Require specific tags as well as allowing for additional tags at user's discretion

0

Is there a way that I can enforce the existence/usage of 5 specific tag key values as well as allow developers and other individuals the ability to add additional tags as needed? Currently, in our development environment, I have the following configured on an IAM role that we assume for Terraform deployments, but if an individual were to add a tag key value not like the ones below, they would be met with an error.

Any guidance would be much appreciated since it seems as though everything I've tried thus far has failed.

    {
      "Sid": "S3",
      "Effect": "Allow",
      "Action": [
        "s3:*"
      ],
      "Resource": "*",
      "Condition": {
        "ForAllValues:StringEquals": {
          "aws:TagKeys": [
            "Application",
            "CreatedBy",
            "Department",
            "Environment"
            "Owner"
          ]
        }
      }
    },
1개 답변
0
profile pictureAWS
전문가
David
답변함 9달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠