odb:DisassociateIamRoleFromResource

Write

odb:DisassociateIamRoleFromResource is a Write access-level action in the odb service. Grants permission to disassociate an AWS Identity and Access Management (IAM) service role from a specified resource to disable AWS service integration

Resource types

ARNs that odb:DisassociateIamRoleFromResource can be scoped to in an IAM policy.

arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/${CloudAutonomousVmClusterId}

cloud-autonomous-vm-cluster

arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/${CloudVmClusterId}

cloud-vm-cluster

Condition keys

Keys you can use in the Condition block of a policy that grants odb:DisassociateIamRoleFromResource.

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair of a resource

Example IAM policy

A minimal policy that allows odb:DisassociateIamRoleFromResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowOdbDisassociateIamRoleFromResource",
      "Effect": "Allow",
      "Action": "odb:DisassociateIamRoleFromResource",
      "Resource": "*"
    }
  ]
}

Related actions in odb

odb:AcceptMarketplaceRegistration Write odb:AssociateIamRoleToResource Write odb:CreateAutonomousDatabase Write odb:CreateAutonomousDatabaseBackup Write odb:CreateAutonomousDatabaseWallet Write odb:CreateCloudAutonomousVmCluster Write odb:CreateCloudExadataInfrastructure Write odb:CreateCloudVmCluster Write odb:CreateDbNode Write odb:CreateGrantShare Write odb:CreateOdbNetwork Write odb:CreateOdbPeeringConnection Write

View all odb actions →