Openstack instance tagging
Supporting 3 features / api in tagging an instance in Openstack copute :
a. DescribeTags
b. CreateTags
c. DeleteTags
Following tentative policies to be added in mapping.json :
“CreateTags”:
{
“action”: “arn:acs:compute:CreateTags”,
“resources”: [
{
“resource”: “arn:acs:compute::Resource”,
“resourcePath” : “params.ResourceId.N”,
“isResourceValueRequired”: “False”
}
]
},
“DeleteTags”:
{
“action”: “arn:acs:compute:DeleteTags”,
“resources”: [
{
“resource”: “arn:acs:compute::Resource”,
“resourcePath” : “params.ResourceId.N”,
“isResourceValueRequired”: “True”
}
]
},
“DescribeTags”:
{
“action”: “arn:acs:compute:DescribeTags”
“resources”: [
{
“resource”: “arn:acs:compute::Resource”,
“resourcePath” : “params.ResourceId.N”,
“isResourceValueRequired”: “False”
}
]
},
Same mapping needs to be stored in IAM DB.
Note , here a new resource type Resource is added as compared to defaults like Images , Instances etc. so respective changes are required in IAM side .
Sample request and response: