diff --git a/content/custom-storages/amazon-s3-bucket-access-key.md b/content/custom-storages/amazon-s3-bucket-access-key.md
index 69fe0e9..5e672c6 100644
--- a/content/custom-storages/amazon-s3-bucket-access-key.md
+++ b/content/custom-storages/amazon-s3-bucket-access-key.md
@@ -18,8 +18,9 @@ Amazon Simple Storage Service (Amazon S3) is an object storage service that offe
 - **s3:GetObject** - optional, for backup restore and instant download from Amazon S3 bucket
 - **s3:DeleteObject** - optional, for retention policy, automatic removal of outdated backups from Amazon S3 bucket
 - **s3:GetBucketLocation** - optional, required to automatically determine the `Service Endpoint URL`
-- **s3:PutObjectRetention** - optional, required for [S3 Object Lock](/features/s3-object-lock) `x-amz-object-lock-mode`
-- **s3:PutObjectLegalHold** - optional, required for [S3 Object Lock](/features/s3-object-lock) `x-amz-object-lock-legal-hold`
+- **s3:PutObjectRetention** - optional, required for the [S3 Object Lock](/features/s3-object-lock) header `x-amz-object-lock-mode`
+- **s3:PutObjectLegalHold** - optional, required for the [S3 Object Lock](/features/s3-object-lock) header `x-amz-object-lock-legal-hold`
+- **s3:PutObjectTagging** - optional, required for the [S3 Object Tagging](/features/s3-object-tag) header `x-amz-tagging`
 
 ## Set up Amazon S3 Bucket Access Key as a customer managed storage
 
diff --git a/content/custom-storages/amazon-s3-bucket.md b/content/custom-storages/amazon-s3-bucket.md
index f07f3f7..c733332 100644
--- a/content/custom-storages/amazon-s3-bucket.md
+++ b/content/custom-storages/amazon-s3-bucket.md
@@ -17,8 +17,9 @@ Amazon Simple Storage Service (Amazon S3) is an object storage service that offe
 - **s3:PutObject** - required, for backup archive upload to Amazon S3 bucket
 - **s3:GetObject** - optional, for backup restore and instant download from Amazon S3 bucket
 - **s3:DeleteObject** - optional, for retention policy, automatic removal of outdated backups from Amazon S3 bucket
-- **s3:PutObjectRetention** - optional, required for [S3 Object Lock](/features/s3-object-lock) `x-amz-object-lock-mode`
-- **s3:PutObjectLegalHold** - optional, required for [S3 Object Lock](/features/s3-object-lock) `x-amz-object-lock-legal-hold`
+- **s3:PutObjectRetention** - optional, required for the [S3 Object Lock](/features/s3-object-lock) header `x-amz-object-lock-mode`
+- **s3:PutObjectLegalHold** - optional, required for the [S3 Object Lock](/features/s3-object-lock) header `x-amz-object-lock-legal-hold`
+- **s3:PutObjectTagging** - optional, required for the [S3 Object Tagging](/features/s3-object-tag) header `x-amz-tagging`
 
 ## Set up Amazon S3 Bucket as a customer managed storage
 
diff --git a/content/features/s3-object-tag.md b/content/features/s3-object-tag.md
index b5ffbe5..6057e1a 100644
--- a/content/features/s3-object-tag.md
+++ b/content/features/s3-object-tag.md
@@ -16,6 +16,8 @@ keywords: github backup, cloudback, amazon s3 object tag, s3 object tag, object
 #### x-amz-tagging
 The tag-set for the object. The tag-set must be encoded as URL Query parameters. (For example, "Key1=Value1").
 
+> **Important:** `s3:PutObjectTagging` permission is required. You should grant the permission at a bucket level and at an access point level if applicable.
+
 Example:
 ```
 x-amz-tagging: Key1=Value1&Key2=Value2