kafkaconnect:UntagResource

Tagging

kafkaconnect:UntagResource is a Tagging access-level action in the kafkaconnect service. Grants permission to remove tags from an MSK Connect resource

Resource types

ARNs that kafkaconnect:UntagResource can be scoped to in an IAM policy.

arn:${Partition}:kafkaconnect:${Region}:${Account}:connector/${ConnectorName}/${UUID}

connector

arn:${Partition}:kafkaconnect:${Region}:${Account}:custom-plugin/${CustomPluginName}/${UUID}

custom plugin

arn:${Partition}:kafkaconnect:${Region}:${Account}:worker-configuration/${WorkerConfigurationName}/${UUID}

worker configuration

Condition keys

Keys you can use in the Condition block of a policy that grants kafkaconnect:UntagResource.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows kafkaconnect:UntagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowKafkaconnectUntagResource",
      "Effect": "Allow",
      "Action": "kafkaconnect:UntagResource",
      "Resource": "*"
    }
  ]
}

Related actions in kafkaconnect

kafkaconnect:CreateConnector Write kafkaconnect:CreateCustomPlugin Write kafkaconnect:CreateWorkerConfiguration Write kafkaconnect:DeleteConnector Write kafkaconnect:DeleteCustomPlugin Write kafkaconnect:DeleteWorkerConfiguration Write kafkaconnect:DescribeConnector Read kafkaconnect:DescribeConnectorOperation Read kafkaconnect:DescribeCustomPlugin Read kafkaconnect:DescribeWorkerConfiguration Read kafkaconnect:ListConnectorOperations Read kafkaconnect:ListConnectors Read

View all kafkaconnect actions →