Skip to main content

Detaching IAM Policy

Assuming you have already created an IAM policy by following the steps in the guide and attached it to an access key, you can detach the policy from the access key as follows:

aws --profile=tigris iam --endpoint-url=https://iam.storage.dev detach-user-policy --policy-arn <generated_policy_arn_from_previous_step> --user-name <tid_>

This command detaches the IAM policy from the access key, removing the permissions specified in the policy. Make sure to replace <generated_policy_arn_from_previous_step> with the ARN of the policy you created in the previous step and <tid_> with the access key ID you created in the first step.