groundstation:UntagResource

Tagging

groundstation:UntagResource is a Tagging access-level action in the groundstation service. Grants permission to unassign a resource tag

Resource types

ARNs that groundstation:UntagResource can be scoped to in an IAM policy.

arn:${Partition}:groundstation:${Region}:${Account}:config/${ConfigType}/${ConfigId}
Config
arn:${Partition}:groundstation:${Region}:${Account}:contact/${ContactId}
Contact
arn:${Partition}:groundstation:${Region}:${Account}:dataflow-endpoint-group/${DataflowEndpointGroupId}
DataflowEndpointGroup
arn:${Partition}:groundstation:${Region}:${Account}:ephemeris/${EphemerisId}
EphemerisItem
arn:${Partition}:groundstation:${Region}:${Account}:mission-profile/${MissionProfileId}
MissionProfile

Condition keys

Keys you can use in the Condition block of a policy that grants groundstation:UntagResource.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

groundstation:ConfigId String

Filters access by the ID of a config

groundstation:ConfigType String

Filters access by the type of a config

groundstation:ContactId String

Filters access by the ID of a contact

groundstation:DataflowEndpointGroupId String

Filters access by the ID of a dataflow endpoint group

groundstation:EphemerisId String

Filters access by the ID of an ephemeris

groundstation:MissionProfileId String

Filters access by the ID of a mission profile

Example IAM policy

A minimal policy that allows groundstation:UntagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowGroundstationUntagResource",
      "Effect": "Allow",
      "Action": "groundstation:UntagResource",
      "Resource": "*"
    }
  ]
}

Related actions in groundstation

View all groundstation actions →