evs:DeleteEnvironment

Write

evs:DeleteEnvironment is a Write access-level action in the evs service. Grants permission to delete an Amazon EVS environment

Resource types

ARNs that evs:DeleteEnvironment can be scoped to in an IAM policy.

arn:${Partition}:evs:${Region}:${Account}:environment/${EnvironmentIdentifier}

environment

Condition keys

Keys you can use in the Condition block of a policy that grants evs:DeleteEnvironment.

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair of a resource

Dependent actions

To use evs:DeleteEnvironment you may also need to grant:

ec2:DeleteNetworkInterface on environment
ec2:DeleteSubnet on environment
ec2:DescribeInstanceStatus on environment
ec2:DescribeInstances on environment
ec2:DescribeNetworkInterfaces on environment
ec2:DescribeSubnets on environment
ec2:ModifyInstanceAttribute on environment
ec2:ModifyNetworkInterfaceAttribute on environment
ec2:TerminateInstances on environment
secretsmanager:DeleteSecret on environment
secretsmanager:GetSecretValue on environment

Example IAM policy

A minimal policy that allows evs:DeleteEnvironment. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEvsDeleteEnvironment",
      "Effect": "Allow",
      "Action": "evs:DeleteEnvironment",
      "Resource": "*"
    }
  ]
}

Related actions in evs

evs:AssociateEipToVlan Write evs:CreateEntitlement Write evs:CreateEnvironment Write evs:CreateEnvironmentConnector Write evs:CreateEnvironmentHost Write evs:DeleteEntitlement Write evs:DeleteEnvironmentConnector Write evs:DeleteEnvironmentHost Write evs:DisassociateEipFromVlan Write evs:GetDepotUrl Read evs:GetEnvironment Read evs:GetVersions Read

View all evs actions →