TagResources
Applies one or more tags to the specified resources. Note the following:
-
Not all resources can have tags. For a list of services with resources that support tagging using this operation, see Services that support the Resource Groups Tagging API. If the resource doesn't yet support this operation, the resource's service might support tagging using its own API operations. For more information, refer to the documentation for that service.
-
Each resource can have up to 50 tags. For other limits, see Tag Naming and Usage Conventions in the AWS General Reference.
-
You can only tag resources that are located in the specified AWS Region for the AWS account.
-
To add tags to a resource, you need the necessary permissions for the service that the resource belongs to as well as permissions for adding tags. For more information, see the documentation for each service.
-
When you use the AWS Resource Groups Tagging API to update tags for AWS CloudFormation stack sets, AWS calls the AWS CloudFormation
UpdateStack
operation. This operation may initiate additional resource property updates in addition to the desired tag updates. To avoid unexpected resource updates, AWS recommends that you only apply or update tags to your CloudFormation stack sets using AWS CloudFormation.
Important
Do not store personally identifiable information (PII) or other confidential or sensitive information in tags. We use tags to provide you with billing and administration services. Tags are not intended to be used for private or sensitive data.
Minimum permissions
In addition to the tag:TagResources
permission required by this
operation, you must also have the tagging permission defined by the service that created
the resource. For example, to tag an Amazon EC2 instance using the TagResources
operation, you must have both of the following permissions:
-
tag:TagResources
-
ec2:CreateTags
Note
In addition, some services might have specific requirements for tagging some types of
resources. For example, to tag an Amazon S3 bucket, you must also have the
s3:GetBucketTagging
permission. If the expected minimum permissions
don't work, check the documentation for that service's tagging APIs for more
information.
Request Syntax
{
"ResourceARNList": [ "string
" ],
"Tags": {
"string
" : "string
"
}
}
Request Parameters
For information about the parameters that are common to all actions, see Common Parameters.
The request accepts the following data in JSON format.
- ResourceARNList
-
Specifies the list of ARNs of the resources that you want to apply tags to.
An ARN (Amazon Resource Name) uniquely identifies a resource. For more information, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Type: Array of strings
Array Members: Minimum number of 1 item. Maximum number of 20 items.
Length Constraints: Minimum length of 1. Maximum length of 1011.
Pattern:
[\s\S]*
Required: Yes
- Tags
-
Specifies a list of tags that you want to add to the specified resources. A tag consists of a key and a value that you define.
Type: String to string map
Map Entries: Maximum number of 50 items.
Key Length Constraints: Minimum length of 1. Maximum length of 128.
Key Pattern:
[\s\S]*
Value Length Constraints: Minimum length of 0. Maximum length of 256.
Value Pattern:
[\s\S]*
Required: Yes
Response Syntax
{
"FailedResourcesMap": {
"string" : {
"ErrorCode": "string",
"ErrorMessage": "string",
"StatusCode": number
}
}
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
The following data is returned in JSON format by the service.
- FailedResourcesMap
-
A map containing a key-value pair for each failed item that couldn't be tagged. The key is the ARN of the failed resource. The value is a
FailureInfo
object that contains an error code, a status code, and an error message. If there are no errors, theFailedResourcesMap
is empty.Type: String to FailureInfo object map
Key Length Constraints: Minimum length of 1. Maximum length of 1011.
Key Pattern:
[\s\S]*
Errors
For information about the errors that are common to all actions, see Common Errors.
- InternalServiceException
-
The request processing failed because of an unknown error, exception, or failure. You can retry the request.
HTTP Status Code: 500
- InvalidParameterException
-
The request failed because of one of the following reasons:
-
A required parameter is missing.
-
A provided string parameter is malformed.
-
An provided parameter value is out of range.
-
The target ID is invalid, unsupported, or doesn't exist.
-
You can't access the Amazon S3 bucket for report storage. For more information, see Additional Requirements for Organization-wide Tag Compliance Reports in the AWS Organizations User Guide.
-
The partition specified in an ARN parameter in the request doesn't match the partition where you invoked the operation. The partition is specified by the second field of the ARN.
HTTP Status Code: 400
-
- ThrottledException
-
The request failed because it exceeded the allowed frequency of submitted requests.
HTTP Status Code: 400
Examples
Example
This example illustrates one usage of TagResources.
Sample Request
POST / HTTP/1.1
Host: tagging.us-west-2.amazonaws.com
Accept-Encoding: identity
Content-Length: 82
X-Amz-Target: ResourceGroupsTaggingAPI_20170126.TagResources
X-Amz-Date: 20170421T214834Z
User-Agent: aws-cli/1.11.79 Python/2.7.9 Windows/7 botocore/1.5.42
Content-Type: application/x-amz-json-1.1
Authorization: AUTHPARAMS
{
"ResourceARNList": [
"arn:aws:s3:::example_bucket"
],
"Tags": {
"key": "Example_key"
}
}
Sample Response
HTTP/1.1 200 OK
x-amzn-RequestId: 45352206-26dc-11e7-8812-6fb02084e31d
Content-Type: application/x-amz-json-1.1
Content-Length: 0
Date: Fri, 21 Apr 2017 21:48:35 GMT
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: