@@ -455,7 +455,18 @@ namespace Model
455
455
* href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Using
456
456
* Cost Allocation Tags</a> in the Amazon Web Services Billing and Cost Management
457
457
* User Guide.</p> <p>You can specify up to 50 tags when creating a delivery
458
- * stream.</p>
458
+ * stream.</p> <p>If you specify tags in the <code>CreateDeliveryStream</code>
459
+ * action, Amazon Data Firehose performs an additional authorization on the
460
+ * <code>firehose:TagDeliveryStream</code> action to verify if users have
461
+ * permissions to create tags. If you do not provide this permission, requests to
462
+ * create new Firehose delivery streams with IAM resource tags will fail with an
463
+ * <code>AccessDeniedException</code> such as following.</p> <p>
464
+ * <b>AccessDeniedException</b> </p> <p>User: arn:aws:sts::x:assumed-role/x/x is
465
+ * not authorized to perform: firehose:TagDeliveryStream on resource:
466
+ * arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an
467
+ * identity-based policy.</p> <p>For an example IAM policy, see <a
468
+ * href="https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples">Tag
469
+ * example.</a> </p>
459
470
*/
460
471
inline const Aws::Vector<Tag>& GetTags () const { return m_tags; }
461
472
@@ -468,7 +479,18 @@ namespace Model
468
479
* href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Using
469
480
* Cost Allocation Tags</a> in the Amazon Web Services Billing and Cost Management
470
481
* User Guide.</p> <p>You can specify up to 50 tags when creating a delivery
471
- * stream.</p>
482
+ * stream.</p> <p>If you specify tags in the <code>CreateDeliveryStream</code>
483
+ * action, Amazon Data Firehose performs an additional authorization on the
484
+ * <code>firehose:TagDeliveryStream</code> action to verify if users have
485
+ * permissions to create tags. If you do not provide this permission, requests to
486
+ * create new Firehose delivery streams with IAM resource tags will fail with an
487
+ * <code>AccessDeniedException</code> such as following.</p> <p>
488
+ * <b>AccessDeniedException</b> </p> <p>User: arn:aws:sts::x:assumed-role/x/x is
489
+ * not authorized to perform: firehose:TagDeliveryStream on resource:
490
+ * arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an
491
+ * identity-based policy.</p> <p>For an example IAM policy, see <a
492
+ * href="https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples">Tag
493
+ * example.</a> </p>
472
494
*/
473
495
inline bool TagsHasBeenSet () const { return m_tagsHasBeenSet; }
474
496
@@ -481,7 +503,18 @@ namespace Model
481
503
* href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Using
482
504
* Cost Allocation Tags</a> in the Amazon Web Services Billing and Cost Management
483
505
* User Guide.</p> <p>You can specify up to 50 tags when creating a delivery
484
- * stream.</p>
506
+ * stream.</p> <p>If you specify tags in the <code>CreateDeliveryStream</code>
507
+ * action, Amazon Data Firehose performs an additional authorization on the
508
+ * <code>firehose:TagDeliveryStream</code> action to verify if users have
509
+ * permissions to create tags. If you do not provide this permission, requests to
510
+ * create new Firehose delivery streams with IAM resource tags will fail with an
511
+ * <code>AccessDeniedException</code> such as following.</p> <p>
512
+ * <b>AccessDeniedException</b> </p> <p>User: arn:aws:sts::x:assumed-role/x/x is
513
+ * not authorized to perform: firehose:TagDeliveryStream on resource:
514
+ * arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an
515
+ * identity-based policy.</p> <p>For an example IAM policy, see <a
516
+ * href="https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples">Tag
517
+ * example.</a> </p>
485
518
*/
486
519
inline void SetTags (const Aws::Vector<Tag>& value) { m_tagsHasBeenSet = true ; m_tags = value; }
487
520
@@ -494,7 +527,18 @@ namespace Model
494
527
* href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Using
495
528
* Cost Allocation Tags</a> in the Amazon Web Services Billing and Cost Management
496
529
* User Guide.</p> <p>You can specify up to 50 tags when creating a delivery
497
- * stream.</p>
530
+ * stream.</p> <p>If you specify tags in the <code>CreateDeliveryStream</code>
531
+ * action, Amazon Data Firehose performs an additional authorization on the
532
+ * <code>firehose:TagDeliveryStream</code> action to verify if users have
533
+ * permissions to create tags. If you do not provide this permission, requests to
534
+ * create new Firehose delivery streams with IAM resource tags will fail with an
535
+ * <code>AccessDeniedException</code> such as following.</p> <p>
536
+ * <b>AccessDeniedException</b> </p> <p>User: arn:aws:sts::x:assumed-role/x/x is
537
+ * not authorized to perform: firehose:TagDeliveryStream on resource:
538
+ * arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an
539
+ * identity-based policy.</p> <p>For an example IAM policy, see <a
540
+ * href="https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples">Tag
541
+ * example.</a> </p>
498
542
*/
499
543
inline void SetTags (Aws::Vector<Tag>&& value) { m_tagsHasBeenSet = true ; m_tags = std::move (value); }
500
544
@@ -507,7 +551,18 @@ namespace Model
507
551
* href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Using
508
552
* Cost Allocation Tags</a> in the Amazon Web Services Billing and Cost Management
509
553
* User Guide.</p> <p>You can specify up to 50 tags when creating a delivery
510
- * stream.</p>
554
+ * stream.</p> <p>If you specify tags in the <code>CreateDeliveryStream</code>
555
+ * action, Amazon Data Firehose performs an additional authorization on the
556
+ * <code>firehose:TagDeliveryStream</code> action to verify if users have
557
+ * permissions to create tags. If you do not provide this permission, requests to
558
+ * create new Firehose delivery streams with IAM resource tags will fail with an
559
+ * <code>AccessDeniedException</code> such as following.</p> <p>
560
+ * <b>AccessDeniedException</b> </p> <p>User: arn:aws:sts::x:assumed-role/x/x is
561
+ * not authorized to perform: firehose:TagDeliveryStream on resource:
562
+ * arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an
563
+ * identity-based policy.</p> <p>For an example IAM policy, see <a
564
+ * href="https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples">Tag
565
+ * example.</a> </p>
511
566
*/
512
567
inline CreateDeliveryStreamRequest& WithTags (const Aws::Vector<Tag>& value) { SetTags (value); return *this ;}
513
568
@@ -520,7 +575,18 @@ namespace Model
520
575
* href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Using
521
576
* Cost Allocation Tags</a> in the Amazon Web Services Billing and Cost Management
522
577
* User Guide.</p> <p>You can specify up to 50 tags when creating a delivery
523
- * stream.</p>
578
+ * stream.</p> <p>If you specify tags in the <code>CreateDeliveryStream</code>
579
+ * action, Amazon Data Firehose performs an additional authorization on the
580
+ * <code>firehose:TagDeliveryStream</code> action to verify if users have
581
+ * permissions to create tags. If you do not provide this permission, requests to
582
+ * create new Firehose delivery streams with IAM resource tags will fail with an
583
+ * <code>AccessDeniedException</code> such as following.</p> <p>
584
+ * <b>AccessDeniedException</b> </p> <p>User: arn:aws:sts::x:assumed-role/x/x is
585
+ * not authorized to perform: firehose:TagDeliveryStream on resource:
586
+ * arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an
587
+ * identity-based policy.</p> <p>For an example IAM policy, see <a
588
+ * href="https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples">Tag
589
+ * example.</a> </p>
524
590
*/
525
591
inline CreateDeliveryStreamRequest& WithTags (Aws::Vector<Tag>&& value) { SetTags (std::move (value)); return *this ;}
526
592
@@ -533,7 +599,18 @@ namespace Model
533
599
* href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Using
534
600
* Cost Allocation Tags</a> in the Amazon Web Services Billing and Cost Management
535
601
* User Guide.</p> <p>You can specify up to 50 tags when creating a delivery
536
- * stream.</p>
602
+ * stream.</p> <p>If you specify tags in the <code>CreateDeliveryStream</code>
603
+ * action, Amazon Data Firehose performs an additional authorization on the
604
+ * <code>firehose:TagDeliveryStream</code> action to verify if users have
605
+ * permissions to create tags. If you do not provide this permission, requests to
606
+ * create new Firehose delivery streams with IAM resource tags will fail with an
607
+ * <code>AccessDeniedException</code> such as following.</p> <p>
608
+ * <b>AccessDeniedException</b> </p> <p>User: arn:aws:sts::x:assumed-role/x/x is
609
+ * not authorized to perform: firehose:TagDeliveryStream on resource:
610
+ * arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an
611
+ * identity-based policy.</p> <p>For an example IAM policy, see <a
612
+ * href="https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples">Tag
613
+ * example.</a> </p>
537
614
*/
538
615
inline CreateDeliveryStreamRequest& AddTags (const Tag& value) { m_tagsHasBeenSet = true ; m_tags.push_back (value); return *this ; }
539
616
@@ -546,7 +623,18 @@ namespace Model
546
623
* href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Using
547
624
* Cost Allocation Tags</a> in the Amazon Web Services Billing and Cost Management
548
625
* User Guide.</p> <p>You can specify up to 50 tags when creating a delivery
549
- * stream.</p>
626
+ * stream.</p> <p>If you specify tags in the <code>CreateDeliveryStream</code>
627
+ * action, Amazon Data Firehose performs an additional authorization on the
628
+ * <code>firehose:TagDeliveryStream</code> action to verify if users have
629
+ * permissions to create tags. If you do not provide this permission, requests to
630
+ * create new Firehose delivery streams with IAM resource tags will fail with an
631
+ * <code>AccessDeniedException</code> such as following.</p> <p>
632
+ * <b>AccessDeniedException</b> </p> <p>User: arn:aws:sts::x:assumed-role/x/x is
633
+ * not authorized to perform: firehose:TagDeliveryStream on resource:
634
+ * arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an
635
+ * identity-based policy.</p> <p>For an example IAM policy, see <a
636
+ * href="https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples">Tag
637
+ * example.</a> </p>
550
638
*/
551
639
inline CreateDeliveryStreamRequest& AddTags (Tag&& value) { m_tagsHasBeenSet = true ; m_tags.push_back (std::move (value)); return *this ; }
552
640
0 commit comments