sagemaker:DeleteTags

Tagging

sagemaker:DeleteTags is a Tagging access-level action in the sagemaker service. Grants permission to delete the specified set of tags from an Amazon SageMaker resource

Resource types

ARNs that sagemaker:DeleteTags can be scoped to in an IAM policy.

arn:${Partition}:sagemaker:${Region}:${Account}:action/${ActionName}
action
arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/${AIBenchmarkJobName}
ai-benchmark-job
arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/${AIRecommendationJobName}
ai-recommendation-job
arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/${AIWorkloadConfigName}
ai-workload-config
arn:${Partition}:sagemaker:${Region}:${Account}:algorithm/${AlgorithmName}
algorithm
arn:${Partition}:sagemaker:${Region}:${Account}:app/${DomainId}/${UserProfileName}/${AppType}/${AppName}
app
arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/${AppImageConfigName}
app-image-config
arn:${Partition}:sagemaker:${Region}:${Account}:artifact/${HashOfArtifactSource}
artifact
arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/${AutoMLJobJobName}
automl-job
arn:${Partition}:sagemaker:${Region}:${Account}:cluster/${ClusterId}
cluster
arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/${ClusterSchedulerConfigId}
cluster-scheduler-config
arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/${CodeRepositoryName}
code-repository
arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/${CompilationJobName}
compilation-job
arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/${ComputeQuotaId}
compute-quota
arn:${Partition}:sagemaker:${Region}:${Account}:context/${ContextName}
context
arn:${Partition}:sagemaker:${Region}:${Account}:data-quality-job-definition/${DataQualityJobDefinitionName}
data-quality-job-definition
arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/${DeviceFleetName}/device/${DeviceName}
device
arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/${DeviceFleetName}
device-fleet
arn:${Partition}:sagemaker:${Region}:${Account}:domain/${DomainId}
domain
arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/${EdgeDeploymentPlanName}
edge-deployment-plan
arn:${Partition}:sagemaker:${Region}:${Account}:edge-packaging-job/${EdgePackagingJobName}
edge-packaging-job
arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/${EndpointName}
endpoint
arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/${EndpointConfigName}
endpoint-config
arn:${Partition}:sagemaker:${Region}:${Account}:experiment/${ExperimentName}
experiment
arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/${TrialName}
experiment-trial
arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/${TrialComponentName}
experiment-trial-component
arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/${FeatureGroupName}
feature-group
arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/${FlowDefinitionName}
flow-definition
arn:${Partition}:sagemaker:${Region}:${Account}:hub/${HubName}
hub
arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/${HubName}/${HubContentType}/${HubContentName}
hub-content
arn:${Partition}:sagemaker:${Region}:${Account}:human-task-ui/${HumanTaskUiName}
human-task-ui
arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/${HyperParameterTuningJobName}
hyper-parameter-tuning-job
arn:${Partition}:sagemaker:${Region}:${Account}:image/${ImageName}
image
arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/${InferenceComponentName}
inference-component
arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/${InferenceRecommendationsJobName}
inference-recommendations-job
arn:${Partition}:sagemaker:${Region}:${Account}:job/${JobCategory}/${JobName}
job
arn:${Partition}:sagemaker:${Region}:${Account}:labeling-job/${LabelingJobName}
labeling-job
arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/${MLflowAppId}
mlflow-app
arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/${MlflowTrackingServerName}
mlflow-tracking-server
arn:${Partition}:sagemaker:${Region}:${Account}:model/${ModelName}
model
arn:${Partition}:sagemaker:${Region}:${Account}:model-bias-job-definition/${ModelBiasJobDefinitionName}
model-bias-job-definition
arn:${Partition}:sagemaker:${Region}:${Account}:model-card/${ModelCardName}
model-card
arn:${Partition}:sagemaker:${Region}:${Account}:model-explainability-job-definition/${ModelExplainabilityJobDefinitionName}
model-explainability-job-definition
arn:${Partition}:sagemaker:${Region}:${Account}:model-package/${ModelPackageName}
model-package
arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/${ModelPackageGroupName}
model-package-group
arn:${Partition}:sagemaker:${Region}:${Account}:model-quality-job-definition/${ModelQualityJobDefinitionName}
model-quality-job-definition
arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/${MonitoringScheduleName}
monitoring-schedule
arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/${NotebookInstanceName}
notebook-instance
arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/${NotebookInstanceLifecycleConfigName}
notebook-instance-lifecycle-config
arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/${OptimizationJobName}
optimization-job
arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/${AppId}
partner-app
arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/${PipelineName}
pipeline
arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/${ProcessingJobName}
processing-job
arn:${Partition}:sagemaker:${Region}:${Account}:project/${ProjectName}
project
arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/${RandomString}
reserved-capacity
arn:${Partition}:sagemaker:${Region}:${Account}:space/${DomainId}/${SpaceName}
space
arn:${Partition}:sagemaker:${Region}:${Account}:studio-lifecycle-config/${StudioLifecycleConfigName}
studio-lifecycle-config
arn:${Partition}:sagemaker:${Region}:${Account}:training-job/${TrainingJobName}
training-job
arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/${TrainingPlanName}
training-plan
arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/${TransformJobName}
transform-job
arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/${DomainId}/${UserProfileName}
user-profile
arn:${Partition}:sagemaker:${Region}:${Account}:workteam/${WorkteamName}
workteam

Condition keys

Keys you can use in the Condition block of a policy that grants sagemaker:DeleteTags.

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair

sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} String

Filters access by a current metadata key and value pair associated with the model-package resource

sagemaker:CurrentModelLifeCycleStage String

Filters access by the current value of the Stage field in the model life cycle object associated with the model-package resource

sagemaker:CurrentModelLifeCycleStageStatus String

Filters access by the current value of the StageStatus field in the model life cycle object associated with the model-package resource

sagemaker:ResourceTag/${TagKey} String

Filters access by a tag key and value pair

Example IAM policy

A minimal policy that allows sagemaker:DeleteTags. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowSagemakerDeleteTags",
      "Effect": "Allow",
      "Action": "sagemaker:DeleteTags",
      "Resource": "*"
    }
  ]
}

Related actions in sagemaker

View all sagemaker actions →