View a markdown version of this page

Add or remove tags on existing recovery points - AWS Backup
Required permissionsAdd or remove tags using the consoleAdd or remove tags using the AWS CLI

Add or remove tags on existing recovery points

In addition to copying tags from source resources at backup creation time, you can add, modify, or remove tags on existing recovery points.

Important

You can only manage tags via the AWS Backup console and API for recovery points of resources that are fully managed by AWS Backup. For non-fully managed resources (such as Amazon EC2, Amazon EBS, Amazon RDS, and Aurora), the Manage tags option is not available in the console. To manage tags on these recovery points, use the underlying service's tagging capabilities instead.

Required permissions

The IAM role or user performing the tagging operation must have the following permissions:

  • backup:TagResource – Required to add or modify tags on a recovery point.

  • backup:UntagResource – Required to remove tags from a recovery point.

  • backup:ListTags – Required to view existing tags on a recovery point.

Add or remove tags using the console

  1. Open the AWS Backup console at https://console.aws.amazon.com/backup/.

  2. In the navigation pane, choose Backup vaults.

  3. Choose the backup vault that contains the recovery point you want to tag.

  4. Under Recovery points, choose the Recovery point ID of the backup you want to tag.

  5. In the Tags section, choose Manage tags.

  6. To add a tag, choose Add tag, then enter a Key and an optional Value.

    To remove a tag, choose Remove next to the tag you want to delete.

  7. Choose Save.

Add or remove tags using the AWS CLI

Add tags to a recovery point:

aws backup tag-resource \
    --resource-arn arn:aws:backup:us-east-1:123456789012:recovery-point:abcdef12-3456-7890-abcd-ef1234567890 \
    --tags Key1=Value1,Key2=Value2

Remove tags from a recovery point:

aws backup untag-resource \
    --resource-arn arn:aws:backup:us-east-1:123456789012:recovery-point:abcdef12-3456-7890-abcd-ef1234567890 \
    --tag-key-list Key1 Key2

List tags on a recovery point:

aws backup list-tags \
    --resource-arn arn:aws:backup:us-east-1:123456789012:recovery-point:abcdef12-3456-7890-abcd-ef1234567890

For more information, see TagResource, UntagResource, and ListTags in the AWS Backup API Reference.