Trouble creating tags for IoT policies using CDK

0

Something like the following does not work for me, but it does if I change the construct from an IoT policy construct to, say, an S3 bucket construct.

cdk.Tags.of(iotPolicy).add('Name', 'Value');

Hope this explanation is enough to work on. If not, please let me know.

Thanks Gary

gary
已提問 1 年前檢視次數 294 次
2 個答案
1
已接受的答案

Hi Gary. The underlying issue is that CloudFormation has a tags property for S3 buckets, but it doesn't have a tags property for IoT policies. I can't find any specific discussion about tags for IoT policies, but here's a similar issue for IAM Managed Policies: https://github.com/aws-cloudformation/cloudformation-coverage-roadmap/issues/819

profile pictureAWS
專家
Greg_B
已回答 1 年前
profile picture
專家
已審閱 7 天前
profile picture
專家
已審閱 1 個月前
  • Hi Greg, I can tag an IoT policy using the console but I accept that the coverage isn't there. Thanks.

0

To add onto Greg's response, most AWS IoT resources can be tagged, but it has to happen after the resource has been created. Also note that AWS IoT Things and Certificates are resources than cannot be tagged at present.

Once a resource has been created, the TagResource API can be called to apply tags for use in IAM ABAC, cost allocation, etc. Via CDK this could be accomplished by creating a level 2 or 3 construct that takes in the Arn of created resource along with the key value pairs of the tags, then use a custom resource to make the needed API call(s).

AWS
Gavin_A
已回答 1 年前
profile picture
專家
已審閱 1 個月前
  • Thanks Gavin

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南