s3:PutObjectTagging

cloudback · Dec 11, 2023 · c7b77b3 · c7b77b3
1 parent e366b74
commit c7b77b3
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 7 deletions.
diff --git a/content/custom-storages/amazon-s3-bucket-access-key.md b/content/custom-storages/amazon-s3-bucket-access-key.md
@@ -18,8 +18,9 @@ Amazon Simple Storage Service (Amazon S3) is an object storage service that offe
 - **s3:GetObject** - optional, for backup restore and instant download from Amazon S3 bucket
 - **s3:DeleteObject** - optional, for retention policy, automatic removal of outdated backups from Amazon S3 bucket
 - **s3:GetBucketLocation** - optional, required to automatically determine the `Service Endpoint URL`
-- **s3:PutObjectRetention** - optional, required for [S3 Object Lock](/features/s3-object-lock) `x-amz-object-lock-mode`
-- **s3:PutObjectLegalHold** - optional, required for [S3 Object Lock](/features/s3-object-lock) `x-amz-object-lock-legal-hold`
+- **s3:PutObjectRetention** - optional, required for the [S3 Object Lock](/features/s3-object-lock) header `x-amz-object-lock-mode`
+- **s3:PutObjectLegalHold** - optional, required for the [S3 Object Lock](/features/s3-object-lock) header `x-amz-object-lock-legal-hold`
+- **s3:PutObjectTagging** - optional, required for the [S3 Object Tagging](/features/s3-object-tag) header `x-amz-tagging`
 
 ## Set up Amazon S3 Bucket Access Key as a customer managed storage
 

diff --git a/content/custom-storages/amazon-s3-bucket.md b/content/custom-storages/amazon-s3-bucket.md
@@ -17,8 +17,9 @@ Amazon Simple Storage Service (Amazon S3) is an object storage service that offe
 - **s3:PutObject** - required, for backup archive upload to Amazon S3 bucket
 - **s3:GetObject** - optional, for backup restore and instant download from Amazon S3 bucket
 - **s3:DeleteObject** - optional, for retention policy, automatic removal of outdated backups from Amazon S3 bucket
-- **s3:PutObjectRetention** - optional, required for [S3 Object Lock](/features/s3-object-lock) `x-amz-object-lock-mode`
-- **s3:PutObjectLegalHold** - optional, required for [S3 Object Lock](/features/s3-object-lock) `x-amz-object-lock-legal-hold`
+- **s3:PutObjectRetention** - optional, required for the [S3 Object Lock](/features/s3-object-lock) header `x-amz-object-lock-mode`
+- **s3:PutObjectLegalHold** - optional, required for the [S3 Object Lock](/features/s3-object-lock) header `x-amz-object-lock-legal-hold`
+- **s3:PutObjectTagging** - optional, required for the [S3 Object Tagging](/features/s3-object-tag) header `x-amz-tagging`
 
 ## Set up Amazon S3 Bucket as a customer managed storage
 

diff --git a/content/features/s3-object-tag.md b/content/features/s3-object-tag.md
@@ -13,8 +13,11 @@ keywords: github backup, cloudback, amazon s3 object tag, s3 object tag, object
 
 ### HTTP headers for S3 Object Tagging
 
-#### x-amz-tagging
-The tag-set for the object. The tag-set must be encoded as URL Query parameters. (For example, "Key1=Value1").
+**x-amz-tagging**: The tag-set for the object.
+
+- The tag-set must be encoded as URL Query parameters. (For example, "Key1=Value1").
+
+> **Important:** `s3:PutObjectTagging` permission is required. You should grant the permission at a bucket level and at an access point level if applicable.
 
 Example:
 ```
@@ -33,7 +36,9 @@ Example:
 x-amz-tagging: RepositoryName={{ context.RepositoryName }}&AccountName={{ context.AccountName }}
 ```
 
-### Storage wizard
+### Configure your storage in the Storage Wizard dialog
+
+You can add an additional header using the [Storage Wizard](/custom-storages/#setting-up-a-customer-managed-storage) dialog. Click on the `+ New storage` or `Edit Storage` button in the middle of the repository card settings. Fill in the required details for the storage and you will see the `Additional HTTP headers` section. Add the `x-amz-tagging` header with the value you need.
 
 Additional HTTP headers are supported for all S3 compatible storages: