evs:DeleteEnvironmentHost

Write

evs:DeleteEnvironmentHost is a Write access-level action in the evs service. Grants permission to delete a host from an Amazon EVS environment

Resource types

ARNs that evs:DeleteEnvironmentHost can be scoped to in an IAM policy.

arn:${Partition}:evs:${Region}:${Account}:environment/${EnvironmentIdentifier}

environment

Condition keys

Keys you can use in the Condition block of a policy that grants evs:DeleteEnvironmentHost.

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair of a resource

Dependent actions

To use evs:DeleteEnvironmentHost you may also need to grant:

ec2:DeleteNetworkInterface on environment
ec2:DescribeInstanceStatus on environment
ec2:DescribeInstances on environment
ec2:DescribeNetworkInterfaces on environment
ec2:ModifyInstanceAttribute on environment
ec2:ModifyNetworkInterfaceAttribute on environment
ec2:TerminateInstances on environment
secretsmanager:DeleteSecret on environment
secretsmanager:GetSecretValue on environment

Example IAM policy

A minimal policy that allows evs:DeleteEnvironmentHost. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEvsDeleteEnvironmentHost",
      "Effect": "Allow",
      "Action": "evs:DeleteEnvironmentHost",
      "Resource": "*"
    }
  ]
}

Related actions in evs

evs:AssociateEipToVlan Write evs:CreateEntitlement Write evs:CreateEnvironment Write evs:CreateEnvironmentConnector Write evs:CreateEnvironmentHost Write evs:DeleteEntitlement Write evs:DeleteEnvironment Write evs:DeleteEnvironmentConnector Write evs:DisassociateEipFromVlan Write evs:GetDepotUrl Read evs:GetEnvironment Read evs:GetVersions Read

View all evs actions →