Tagging resources in DynamoDB - Amazon DynamoDB
Setting permissions to filter by tagsAdding tags to new or existing tables (AWS Management Console)Adding tags to new or existing tables (AWS CLI)

Tagging resources in DynamoDB

You can use the Amazon DynamoDB console or the AWS Command Line Interface (AWS CLI) to add, list, edit, or delete tags. You can then activate these user-defined tags so that they appear on the AWS Billing and Cost Management console for cost allocation tracking. For more information, see Using DynamoDB tags to create cost allocation reports.

For bulk editing, you can also use Tag Editor on the AWS Management Console. For more information, see Working with Tag Editor.

To use the DynamoDB API instead, see the following operations in the Amazon DynamoDB API Reference:

Setting permissions to filter by tags

To use tags to filter your table list in the DynamoDB console, make sure your user's policies include access to the following operations:

  • tag:GetTagKeys

  • tag:GetTagValues

You can access these operations by attaching a new IAM policy to your user by following the steps below.

  1. Go to the IAM console with an Admin user.

  2. Select "Policies" in the left navigation menu.

  3. Select "Create policy."

  4. Paste the following policy into the JSON editor.

    {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "tag:GetTagKeys",
                "tag:GetTagValues"
            ],
            "Resource": "*"
        }
    ]
}

  5. Complete the wizard and assign a name to the policy (for example, TagKeysAndValuesReadAccess).

  6. Select "Users" in the left navigation menu.

  7. From the list, select the user you normally use to access the DynamoDB console.

  8. Select "Add permissions."

  9. Select "Attach existing policies directly."

  10. From the list, select the policy you created previously.

  11. Complete the wizard.

Adding tags to new or existing tables (AWS Management Console)

You can use the DynamoDB console to add tags to new tables when you create them, or to add, edit, or delete tags for existing tables.

To tag resources on creation (console)

  1. Sign in to the AWS Management Console and open the DynamoDB console at https://console.aws.amazon.com/dynamodb/.

  2. In the navigation pane, choose Tables, and then choose Create table.

  3. On the Create DynamoDB table page, provide a name and primary key. In the Tags section, choose Add new tag and enter the tags that you want to use.

    For information about tag structure, see Tagging restrictions in DynamoDB.

    For more information about creating tables, see Basic operations on DynamoDB tables.

To tag existing resources (console)

Open the DynamoDB console at https://console.aws.amazon.com/dynamodb/.

  1. In the navigation pane, choose Tables.

  2. Choose a table in the list, and then choose the Additional settings tab. You can add, edit, or delete your tags in the Tags section at the bottom of the page.

Adding tags to new or existing tables (AWS CLI)

The following examples show how to use the AWS CLI to specify tags when you create tables and indexes, and to tag existing resources.

To tag resources on creation (AWS CLI)

  • The following example creates a new Movies table and adds the Owner tag with a value of blueTeam: 

    aws dynamodb create-table \
    --table-name Movies \
    --attribute-definitions AttributeName=Title,AttributeType=S \
    --key-schema AttributeName=Title,KeyType=HASH \
    --provisioned-throughput ReadCapacityUnits=5,WriteCapacityUnits=5 \
    --tags Key=Owner,Value=blueTeam
To tag existing resources (AWS CLI)

  • The following example adds the Owner tag with a value of blueTeam for the Movies table: 

    aws dynamodb tag-resource \
    --resource-arn arn:aws:dynamodb:us-east-1:123456789012:table/Movies \
    --tags Key=Owner,Value=blueTeam
To list all tags for a table (AWS CLI)

  • The following example lists all the tags that are associated with the Movies table:

    aws dynamodb list-tags-of-resource \
    --resource-arn arn:aws:dynamodb:us-east-1:123456789012:table/Movies