cloud9:DeleteEnvironment

Write

cloud9:DeleteEnvironment is a Write access-level action in the cloud9 service. Grants permission to delete an AWS Cloud9 development environment. If the environment is hosted on an Amazon Elastic Compute Cloud (Amazon EC2) instance, also terminates the instance

Resource types

ARNs that cloud9:DeleteEnvironment can be scoped to in an IAM policy.

arn:${Partition}:cloud9:${Region}:${Account}:environment:${ResourceId}
environment

Condition keys

Keys you can use in the Condition block of a policy that grants cloud9:DeleteEnvironment.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Dependent actions

To use cloud9:DeleteEnvironment you may also need to grant:

Example IAM policy

A minimal policy that allows cloud9:DeleteEnvironment. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCloud9DeleteEnvironment",
      "Effect": "Allow",
      "Action": "cloud9:DeleteEnvironment",
      "Resource": "*"
    }
  ]
}

Related actions in cloud9

cloud9:ActivateEC2Remote Write cloud9:CreateEnvironmentEC2 Write cloud9:CreateEnvironmentMembership Write cloud9:CreateEnvironmentSSH Write cloud9:CreateEnvironmentToken Read cloud9:DeleteEnvironmentMembership Write cloud9:DescribeEC2Remote Read cloud9:DescribeEnvironmentMemberships Read cloud9:DescribeEnvironments Read cloud9:DescribeEnvironmentStatus Read cloud9:DescribeSSHRemote Read cloud9:GetEnvironmentConfig Read

View all cloud9 actions →