fms:DeleteNotificationChannel is a Write access-level action in the fms service. Grants permission to delete an AWS Firewall Manager association with the IAM role and the Amazon Simple Notification Service (SNS) topic that is used to notify the FM administrator about major FM events and errors across the organization
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows fms:DeleteNotificationChannel. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowFmsDeleteNotificationChannel",
"Effect": "Allow",
"Action": "fms:DeleteNotificationChannel",
"Resource": "*"
}
]
}