fsx:DetachAndDeleteS3AccessPoint

Write

fsx:DetachAndDeleteS3AccessPoint is a Write access-level action in the fsx service. Grants permission to detach an S3 Access Point from an Amazon FSx File System and delete the S3 Access Point

Resource types

ARNs that fsx:DetachAndDeleteS3AccessPoint can be scoped to in an IAM policy.

arn:${Partition}:fsx:${Region}:${Account}:volume/${FileSystemId}/${VolumeId}
volume

Condition keys

Keys you can use in the Condition block of a policy that grants fsx:DetachAndDeleteS3AccessPoint.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

Dependent actions

To use fsx:DetachAndDeleteS3AccessPoint you may also need to grant:

Example IAM policy

A minimal policy that allows fsx:DetachAndDeleteS3AccessPoint. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowFsxDetachAndDeleteS3AccessPoint",
      "Effect": "Allow",
      "Action": "fsx:DetachAndDeleteS3AccessPoint",
      "Resource": "*"
    }
  ]
}

Related actions in fsx

View all fsx actions →