All Products
Search
Document Center

Virtual Private Cloud:DescribeTagKeys

Last Updated:Aug 28, 2026

Queries tag keys.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

vpc:DescribeTagKeys

get

*All Resource

*

None None

Request parameters

Parameter

Type

Required

Description

Example

ResourceType

string

No

The resource type. Valid values:

  • VPC: virtual private cloud (VPC)

  • VSWITCH: vSwitch

  • ROUTETABLE: route table

  • EIP: elastic IP address (EIP)

  • VpnGateway: VPN gateway

  • NATGATEWAY: NAT gateway

  • COMMONBANDWIDTHPACKAGE: EIP bandwidth plan

VPC

Keyword

string

No

The tag keys.

keyword

RegionId

string

Yes

The region ID of the resource.

You can call the DescribeRegions operation to query the most recent region list.

cn-hangzhou

NextToken

string

No

The pagination token for the next query. Valid values:

  • If this is your first query or no subsequent query is needed, ignore this parameter.

  • To retrieve the next page of results, set this parameter to the NextToken value returned from the previous call.

FFmyTO70tTpLG6I3FmYAXGKPd****

MaxResult

integer

No

The number of entries per page. Valid values: 1 to 50. Default value: 50.

50

ResourceId

array

No

The IDs of the resources to query. You can specify up to 20 IDs.

string

No

The resource ID. You can specify up to 50 IDs.

Note

If you set this parameter, you must set ResourceType.

vpc-bp16qjewdsunr41m1****

Response elements

Element

Type

Description

Example

object

object

NextToken

string

The pagination token for the next query. Valid values:

  • If NextToken is not returned, no more results are available.

  • If NextToken is returned, pass it in the next request to retrieve additional results.

FFmyTO70tTpLG6I3FmYAXGKPd****

RequestId

string

The ID of the request.

DE65F6B7-7566-4802-9007-96F2494AC512

TagKeys

object

TagKey

array<object>

The list of tag keys.

object

Type

string

The type of the tag key. Valid values:

  • Custom: custom

  • System: system

Custom

TagKey

string

The tag key.

FinanceDept

Examples

Success response

JSON format

{
  "NextToken": "FFmyTO70tTpLG6I3FmYAXGKPd****",
  "RequestId": "DE65F6B7-7566-4802-9007-96F2494AC512",
  "TagKeys": {
    "TagKey": [
      {
        "Type": "Custom",
        "TagKey": "FinanceDept"
      }
    ]
  }
}

Error codes

HTTP status code

Error code

Error message

Description

400 BothEmpty.TagsAndResources The specified Tags and ResourcesIds are not allow to both empty. The tags and resource groups cannot be empty at the same time.
400 MissingParameter.TagKey The input parameter TagKey that is mandatory for processing this request is not supplied. The TagKey parameter is not set.
400 MissingParameter.TagValue The input parameter TagValue that is mandatory for processing this request is not supplied. The TagValue parameter is not set.
400 InvalidTagKey The tag keys are not valid. The tag index is invalid.
400 InvalidTagValue The tag values are not valid. The tag value is invalid.
400 MissingParam %s
400 InvalidInstanceType.NotFound The instance type is not found The instance type is not found.
400 InvalidInstanceIds.NotFound The instanceIds are not found The instance ID is not found.
400 Forbidden.TagKeys The request do not allow to operate the tag keys You do not have the permissions to set the TagKeys parameter.
400 QuotaExceeded.TagNum Custom Tags quota exceeded The upper limit is reached.
400 Forbidden.NotAllowedCategary The System tag is not valid The error message returned because the system tag is invalid.
400 Forbidden.TagKey.Duplicated The specified tag key already exists. The tag resources are duplicate.
400 SizeLimitExceeded.TagNum The maximum number of tags is exceeded. The number of tags has reached the upper limit.
400 SizeLimitExceeded.ResourceId The maximum number of resource IDs is exceeded. The number of resource group IDs has reached the upper limit.
403 Forbidden User not authorized to operate on the specified resource. You do not have the permissions to manage the specified resource. Apply for the permissions and try again.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.