Delete IAM policies (AWS CLI)
You can use the AWS Command Line Interface (AWS CLI) to delete customer managed policies and inline policies in IAM. The number and size of IAM resources in an AWS account are limited. For more information, see IAM and AWS STS quotas.
Note
Deletion of IAM policies is permanent. After the policy is deleted it cannot be recovered.
For more information about IAM policy structure and syntax, see Policies and permissions in AWS Identity and Access Management and the IAM JSON policy element reference.
For more information about the difference between managed and inline policies, see Managed policies and inline policies.
Prerequisites
Before you delete a policy, you should review its recent service-level activity. This is important because you don't want to remove access from a principal (person or application) who is using it. For more information about viewing last accessed information, see Refine permissions in AWS using last accessed information.
Deleting customer managed policies (AWS CLI)
You can delete a customer managed policy from the AWS Command Line Interface.
To delete a customer managed policy (AWS CLI)
-
(Optional) To view information about a policy, run the following commands:
-
To list managed policies: list-policies
-
To retrieve detailed information about a managed policy: get-policy
-
-
(Optional) To find out about the relationships between the policies and identities, run the following commands:
-
To list the identities (IAM users, IAM groups, and IAM roles) to which a managed policy is attached, run the following command:
-
To list the managed policies attached to an identity (a user, user group, or role), run one of the following commands:
-
-
To delete a customer managed policy, run the following command:
Deleting inline policies (AWS CLI)
You can delete an inline policy from the AWS CLI.
To delete an inline policy (AWS CLI)
-
(Optional) To list all inline policies that are attached to an identity (user, user group, role), use one of the following commands:
-
(Optional) To retrieve an inline policy document that is embedded in an identity (user, user group, or role), use one of the following commands:
-
To delete an inline policy from an identity (user, user group, or role that is not a service-linked role), use one of the following commands:
