kinesis:UntagResource

Tagging

kinesis:UntagResource is a Tagging access-level action in the kinesis service. Grants permission to remove tags from the specified Kinesis data resource. Removed tags are deleted and cannot be recovered after this operation successfully completes

Resource types

ARNs that kinesis:UntagResource can be scoped to in an IAM policy.

arn:${Partition}:kinesis:${Region}:${Account}:${StreamType}/${StreamName}/consumer/${ConsumerName}:${ConsumerCreationTimpstamp}
consumer
arn:${Partition}:kinesis:${Region}:${Account}:stream/${StreamName}
stream

Condition keys

Keys you can use in the Condition block of a policy that grants kinesis:UntagResource.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows kinesis:UntagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowKinesisUntagResource",
      "Effect": "Allow",
      "Action": "kinesis:UntagResource",
      "Resource": "*"
    }
  ]
}

Related actions in kinesis

View all kinesis actions →