'Create a IAM policy on tags and resources
Can I create a policy that deny removing a specific tag on an AWS resource or secret and allow creating other tags on the same resource?
For example I have a resource with tag "Dont touch" I would like to deny others to remove or edit this tag but allow others to add whatever other tags that they want. Is this possible? How?
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|