docs: add Resource Tagging product docs and changelog#30238
docs: add Resource Tagging product docs and changelog#30238wevans997-dev merged 18 commits intoproductionfrom
Conversation
|
This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:
|
| date: 2026-04-23 | ||
| --- | ||
|
|
||
| Resource Tagging is now available in public beta across all Cloudflare plans. You can attach custom key-value metadata to your Cloudflare resources -- Workers scripts, zones, custom hostnames, Access application policies, and more -- giving you a consistent way to organize, query, and manage infrastructure at any scale. |
There was a problem hiding this comment.
Any language in the changelog about how this is rolling out over a few days?
|
|
||
| Resource Tagging is now available in public beta across all Cloudflare plans. You can attach custom key-value metadata to your Cloudflare resources -- Workers scripts, zones, custom hostnames, Access application policies, and more -- giving you a consistent way to organize, query, and manage infrastructure at any scale. | ||
|
|
||
| ### Why tags matter |
There was a problem hiding this comment.
Section feels a little marketing-speak for the changelog? I'd dial it back.
|
|
||
| ### What's included | ||
|
|
||
| - **7 supported resource types** -- `account`, `workers_script`, `workers_script_version`, `zone`, `managed_client_certificates`, `custom_hostnames`, and `access_application_policy`, with more on the way. |
There was a problem hiding this comment.
I thought we were going out with support for anything?
| - **7 supported resource types** -- `account`, `workers_script`, `workers_script_version`, `zone`, `managed_client_certificates`, `custom_hostnames`, and `access_application_policy`, with more on the way. | ||
| - **Powerful filtering** -- Query tagged resources using AND/OR logic, negation, and key-only matching. Combine up to 20 filters per query with up to 10 OR values per filter to build precise resource views. | ||
| - **Account and zone-level endpoints** -- Full CRUD operations across both scopes, so you can tag account-wide resources and zone-specific resources with the same consistent API. | ||
| - **Account Owned Tokens (AOTs)** -- Tagging uses account-level tokens that persist independently of individual users. When someone leaves your team or rotates credentials, your tagging automation keeps running. AOTs are provisioned on your behalf with the correct permissions out of the box. |
There was a problem hiding this comment.
I don't know if this will make sense to folks.
|
|
||
| ### API-first by design | ||
|
|
||
| The API is the primary interface for Resource Tagging and the recommended path for all workflows -- whether you're scripting one-off tag assignments, building CI/CD pipelines, or integrating tagging into your infrastructure-as-code toolchain. |
There was a problem hiding this comment.
Mention Terraform support?
| description: Query tagged resources using the tag filtering syntax. | ||
| --- | ||
|
|
||
| The `GET /accounts/{account_id}/tags/resources` endpoint supports tag filtering via the `tag` query parameter. Multiple `tag` parameters combine with **AND** logic. |
There was a problem hiding this comment.
A lot of these concepts are auto-documented in the API docs. Do you want to link to those?
| description: Create, update, and delete tags on Cloudflare resources. | ||
| --- | ||
|
|
||
| All tag operations use the Tagging API. Authentication requires an [Account Owned Token (AOT)](/fundamentals/api/get-started/account-owned-tokens/) or user API token with appropriate [permissions](/resource-tagging/reference/api/#authentication). |
There was a problem hiding this comment.
| All tag operations use the Tagging API. Authentication requires an [Account Owned Token (AOT)](/fundamentals/api/get-started/account-owned-tokens/) or user API token with appropriate [permissions](/resource-tagging/reference/api/#authentication). | |
| All tag operations use the Tagging API. Authentication requires an [account API token](/fundamentals/api/get-started/account-owned-tokens/) or user API token with appropriate [permissions](/resource-tagging/reference/api/#authentication). |
| @@ -0,0 +1,117 @@ | |||
| --- | |||
| title: API reference | |||
There was a problem hiding this comment.
The API reference content is auto-generated out of the OpenAPI specs. I think we can delete this page.
|
|
||
| ## Prerequisites | ||
|
|
||
| - **Super Admin access** -- At least one user with the Super Administrator, Workers Admin, or Tag Admin role. These roles can create, update, and delete tags. |
There was a problem hiding this comment.
| - **Super Admin access** -- At least one user with the Super Administrator, Workers Admin, or Tag Admin role. These roles can create, update, and delete tags. | |
| - **Appropriate access** -- At least one user with the Super Administrator, Workers Admin, or Tag Admin role. These roles can create, update, and delete tags. |
jhutchings1
left a comment
There was a problem hiding this comment.
@wevans997-dev Left a bunch of comments for you. Can you have a look?
jhutchings1
left a comment
There was a problem hiding this comment.
Thanks for fixing up the outstanding feedback!
Remove bold labels from list items, replace -- with em dashes, convert bold steps to numbered lists, wrap API methods in backticks, and convert error note section to aside.
Replace -- with em dashes and remove unnecessary bold from list items.
* docs: add Resource Tagging product docs and changelog * docs: add index pages for how-to and reference subdirectories * docs: add resource-tagging product icon * docs: public beta, all plans, remove internal references * docs: consolidate changelog into single entry, add future roadmap context * docs: remove PUT/DELETE limitations from changelog * docs: restore PUT/DELETE limitations to changelog * docs: add dashboard screenshot and UI navigation to changelog * docs: update changelog date to today and rename file * docs: address PR review comments from jhutchings1 * docs: reorder resource types in changelog, remove DNS records * docs: resource list updates * docs: update changelog date to 2026-04-27 * docs: update get-started to describe API as preferred, not API-only * docs: add case sensitivity note and 10k tag account limit to limits page * docs: add Cloudflare Fundamentals product pill to changelog
Summary
Adds initial public developer documentation for the Resource Tagging product (private beta), registered under the Core platform group.
Draft for preview build review -- content may contain internal references that need scrubbing before merge.