ram:DisassociateResourceSharePermission is a Write access-level action in the ram service. Grants permission to disassociate a Permission from a Resource Share
ARNs that ram:DisassociateResourceSharePermission can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ram:DisassociateResourceSharePermission.
Filters access by the tags associated with the resource
Filters access by resource shares that allow or deny sharing with external principals. For example, specify true if the action can only be performed on resource shares that allow sharing with external principals. External principals are AWS accounts that are outside of its AWS organization
Filters access by the specified Permission ARN
Filters access by permissions of specified resource type
Filters access by a resource share with the specified name
A minimal policy that allows ram:DisassociateResourceSharePermission. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowRamDisassociateResourceSharePermission",
"Effect": "Allow",
"Action": "ram:DisassociateResourceSharePermission",
"Resource": "*"
}
]
}