codedeploy:UntagResource

Tagging

codedeploy:UntagResource is a Tagging access-level action in the codedeploy service. Grants permission to disassociate a resource from a list of tags. The resource is identified by the ResourceArn input parameter. The tags are identfied by the list of keys in the TagKeys input parameter

Resource types

ARNs that codedeploy:UntagResource can be scoped to in an IAM policy.

arn:${Partition}:codedeploy:${Region}:${Account}:application:${ApplicationName}

application

arn:${Partition}:codedeploy:${Region}:${Account}:deploymentgroup:${ApplicationName}/${DeploymentGroupName}

deploymentgroup

Condition keys

Keys you can use in the Condition block of a policy that grants codedeploy:UntagResource.

aws:ResourceTag/${TagKey} String

Filters actions based on tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows codedeploy:UntagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCodedeployUntagResource",
      "Effect": "Allow",
      "Action": "codedeploy:UntagResource",
      "Resource": "*"
    }
  ]
}

Related actions in codedeploy

codedeploy:AddTagsToOnPremisesInstances Tagging codedeploy:BatchGetApplicationRevisions Read codedeploy:BatchGetApplications Read codedeploy:BatchGetDeploymentGroups Read codedeploy:BatchGetDeploymentInstances Read codedeploy:BatchGetDeployments Read codedeploy:BatchGetDeploymentTargets Read codedeploy:BatchGetOnPremisesInstances Read codedeploy:ContinueDeployment Write codedeploy:CreateApplication Write codedeploy:CreateCloudFormationDeployment Write codedeploy:CreateDeployment Write

View all codedeploy actions →