation (AWS CloudFormation)

CreateStack

Stack

AWS Data Pipeline (AWS Data Pipeline)

CreatePipeline

Pipeline

Amazon Elastic Compute Cloud (Amazon EC2)

CreateCustomerGateway

Customer gateway

CreateDhcpOptions

DHCP options

CreateImage

Image

CreateInternetGateway

Internet gateway

CreateNetworkAcl

Network ACL

CreateNetworkInterface

Network interface

CreateRouteTable

Route table

CreateSecurityGroup

Security group

CreateSnapshot

Snapshot

CreateSubnet

Subnet

CreateVolume

Volume

CreateVpc

VPC

CreateVpcPeeringConnection

VPC peering connection

CreateVpnConnection

VPN connection

CreateVpnGateway

VPN gateway

PurchaseReservedInstancesOffering

Reserved-instance

RequestSpotInstances

Spot-instance-request

RunInstance

Instance

Amazon ElastiCache (ElastiCache)

CreateSnapshot

Snapshot

CreateCacheCluster

Cluster

AWS Elastic Beanstalk (Elastic Beanstalk)

CreateEnvironment

Environment

CreateApplication

Application

Elastic Load Balancing (Elastic Load Balancing)

CreateLoadBalancer

Loadbalancer

Amazon Glacier (Amazon Glacier)

CreateVault

Vault

Amazon Kinesis (Kinesis)

CreateStream

Stream

Amazon Relational Database Service (Amazon RDS)

CreateDBInstanceReadReplica

Database

CreateDBParameterGroup

ParameterGroup

CreateDBSnapshot

Snapshot

CreateDBSubnetGroup

SubnetGroup

CreateEventSubscription

EventSubscription

CreateOptionGroup

OptionGroup

PurchaseReservedDBInstancesOffering

ReservedDBInstance

CreateDBInstance

Database

Amazon Redshift (Amazon Redshift)

CreateClusterParameterGroup

ParameterGroup

CreateClusterSnapshot

Snapshot

CreateClusterSubnetGroup

SubnetGroup

CreateCluster

Cluster

Amazon Route 53 (Amazon Route 53)

CreateHealthCheck

HealthCheck

CreatedHostedZone

HostedZone

Amazon Simple Storage Service (Amazon S3)

CreateBucket

Bucket

AWS Storage Gateway (AWS Storage Gateway)

ActivateGateway

Gateway