aws kms tag-resource

Adds or edits tags on a customer managed key. AWS CLI reference

1 example 2 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To add a tag to a KMS key

The following tag-resource example adds "Purpose":"Test" and "Dept":"IT" tags to a customer managed KMS key. You can use tags like these to label KMS keys and create categories of KMS keys for permissions and auditing.

To specify the KMS key, use the key-id parameter. This example uses a key ID value, but you can use a key ID or key ARN in this command.

aws kms tag-resource --key-id a1b2c3d4-5678-90ab-cdef-EXAMPLE11111 --tags TagKey='Purpose',TagValue='Test' TagKey='Dept',TagValue='IT'

Identify

--key-idIdentifies a customer managed key in the account and Region.

--tagsOne or more tags.

This command produces no output. To view the tags on an AWS KMS KMS key, use the list-resource-tags command.

For more information about using tags in AWS KMS, see Tagging keys in the AWS Key Management Service Developer Guide.

Options

2 in the AWS CLI reference

--key-idIdentifies a customer managed key in the account and Region.

--tagsOne or more tags.