Skip to main content

How to manage tags on resources

Stephanie R.
Updated

Learn how to manage and use tags on your OVHcloud products and how to use them in IAM policies.

 

Requirements

 

Instructions

Managing Tags via the Control Panel

You can manage OVHcloud product tags through the general tag management interface or dedicated interfaces within the products.

Tags are metadata in the form of key-value pairs added to OVHcloud resources, which you can use in IAM policies or for resource categorization.

 

Tag Manager

Tag Manager is the interface that allows you to manage your tags across all your OVHcloud products in a transversal manner.

The Tag Manager page displays all the tags currently placed on your resources.

For each tag, the dashboard shows the number of resources associated with this tag and the type of tag.

There are three types of tags:

  • Custom: Created and managed by you.
  • Predefined: Created by OVHcloud; you are responsible for assigning this type of tag to your resources.
  • System: Created and automatically assigned by OVHcloud to your resources (cannot be deleted).

Unassigned predefined tags and system tags do not appear by default and must be displayed via the Quick filters button.

console_tag-manager.PNG

By clicking on the tag, you can access the tag details with the list of concerned resources.

console_tagManager_tagDetails.PNG

It is then possible to assign this tag to other resources via the + Assign tag button. The list of all resources in the account is then displayed, allowing multiple selections.

A filter field is present on the right to facilitate searching for resources.

On the contrary, by selecting resources in the tag details, it is possible to remove the tag from them via the X Unassign Tag button.

 

Product dashboard

For some OVHcloud products, an interface has been added to manage tags directly from the resource management dashboard.

Tag Manager

The tag management interface allows you to add or remove tags from the resource.

Tag Manager

It is possible to either select one or more tags from the list of predefined tags or enter your own tags by typing the keys and values directly into the fields.

 

Managing Tags via API

You can also manage tags via the OVHcloud API:

Method Path Description
POST /iam/resource/{resourceURN}/tag Add a tag to a resource
DEL /iam/resource/{resourceURN}/tag/{key} Remove a tag from a resource

The tag must be specified in the following format:

{
  "key": "environment",
  "value": "production"
}

 

Using Tags in IAM Policies

Tags can be used as conditions in IAM policies using the resource.Tag(tag_key) condition.

For example, the following policy grants rights to all VPS with the tag Environment:Production:

{
  "conditions": {
    "conditions": [
      {
        "operator": "MATCH",
        "values": {
          "resource.Tag(Environment)": "Production"
        }
      }
    ],
    "operator": "AND"
  },
  "description": "Give access to VPS with tag Environment:Production",
  "identities": [
    "urn:v1:us:identity:group:aa1-ovh/devs"
  ],
  "name": "vps-production",
  "permissions": {
    "allow": [
      {
        "action": "vps:apiovh:*"
      }
    ]
  },
  "resources": [
    {
      "urn": "urn:v1:us:resource:vps:*"
    }
  ]
}

 

Go further

For more information and tutorials, please see our other Manage & Operate support guides or explore the guides for other OVHcloud products and services.

Related articles