kinesis:RemoveTagsFromStream is a Tagging access-level action in the kinesis service. Grants permission to remove tags from the specified Kinesis data stream. Removed tags are deleted and cannot be recovered after this operation successfully completes
ARNs that kinesis:RemoveTagsFromStream can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants kinesis:RemoveTagsFromStream.
Filters access by tag key-value pairs attached to the resource
A minimal policy that allows kinesis:RemoveTagsFromStream. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowKinesisRemoveTagsFromStream",
"Effect": "Allow",
"Action": "kinesis:RemoveTagsFromStream",
"Resource": "*"
}
]
}