What Can I Do If an Error Is Reported When I Configure Tags?

Symptom

• When you create or modify an alarm rule, the system displays a message indicating that the API for verifying tag compliance fails to be called or the tenant does not have sufficient permissions.
• When you add a tag to an alarm rule, the system displays a message indicating that the API for verifying tag compliance fails to be called or the tenant does not have sufficient permissions.
• When you search for resources by resource tag or manage resource tags on the Tag Management Service (TMS) console, the system displays a message indicating that the API for verifying tag compliance fails to be called or the tenant does not have sufficient permissions.

Procedure

1. Log in to the new IAM console.
2. In the navigation pane, choose Users.
3. In the user list, locate your username and click Authorize in the Operation column.
4. On the Authorize User page, select an assignment mode and identity policy.
   • Set Assign By to Identity policy.
   • For Identity Policy, select CESServiceFullAccessPolicy or customize one.
5. (Optional) Customize an identity policy. If you have selected CESServiceFullAccessPolicy for Identity Policy, skip this step.
   1. Click Create next to Identity Policy.
   2. On the Create Identity Policy page, enter a policy name.
   3. Set Policy View to JSON.
   4. Enter the policy content as follows:

      {
        "Version": "5.0",
        "Statement": [
          {
            "Effect": "Allow",
            "Action": [
              "ces:tags:create",
              "ces:tags:listResources"
            ]
          }
        ]
      }

   5. Click OK.
   6. On the Authorize User page, search for and select the created custom identity policy.
6. Click OK.