ECS 3.6.2 Data Access Guide

Additional information about Object Tagging

This section provides information about Object Tagging in IAM, Object Tagging with bucket policies, handling Object Tagging during TSO/PSO, and Object Tagging during object lifecycle management.

Object Tagging in IAM

The key function of Object Tagging as categorization system comes when it is integrated with Polices from IAM. This allows you to configure specific permissions for the users. For example, You can add a policy that allows everyone to access objects with a specified tag or you can configure and grant permissions to users, who can manage the tags on specific objects. The other key aspect with Object Tagging is how and where the tags would be persisted. This is important because, it has a direct impact on various aspects of the system.

Object Tagging with bucket policies

Object Tagging allows you to categorize the objects, also tagging gets integrated with various policies. Lifecycle management policy allows you to configure at a bucket level. Earlier versions of ECS support Expiration, Abort Incomplete Uploads, and Deletion of Expired Delete Marker. The filter could include multiple conditions including a tag-based condition. Each tag in the filter condition must match the key and the value.

Object Tagging during TSO/PSO

Object Tagging is another entry set in system metadata, no special handling is required during TSO/PSO. There is a set limit on the number of tags that are allowed to be associated with each object, size of system metadata along with Object Tagging is well with in the memory limits.

Object Tagging during object lifecycle Management

Object Tagging is part of system metadata and handled simultaneously with system metadata handling, during lifecycle management. The Expiration Logic and Lifecycle Delete Scanner requires to understand tag-based policies. Object tags enable fine-grained object lifecycle management in which you can specify a tag-based filter, in addition to a key name prefix, in a lifecycle rule.