Queries a list of tags for one or more resources. You can query tags for resources by resource type or filter resources by tag. Each tag is a key-value pair.
Operation description
Usage notes
- Host consists of a project name and a Simple Log Service endpoint. You must specify a project in Host.
- An AccessKey pair is created and obtained. For more information, see AccessKey pair.
The AccessKey pair of an Alibaba Cloud account has permissions on all API operations. Using these credentials to perform operations in Simple Log Service is a high-risk operation. We recommend that you use a Resource Access Management (RAM) user to call API operations or perform routine O&M. To create a RAM user, log on to the RAM console. Make sure that the RAM user has the management permissions on Simple Log Service resources. For more information, see Create a RAM user and authorize the RAM user to access Simple Log Service.
- The information that is required to query logs is obtained. The information includes the name of the project to which the logs belong and the region of the project. For more information, see Manage a project
- For more information, see Authorization rules. The following types of resources are supported: project, Logstore, dashboard, machine group, and Logtail configuration.
Authentication resources
The following table describes the authorization information that is required for this operation. You can add the information to the Action element of a RAM policy statement to grant a RAM user or a RAM role the permissions to call this operation.
| Action | Resource |
|---|---|
log:ListTagResources | The resource format varies based on the resource type.-acs:log:{#regionId}:{#accountId}:project/{#ProjectName}-acs:log:${regionName}:${accountId}:project/${projectName}/logstore/${logstoreName}-acs:log:${regionName}:${accountId}:project/${projectName}/dashboard/${dashboardName}-acs:log:${regionName}:${accountId}:project/${projectName}/machinegroup/${machineGroupName}-acs:log:${regionName}:${accountId}:project/${projectName}/logtailconfig/${logtailConfigName} |
Debugging
Authorization information
The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:
- Operation: the value that you can use in the Action element to specify the operation on a resource.
- Access level: the access level of each operation. The levels are read, write, and list.
- Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
- The required resource types are displayed in bold characters.
- If the permissions cannot be granted at the resource level,
All Resourcesis used in the Resource type column of the operation.
- Condition Key: the condition key that is defined by the cloud service.
- Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
| Operation | Access level | Resource type | Condition key | Associated operation |
|---|---|---|---|---|
| log:ListTagResources | get | *Project acs:log:{#regionId}:{#accountId}:project/{#ProjectName} |
| none |
Request syntax
GET /tags HTTP/1.1
Request parameters
| Parameter | Type | Required | Description | Example |
|---|---|---|---|---|
| resourceType | string | Yes | The type of the resource. Valid values:
| project |
| resourceId | array | No | The IDs of the resources whose tags you want to query. You must specify at least one of resourceId and tags. | |
| string | No | The resource ID. In this example, a Logstore is used. projectName specifies the project name. # is used to concatenate strings. logstore specifies the Logstore name.
| ali-test-project | |
| tags | array<object> | No | The tags that you want to use to filter resources based on exact match. Each tag is a key-value pair. You must specify at least one of resourceId and tags. You can enter up to 20 tags. | |
| object | No | |||
| key | string | Yes | The key of the tag that you want to use to filter resources. For example, if you set the key to | key1 |
| value | string | No | The value of the tag that you want to use to filter resources. If you set the value to null, resources are filtered based only on the key of the tag. | value1 |
Response parameters
Examples
Sample success responses
JSONformat
{
"nextToken": "caeba0bbb2be03f84eb48b699f0a4883",
"tagResources": [
{
"resourceId": "ali-test-project",
"resourceType": "project",
"tagKey": "key1",
"tagValue": "value1"
}
]
}Error codes
For a list of error codes, visit the Service error codes.