管理標籤政策的先決條件和許可

此頁面說明在中管理標籤原則的必要條件和必要權限 AWS Organizations。

管理標籤政策的先決條件

需要符合下列條件才能使用標籤政策：

• 您的組織必須啟用所有功能。

• 您必須登入組織的管理帳戶。

• 您需要有管理標籤政策的許可中列出的許可。

若要評估是否符合標籤政策，請使用 AWS Resource Groups。如需評估合規性需求的相關資訊，請參閱 AWS Resource Groups 使用者指南中的先決條件和許可。

管理標籤政策的許可

下列範例IAM原則提供管理標籤原則的權限。

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ManageTagPolicies",
            "Effect": "Allow",
            "Action": [
                "organizations:ListPoliciesForTarget",
                "organizations:ListTargetsForPolicy",
                "organizations:DescribeEffectivePolicy",
                "organizations:DescribePolicy",
                "organizations:ListRoots",
                "organizations:DisableAWSServiceAccess",
                "organizations:DetachPolicy",
                "organizations:DeletePolicy",
                "organizations:DescribeAccount",
                "organizations:DisablePolicyType",
                "organizations:ListAWSServiceAccessForOrganization",
                "organizations:ListPolicies",
                "organizations:ListAccountsForParent",
                "organizations:ListAccounts",
                "organizations:EnableAWSServiceAccess",
                "organizations:ListCreateAccountStatus",
                "organizations:DescribeOrganization",
                "organizations:UpdatePolicy",
                "organizations:EnablePolicyType",
                "organizations:DescribeOrganizationalUnit",
                "organizations:AttachPolicy",
                "organizations:ListParents",
                "organizations:ListOrganizationalUnitsForParent",
                "organizations:CreatePolicy",
                "organizations:DescribeCreateAccountStatus"
            ],
            "Resource": "*"
        }
    ]
}

如需有關IAM策略和權限的詳細資訊，請參閱《使IAM用者指南》。