kinesis:UntagResource

Tagging

kinesis:UntagResource is a Tagging access-level action in the kinesis service. Grants permission to remove tags from the specified Kinesis data resource. Removed tags are deleted and cannot be recovered after this operation successfully completes

Resource types

ARNs that kinesis:UntagResource can be scoped to in an IAM policy.

arn:${Partition}:kinesis:${Region}:${Account}:channel/${ChannelId} required
channel
arn:${Partition}:kinesis:${Region}:${Account}:${StreamType}/${StreamName}/consumer/${ConsumerName}:${ConsumerCreationTimpstamp} required
consumer
arn:${Partition}:kinesis:${Region}:${Account}:stream/${StreamName} required
stream

Condition keys

Keys you can use in the Condition block of a policy that grants kinesis:UntagResource.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

aws:TagKeys ArrayOfString

Filters access by the presence of tag keys in the request

Example IAM policy

A minimal policy that allows kinesis:UntagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowKinesisUntagResource",
      "Effect": "Allow",
      "Action": "kinesis:UntagResource",
      "Resource": "*"
    }
  ]
}

Related actions in kinesis

kinesis:AddTagsToStream Tagging kinesis:AssociateStreamsWithChannel Write kinesis:CreateChannel Tagging kinesis:CreateStream Write kinesis:DecreaseStreamRetentionPeriod Write kinesis:DeleteChannel Write kinesis:DeleteResourcePolicy Write kinesis:DeleteStream Write kinesis:DeregisterStreamConsumer Write kinesis:DescribeAccountSettings Read kinesis:DescribeChannel Read kinesis:DescribeLimits Read

View all kinesis actions →