Editing tags attached to an OU - Amazon Organizations
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Editing tags attached to an OU

When you sign in to your organization's management account, you can add or remove the tags attached to an OU. To do this, complete the following steps.

Minimum permissions

To edit the tags attached to an OU within a root in your Amazon organization, you must have the following permissions:

  • organizations:DescribeOrganization – required only when using the Organizations console

  • organizations:DescribeOrganizationalUnit– required only when using the Organizations console

  • organizations:TagResource

  • organizations:UntagResource

Amazon Web Services Management Console
To edit the tags attached to an OU

  1. Sign in to the Amazon Organizations console. You must sign in as an IAM user, assume an IAM role, or sign in as the root user (not recommended) in the organization’s management account.

  2. On the Amazon Web Services accounts page, navigate to and choose the name of the OU whose tags you want to edit.

  3. On the OU's details page, choose the Tags tab, and then choose Manage tags.

  4. You can perform any of these actions on this tab:

    • Edit the value for any tag by entering a new value over the old one. You can't modify the tag key. To change a key, you must delete the tag with the old key and add a tag with the new key.

    • Remove an existing tag by choosing Remove next to the tag you want to remive.

    • Add a new tag key and value pair. Choose Add tag, then enter the new key name and optional value in the provided boxes. If you leave the Value box empty, the value is an empty string; it isn't null.

  5. Choose Save changes after you've made all the additions, removals, and edits you want to make.

Amazon CLI & Amazon SDKs
To edit the tags attached to an OU

You can use one of the following commands to change the tags attached to an OU:

  • Amazon CLI: tag-resource and untag-resource

    The following example attaches the tag "Department"="12345" to an OU. Note that Key and Value are case sensitive.

    $ aws organizations tag-resource \
    --resource-id ou-a1b2-f6g7h222 \
    --tags Key=Department,Value=12345

    This command produces no output when successful.

    The following example removes the Department tag from an OU.

    $ aws organizations untag-resource \
    --resource-id ou-a1b2-f6g7h222 \
    --tag-keys Department

    This command produces no output when successful.

  • Amazon SDKs: TagResource and UntagResource