apigateway:RejectAccessAssociation is a Permissions management access-level action in the apigateway service. Grants permission to reject an existing access association owned by another account to a custom domain name for private APIs
ARNs that apigateway:RejectAccessAssociation can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants apigateway:RejectAccessAssociation.
Filters access by endpoint type. Available during the CreateDomainName, UpdateDomainName, CreateApi, and UpdateApi operations
Filters access by endpoint type. Available during the UpdateDomainName, DeleteDomainName, UpdateApi, and DeleteApi operations
Filters access by routing mode of the existing domain name. Available during the UpdateDomainName and DeleteDomainName operations
Filters access by tag key-value pairs attached to the resource
A minimal policy that allows apigateway:RejectAccessAssociation. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowApigatewayRejectAccessAssociation",
"Effect": "Allow",
"Action": "apigateway:RejectAccessAssociation",
"Resource": "*"
}
]
}