Posted On: Nov 15, 2018

Today, Amazon Identity and Access Management (IAM) made it easier for you to manage your IAM resources by enabling you to add tags to your IAM users and roles (also known as IAM principals) principals in the Amazon Web Services China (Beijing) Region, Operated by Sinnet and in Amazon Web Services China (Ningxia) Region, Operated by NWCD. Tags enable you to add customizable key-value pairs to resources, and many Amazon services support tagging of Amazon Web Services resources.

Now, you can use tags to add custom attributes such as email address, project, and cost center to your IAM principals. Additionally, tags on IAM principals simplify permissions management. For example, you can author a policy that allows a user to assume all roles for a specific project by using a tag. As you add roles with that tag, users gain permissions to assume those roles automatically. To learn more about how to add tags to IAM users and roles, please visit Amazon Web Services Identity and Access Management.