Amazon ElastiCache Global Datastore Finally Gets Tagging Support!

Hi everyone, it's me, shiichan! Today I found a small but genuinely useful update from Amazon ElastiCache, so let me walk you through it!

AWS What's New aws.amazon.com

What was announced?

AWS's official "AWS What's New" feed just published an announcement: Amazon ElastiCache's Global Datastore now supports resource tagging and tag-based access control (TBAC). Global Datastore is the ElastiCache feature that lets you replicate data across multiple AWS Regions, and now you can finally attach tags to it too!

The story so far

Here's the thing: ElastiCache already supported tagging on pretty much every resource type — except Global Datastore. That one resource was the odd one out.

Because of that gap, teams couldn't apply a single, consistent tagging model for cost allocation and access permissions across their entire ElastiCache fleet. Global Datastore always had to be treated as a special case, managed by enumerating individual resources instead of using tags.

What changes

From now on, you can tag Global Datastore just like any other ElastiCache resource, and manage it consistently through tags.

• Attach cost-allocation tags so Global Datastore spend can be rolled up by team or project, just like the rest of your fleet
• Use tags as conditions in IAM policies and Service Control Policies (SCPs) to design permissions like "only allow this action on resources with this tag"
• Update a tag once and it automatically propagates to every Region the Global Datastore spans

No more manually granting access resource by resource — that's the real win here!

Dive Deep

Specifically, three APIs are now available for Global Datastore:

• AddTagsToResource — add tags
• RemoveTagsFromResource — remove tags
• ListTagsForResource — list the tags currently attached

On top of that, these tags can be referenced as condition keys in IAM policies and SCPs, enabling tag-based access control (TBAC) — for example, "only allow access to Global Datastores that carry this specific tag." Instead of listing every resource ARN individually, you can scope permissions purely by tag attributes.

Since a Global Datastore spans multiple Regions by design, tag changes propagate automatically to all of those Regions — you don't need to re-apply tags Region by Region.

There's no additional cost for this feature, and it doesn't change how you create or manage Global Datastores. It's available today in every Region where ElastiCache Global Datastore itself is available.

Wrap-up

• Amazon ElastiCache's Global Datastore now supports resource tagging and tag-based access control (TBAC)
• Previously, Global Datastore was the only ElastiCache resource that couldn't be tagged, blocking a unified cost-allocation and permission model
• AddTagsToResource / RemoveTagsFromResource / ListTagsForResource let you manage tags, which can also be used as IAM/SCP condition keys
• Tag changes propagate automatically across every Region a Global Datastore spans
• No extra cost, available in all supported Regions
• Great news if you run ElastiCache across multiple Regions and want clean, tag-based cost and access management!