servicediscovery:DeregisterInstance

Write

servicediscovery:DeregisterInstance is a Write access-level action in the servicediscovery service. Grants permission to delete the records and the health check, if any, that Amazon Route 53 created for the specified instance

Resource types

ARNs that servicediscovery:DeregisterInstance can be scoped to in an IAM policy.

arn:${Partition}:servicediscovery:${Region}:${Account}:service/${ServiceId} required

service

Condition keys

Keys you can use in the Condition block of a policy that grants servicediscovery:DeregisterInstance.

servicediscovery:ServiceArn ARN

Filters access by specifying the Amazon Resource Name (ARN) for the related service

servicediscovery:ServiceCreatedByAccount String

Filters access by specifying the account id of the related service creator

aws:ResourceTag/${TagKey} String

Filters actions based on the tags associated with the resource

Example IAM policy

A minimal policy that allows servicediscovery:DeregisterInstance. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowServicediscoveryDeregisterInstance",
      "Effect": "Allow",
      "Action": "servicediscovery:DeregisterInstance",
      "Resource": "*"
    }
  ]
}

Related actions in servicediscovery

View all servicediscovery actions →