odb:UntagResource

Tagging

odb:UntagResource is a Tagging access-level action in the odb service. Grants permission to remove tags from the specified resource

Resource types

ARNs that odb:UntagResource can be scoped to in an IAM policy.

arn:${Partition}:odb:${Region}:${Account}:autonomous-database/${AutonomousDatabaseId}
autonomous-database
arn:${Partition}:odb:${Region}:${Account}:autonomous-database-backup/${AutonomousDatabaseBackupId}
autonomous-database-backup
arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/${CloudAutonomousVmClusterId}
cloud-autonomous-vm-cluster
arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/${CloudExadataInfrastructureId}
cloud-exadata-infrastructure
arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/${CloudVmClusterId}
cloud-vm-cluster
arn:${Partition}:odb:${Region}:${Account}:db-node/${DbNodeId}
db-node
arn:${Partition}:odb:${Region}:${Account}:odb-network/${OdbNetworkId}
odb-network
arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/${OdbPeeringConnectionId}
odb-peering-connection

Condition keys

Keys you can use in the Condition block of a policy that grants odb:UntagResource.

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair of a resource

Example IAM policy

A minimal policy that allows odb:UntagResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowOdbUntagResource",
      "Effect": "Allow",
      "Action": "odb:UntagResource",
      "Resource": "*"
    }
  ]
}

Related actions in odb

View all odb actions →