Openstack instance tagging

Supporting 3 features / api in tagging an instance in Openstack copute :

a. DescribeTags

b. CreateTags

c. DeleteTags

Following tentative policies to be added in mapping.json :

“CreateTags”:
{
“action”: “arn:acs:compute:CreateTags”,
“resources”: [
{
“resource”: “arn:acs:compute::Resource”,
“resourcePath” : “params.ResourceId.N”,
“isResourceValueRequired”: “False”
}
]
},
“DeleteTags”:
{
“action”: “arn:acs:compute:DeleteTags”,
“resources”: [
{
“resource”: “arn:acs:compute::Resource”,
“resourcePath” : “params.ResourceId.N”,
“isResourceValueRequired”: “True”
}
]
},
“DescribeTags”:
{
“action”: “arn:acs:compute:DescribeTags”,
“resources”: [
{
“resource”: “arn:acs:compute::Resource”,
“resourcePath” : “params.ResourceId.N”,
“isResourceValueRequired”: “False”
}
]
},

Same mapping needs to be stored in IAM DB.

Note , here a new resource type Resource is added as compared to defaults like Images , Instances etc. so respective changes are required in IAM side .

Sample request and response: