API version 2017-01-26 of the Amazon Resource Groups Tagging API SDK configuration.

The target of the operation is currently being modified by a different request. Try again later.

The request was denied because performing this operation violates a constraint.

Some of the reasons in the following list might not apply to this specific operation.

• You must meet the prerequisites for using tag policies. For information, see Prerequisites and Permissions for Using Tag Policies in the Organizations User Guide.
• You must enable the tag policies service principal (tagpolicies.tag.amazonaws.com) to integrate with Organizations For information, see EnableAWSServiceAccess.
• You must have a tag policy attached to the organization root, an OU, or an account.

The request processing failed because of an unknown error, exception, or failure. You can retry the request.

This error indicates one of the following:

• A parameter is missing.
• A malformed string was supplied for the request parameter.
• An out-of-range value was supplied for the request parameter.
• The target ID is invalid, unsupported, or doesn't exist.
• You can't access the Amazon S3 bucket for report storage. For more information, see Additional Requirements for Organization-wide Tag Compliance Reports in the Organizations User Guide.

A PaginationToken is valid for a maximum of 15 minutes. Your request was denied because the specified PaginationToken has expired.

The request was denied to limit the frequency of submitted requests.

Information that shows whether a resource is compliant with the effective tag policy, including details on any noncompliant tag keys.

See: newComplianceDetails smart constructor.

Create a value of ComplianceDetails with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:complianceStatus:ComplianceDetails', complianceDetails_complianceStatus - Whether a resource is compliant with the effective tag policy.

$sel:keysWithNoncompliantValues:ComplianceDetails', complianceDetails_keysWithNoncompliantValues - These are keys defined in the effective policy that are on the resource with either incorrect case treatment or noncompliant values.

$sel:noncompliantKeys:ComplianceDetails', complianceDetails_noncompliantKeys - These tag keys on the resource are noncompliant with the effective tag policy.

Whether a resource is compliant with the effective tag policy.

These are keys defined in the effective policy that are on the resource with either incorrect case treatment or noncompliant values.

These tag keys on the resource are noncompliant with the effective tag policy.

Information about the errors that are returned for each failed resource. This information can include InternalServiceException and InvalidParameterException errors. It can also include any valid error code returned by the Amazon Web Services service that hosts the resource that the ARN key represents.

The following are common error codes that you might receive from other Amazon Web Services services:

• InternalServiceException – This can mean that the Resource Groups Tagging API didn't receive a response from another Amazon Web Services service. It can also mean that the resource type in the request is not supported by the Resource Groups Tagging API. In these cases, it's safe to retry the request and then call GetResources to verify the changes.
• AccessDeniedException – This can mean that you need permission to call the tagging operations in the Amazon Web Services service that contains the resource. For example, to use the Resource Groups Tagging API to tag a Amazon CloudWatch alarm resource, you need permission to call both TagResources and TagResource in the CloudWatch API.

For more information on errors that are generated from other Amazon Web Services services, see the documentation for that service.

See: newFailureInfo smart constructor.

Create a value of FailureInfo with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:errorCode:FailureInfo', failureInfo_errorCode - The code of the common error. Valid values include InternalServiceException, InvalidParameterException, and any valid error code returned by the Amazon Web Services service that hosts the resource that you want to tag.

$sel:errorMessage:FailureInfo', failureInfo_errorMessage - The message of the common error.

$sel:statusCode:FailureInfo', failureInfo_statusCode - The HTTP status code of the common error.

The code of the common error. Valid values include InternalServiceException, InvalidParameterException, and any valid error code returned by the Amazon Web Services service that hosts the resource that you want to tag.

The message of the common error.

The HTTP status code of the common error.

A list of resource ARNs and the tags (keys and values) that are associated with each.

See: newResourceTagMapping smart constructor.

Create a value of ResourceTagMapping with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:complianceDetails:ResourceTagMapping', resourceTagMapping_complianceDetails - Information that shows whether a resource is compliant with the effective tag policy, including details on any noncompliant tag keys.

$sel:resourceARN:ResourceTagMapping', resourceTagMapping_resourceARN - The ARN of the resource.

$sel:tags:ResourceTagMapping', resourceTagMapping_tags - The tags that have been applied to one or more Amazon Web Services resources.

Information that shows whether a resource is compliant with the effective tag policy, including details on any noncompliant tag keys.

The ARN of the resource.

The tags that have been applied to one or more Amazon Web Services resources.

A count of noncompliant resources.

See: newSummary smart constructor.

Create a value of Summary with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:lastUpdated:Summary', summary_lastUpdated - The timestamp that shows when this summary was generated in this Region.

$sel:nonCompliantResources:Summary', summary_nonCompliantResources - The count of noncompliant resources.

$sel:region:Summary', summary_region - The Amazon Web Services Region that the summary applies to.

$sel:resourceType:Summary', summary_resourceType - The Amazon Web Services resource type.

$sel:targetId:Summary', summary_targetId - The account identifier or the root identifier of the organization. If you don't know the root ID, you can call the Organizations ListRoots API.

$sel:targetIdType:Summary', summary_targetIdType - Whether the target is an account, an OU, or the organization root.

The timestamp that shows when this summary was generated in this Region.

The count of noncompliant resources.

The Amazon Web Services Region that the summary applies to.

The Amazon Web Services resource type.

The account identifier or the root identifier of the organization. If you don't know the root ID, you can call the Organizations ListRoots API.

Whether the target is an account, an OU, or the organization root.

The metadata that you apply to Amazon Web Services resources to help you categorize and organize them. Each tag consists of a key and a value, both of which you define. For more information, see Tagging Amazon Web Services Resources in the Amazon Web Services General Reference.

See: newTag smart constructor.

Create a value of Tag with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:key:Tag', tag_key - One part of a key-value pair that makes up a tag. A key is a general label that acts like a category for more specific tag values.

$sel:value:Tag', tag_value - One part of a key-value pair that make up a tag. A value acts as a descriptor within a tag category (key). The value can be empty or null.

One part of a key-value pair that makes up a tag. A key is a general label that acts like a category for more specific tag values.

One part of a key-value pair that make up a tag. A value acts as a descriptor within a tag category (key). The value can be empty or null.

A list of tags (keys and values) that are used to specify the associated resources.

See: newTagFilter smart constructor.

Create a value of TagFilter with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:key:TagFilter', tagFilter_key - One part of a key-value pair that makes up a tag. A key is a general label that acts like a category for more specific tag values.

$sel:values:TagFilter', tagFilter_values - One part of a key-value pair that make up a tag. A value acts as a descriptor within a tag category (key). The value can be empty or null.

One part of a key-value pair that makes up a tag. A key is a general label that acts like a category for more specific tag values.

One part of a key-value pair that make up a tag. A value acts as a descriptor within a tag category (key). The value can be empty or null.