Posted On: Nov 15, 2018

Today, AWS Identity and Access Management (IAM) made it easier for you to manage your IAM resources by enabling you to add tags to your IAM users and roles (also known as IAM principals) principals in the AWS China (Beijing) Region, Operated by Sinnet and in AWS China (Ningxia) Region, Operated by NWCD. Tags enable you to add customizable key-value pairs to resources, and many AWS services support tagging of AWS resources.

Now, you can use tags to add custom attributes such as email address, project, and cost center to your IAM principals. Additionally, tags on IAM principals simplify permissions management. For example, you can author a policy that allows a user to assume all roles for a specific project by using a tag. As you add roles with that tag, users gain permissions to assume those roles automatically. To learn more about how to add tags to IAM users and roles, please visit AWS Identity and Access Management.