Amazon Neptune now supports tag-based access control for IAM

This article announces tag-based access control (TBAC) support for Amazon Neptune, allowing administrators to govern cluster access using AWS resource tags and IAM principal tags in policies.

• Control access to Neptune data-plane operations using resource and principal tags in IAM policies and SCPs
• IAM principals can only perform actions against clusters with matching tags, eliminating lateral access risk
• Enforces team and environment-level isolation across projects without enumerating specific cluster ARNs
• Supports federated identity workflows using SAML or OIDC session tags from external providers
• Can be combined with granular permissions like neptune-db:QueryLanguage for fine-grained control
• Available in all AWS Regions where Neptune is available with engine version 1.2.0.0 or later

TBAC enables dynamic, attribute-based access governance for Neptune clusters at scale while reducing administrative overhead.