All Products
Search
Document Center

Resource Management:ListMultiAccountTagKeys

Last Updated:Jun 21, 2024

Queries the tag keys of resources within the management account or a member of a resource directory by using the management account of the resource directory or a delegated administrator account of Resource Center.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • The required resource types are displayed in bold characters.
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
resourcecenter:SearchMultiAccountResourcesRead
  • All Resources
    *
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
ScopestringYes

The search scope. You can set the value to one of the following items:

  • ID of a resource directory: Resources within the management account and all members of the resource directory are searched. You can call the GetResourceDirectory operation to obtain the ID.
  • ID of the Root folder: Resources within all members in the Root folder and the subfolders of the Root folder are searched. You can call the ListFoldersForParent operation to obtain the ID.
  • ID of a folder: Resources within all members in the folder are searched. You can call the ListFoldersForParent operation to obtain the ID.
  • ID of a member: Resources within the member are searched. You can call the ListAccounts operation to obtain the ID.
rd-r4****
MaxResultsintegerNo

The maximum number of entries to return on each page.

Valid values: 1 to 100.

Default value: 20.

10
NextTokenstringNo

The pagination token that is used in the next request to retrieve a new page of results.

If the total number of entries returned for the current request exceeds the value of the MaxResults parameter, the entries are truncated. In this case, you can use the token to initiate another request and obtain the remaining entries.

eyJzZWFyY2hBZnRlcnMiOlsiMTAwMTU2Nzk4MTU1OSJd****
TagKeystringNo

The tag key.

test_key
MatchTypestringNo

The matching mode. Valid values:

  • Equals: equal match
  • Prefix: match by prefix
Equals

Response parameters

ParameterTypeDescriptionExample
object

The returned result.

NextTokenstring

The pagination token that is used in the next request to retrieve a new page of results.

AAAAARfZmVDe9NvRXloR5+8CK9nNJufMdRA7W1miLC1P****
TagKeysarray

The tag keys.

string

A tag key.

test_key
RequestIdstring

The ID of the request.

FA6086F9-6363-51A5-A507-88E3201EBCCB

Examples

Sample success responses

JSONformat

{
  "NextToken": "AAAAARfZmVDe9NvRXloR5+8CK9nNJufMdRA7W1miLC1P****",
  "TagKeys": [
    "test_key"
  ],
  "RequestId": "FA6086F9-6363-51A5-A507-88E3201EBCCB"
}

Error codes

HTTP status codeError codeError messageDescription
400NoPermissionYou are not authorized to perform this operation.You are not authorized to perform the operation.
400InvalidParameter.MaxResultsThe specified parameter MaxResults is not valid.The MaxResults parameter is invalid.
400MultiAccountServiceNotEnabledMulti account ResourceCenter service is not enabled.The Resource Meta Center (RMC) service is not activated.
404NotExists.ResourceDirectoryThe resource directory for the account is not enabled.No resource directory is enabled for the account.
404NotExists.ResourceDirectory.FolderIdThe specified folder does not exist.The specified folder does not exist.
409NoPermission.ResourceDirectory.MemberAccountResourceDirectory Member Account is not authorized to perform this operation.You are not allowed to use a member of a resource directory to perform this operation. Use the management account of the resource directory to perform the operation.
409InvalidParameter.ScopeThe Scope is invalid.The Scope parameter is invalid
409InvalidParameter.MatchTypeThe specified parameter MatchType is not valid.The MatchType parameter is invalid.

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2023-05-05The Error code has changedsee changesets
Change itemChange content
Error CodesThe Error code has changed.
    Error Codes 400 change
    delete Error Codes: 404
    delete Error Codes: 409