DeleteBucketPolicy
This implementation of the DELETE action uses the policy subresource to delete the
policy of a specified bucket. If you are using an identity other than the root user of the
Amazon Web Services account that owns the bucket, the calling identity must have the
DeleteBucketPolicy
permissions on the specified bucket and belong to the
bucket owner's account to use this operation.
If you don't have DeleteBucketPolicy
permissions, Amazon S3 returns a 403
Access Denied
error. If you have the correct permissions, but you're not using an
identity that belongs to the bucket owner's account, Amazon S3 returns a 405 Method Not
Allowed
error.
Important
To ensure that bucket owners don't inadvertently lock themselves out of their own
buckets, the root principal in a bucket owner's Amazon Web Services account can perform the
GetBucketPolicy
, PutBucketPolicy
, and
DeleteBucketPolicy
API actions, even if their bucket policy explicitly
denies the root principal's access. Bucket owner root principals can only be blocked from performing
these API actions by VPC endpoint policies and Amazon Organizations policies.
For more information about bucket policies, see Using Bucket Policies and UserPolicies.
The following operations are related to DeleteBucketPolicy
Request Syntax
DELETE /?policy HTTP/1.1
Host: Bucket
.s3.amazonaws.com
x-amz-expected-bucket-owner: ExpectedBucketOwner
URI Request Parameters
The request uses the following URI parameters.
- Bucket
-
The bucket name.
Required: Yes
- x-amz-expected-bucket-owner
-
The account ID of the expected bucket owner. If the bucket is owned by a different account, the request fails with the HTTP status code
403 Forbidden
(access denied).
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 204
Response Elements
If the action is successful, the service sends back an HTTP 204 response with an empty HTTP body.
Examples
Sample Request
This request deletes the bucket named BucketName
.
DELETE /?policy HTTP/1.1 Host: BucketName.s3.<Region>.amazonaws.com Date: Tue, 04 Apr 2010 20:34:56 GMT Authorization: signatureValue
Sample Response
This example illustrates one usage of DeleteBucketPolicy.
HTTP/1.1 204 No Content x-amz-id-2: Uuag1LuByRx9e6j5OnimrSAMPLEtRPfTaOFg== x-amz-request-id: 656c76696e672SAMPLE5657374 Date: Tue, 04 Apr 2010 20:34:56 GMT Connection: keep-alive Server: AmazonS3
See Also
For more information about using this API in one of the language-specific Amazon SDKs, see the following: