# Tag Amazon Managed Service for Prometheus workspaces
<a name="tagging-workspaces"></a>

Tags are custom labels that can be assigned to a resource. They include a unique key and an optional value (in a key-value pair). Tags help you identify and organize your AWS resources. In Amazon Managed Service for Prometheus, workspaces (and rule groups namespaces) can be tagged. You can use the console, the AWS CLI, APIs, or SDKs to add, manage, and remove tags for these resources. In addition to identifying, organizing, and tracking your workspaces with tags, you can use tags in IAM policies to help control who can view and interact with your Amazon Managed Service for Prometheus resources.

Use the procedures in this section to work with tags for Amazon Managed Service for Prometheus workspaces.

**Topics**
+ [

# Add a tag to a workspace
](how-to-tag-workspace-add.md)
+ [

# View tags for a workspace
](how-to-tag-workspace-list.md)
+ [

# Edit tags for a workspace
](how-to-tag-workspace-update.md)
+ [

# Remove a tag from a workspace
](how-to-tag-workspace-delete.md)

# Add a tag to a workspace
<a name="how-to-tag-workspace-add"></a>

Adding tags to an Amazon Managed Service for Prometheus workspace can help you identify and organize your AWS resources and manage access to them. First, you add one or more tags (key-value pairs) to a workspace. After you have tags, you can create IAM policies to manage access to the workspace based on these tags. You can use the the console or the AWS CLI to add tags to an Amazon Managed Service for Prometheus workspace. 

**Important**  
Adding tags to a workspace can impact access to that workspace. Before you add a tag to a workspace, make sure to review any IAM policies that might use tags to control access to resources.

For more information about adding tags to an Amazon Managed Service for Prometheus workspace when you create it, see [Create a Amazon Managed Service for Prometheus workspace](AMP-create-workspace.md).

**Topics**
+ [

## Add a tag to a workspace (console)
](#how-to-tag-workspace-add-console)
+ [

## Add a tag to a workspace (AWS CLI)
](#how-to-tag-workspace-add-cli)

## Add a tag to a workspace (console)
<a name="how-to-tag-workspace-add-console"></a>

You can use the console to add one or more tags to a Amazon Managed Service for Prometheus workspace. 

1. Open the Amazon Managed Service for Prometheus console at [https://console.aws.amazon.com/prometheus/](https://console.aws.amazon.com/prometheus/home).

1. In the navigation pane, choose the menu icon.

1. Choose **All workspaces**.

1. Choose the workspace ID of the workspace that you want to manage.

1. Choose the **Tags** tab.

1. If no tags have been added to the Amazon Managed Service for Prometheus workspace, choose **Create tag**. Otherwise, choose **Manage tags**.

1. In **Key**, enter a name for the tag. You can add an optional value for the tag in **Value**. 

1. (Optional) To add another tag, choose **Add tag** again.

1. When you have finished adding tags, choose **Save changes**.

## Add a tag to a workspace (AWS CLI)
<a name="how-to-tag-workspace-add-cli"></a>

Follow these steps to use the AWS CLI to add a tag to an Amazon Managed Service for Prometheus workspace. To add a tag to a workspace when you create it, see [Create a Amazon Managed Service for Prometheus workspace](AMP-create-workspace.md).

In these steps, we assume that you have already installed a recent version of the AWS CLI or updated to the current version. For more information, see [Installing the AWS Command Line Interface](https://docs.aws.amazon.com/cli/latest/userguide/installing.html).

At the terminal or command line, run the **tag-resource** command, specifying the Amazon Resource Name (ARN) of the workspace where you want to add tags and the key and value of the tag you want to add. You can add more than one tag to an workspace. For example, to tag an Amazon Managed Service for Prometheus workspace named **My-Workspace** with two tags, a tag key named *Status* with the tag value of *Secret*, and a tag key named *Team* with the tag value of *My-Team*:

```
aws amp tag-resource --resource-arn arn:aws:aps:us-west-2:123456789012:workspaces/IDstring 
--tags Status=Secret,Team=My-Team
```

If successful, this command returns nothing.

# View tags for a workspace
<a name="how-to-tag-workspace-list"></a>

Tags can help you identify and organize your AWS resources and manage access to them. For more information about tagging strategies, see [Tagging AWS Resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html).

## View tags for an Amazon Managed Service for Prometheus workspace (console)
<a name="how-to-tag-workspace-list-console"></a>

You can use the console to view the tags associated with a Amazon Managed Service for Prometheus workspace. 

1. Open the Amazon Managed Service for Prometheus console at [https://console.aws.amazon.com/prometheus/](https://console.aws.amazon.com/prometheus/home).

1. In the navigation pane, choose the menu icon.

1. Choose **All workspaces**.

1. Choose the workspace ID of the workspace that you want to manage.

1. Choose the **Tags** tab.

## View tags for an Amazon Managed Service for Prometheus workspace (AWS CLI)
<a name="how-to-tag-workspace-list-cli"></a>

Follow these steps to use the AWS CLI to view the AWS tags for an workspace. If no tags have been added, the returned list is empty.

At the terminal or command line, run the **list-tags-for-resource** command. For example, to view a list of tag keys and tag values for a workspace:

```
aws amp list-tags-for-resource --resource-arn arn:aws:aps:us-west-2:123456789012:workspace/IDstring
```

If successful, this command returns information similar to the following:

```
{
    "tags": {
        "Status": "Secret",
        "Team": "My-Team"
    }
}
```

# Edit tags for a workspace
<a name="how-to-tag-workspace-update"></a>

You can change the value for a tag associated with a workspace. You can also change the name of the key, which is equivalent to removing the current tag and adding a different one with the new name and the same value as the other key. 

**Important**  
Editing tags for an Amazon Managed Service for Prometheus workspace can impact access to that workspace. Before you edit the name (key) or value of a tag for a workspace, make sure to review any IAM policies that might use the key or value for a tag to control access to resources such as repositories. 

## Edit a tag for an Amazon Managed Service for Prometheus workspace (console)
<a name="how-to-tag-workspace-update-console"></a>

You can use the console to edit the tags associated with a Amazon Managed Service for Prometheus workspace. 

1. Open the Amazon Managed Service for Prometheus console at [https://console.aws.amazon.com/prometheus/](https://console.aws.amazon.com/prometheus/home).

1. In the navigation pane, choose the menu icon.

1. Choose **All workspaces**.

1. Choose the workspace ID of the workspace that you want to manage.

1. Choose the **Tags** tab.

1. If no tags have been added to the workspace, choose **Create tag**. Otherwise, choose **Manage tags**.

1. In **Key**, enter a name for the tag. You can add an optional value for the tag in **Value**. 

1. (Optional) To add another tag, choose **Add tag** again.

1. When you have finished adding tags, choose **Save changes**.

## Edit tags for an Amazon Managed Service for Prometheus workspace (AWS CLI)
<a name="how-to-tag-workspace-update-cli"></a>

Follow these steps to use the AWS CLI to update a tag for a workspace. You can change the value for an existing key, or add another key. 

At the terminal or command line, run the **tag-resource** command, specifying the Amazon Resource Name (ARN) of the Amazon Managed Service for Prometheus workspace where you want to update a tag and specify the tag key and tag value:

```
aws amp tag-resource --resource-arn arn:aws:aps:us-west-2:123456789012:workspace/IDstring --tags Team=New-Team
```

# Remove a tag from a workspace
<a name="how-to-tag-workspace-delete"></a>

You can remove one or more tags associated with a workspace. Removing a tag does not delete the tag from other AWS resources that are associated with that tag.

**Important**  
Removing tags for a Amazon Managed Service for Prometheus workspace can impact access to that workspace. Before you remove a tag from a workspace, make sure to review any IAM policies that might use the key or value for a tag to control access to resources such as repositories. 

## Remove a tag from an Amazon Managed Service for Prometheus workspace (console)
<a name="how-to-tag-workspace-delete-console"></a>

You can use the console to remove the association between a tag and a workspace. 

1. Open the Amazon Managed Service for Prometheus console at [https://console.aws.amazon.com/prometheus/](https://console.aws.amazon.com/prometheus/home).

1. In the navigation pane, choose the menu icon.

1. Choose **All workspaces**.

1. Choose the workspace ID of the workspace that you want to manage.

1. Choose the **Tags** tab.

1. Choose **Manage tags**.

1. Find the tag that you want to delete, and choose **Remove**.

## Remove a tag from an Amazon Managed Service for Prometheus workspace (AWS CLI)
<a name="how-to-tag-workspace-delete-cli"></a>

Follow these steps to use the AWS CLI to remove a tag from an workspace. Removing a tag does not delete it, but simply removes the association between the tag and the workspace. 

**Note**  
If you delete an Amazon Managed Service for Prometheus workspace, all tag associations are removed from the deleted workspace. You do not have to remove tags before you delete a workspace.

At the terminal or command line, run the **untag-resource** command, specifying the Amazon Resource Name (ARN) of the workspace where you want to remove tags and the tag key of the tag you want to remove. For example, to remove a tag on a workspace named **My-Workspace** with the tag key *Status*:

```
aws amp untag-resource --resource-arn arn:aws:aps:us-west-2:123456789012:workspace/IDstring --tag-keys Status
```

If successful, this command returns nothing. To verify the tags associated with the workspace, run the **list-tags-for-resource** command.