ds:RemoveTagsFromResource is a Tagging access-level action in the ds service. Grants permission to remove tags from an Amazon Directory Services directory
ARNs that ds:RemoveTagsFromResource can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ds:RemoveTagsFromResource.
Filters access by the value of the request to AWS DS
Filters access by the tag keys that are passed in the request
Filters access by the AWS DS Resource being acted upon
A minimal policy that allows ds:RemoveTagsFromResource. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowDsRemoveTagsFromResource",
"Effect": "Allow",
"Action": "ds:RemoveTagsFromResource",
"Resource": "*"
}
]
}