Deleting a tag from an access point for directory buckets - Amazon Simple Storage Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Deleting a tag from an access point for directory buckets

You can remove tags from Access Points for directory buckets. For additional information, see Using tags with S3 Access Points for directory buckets.

Note

If you delete a tag and later learn that it was being used to track costs or for access control, you can add the tag back to the access point for directory buckets.

Permissions

To delete a tag from an access point for directory buckets, you must have the following permission:

  • s3express:UntagResource

Troubleshooting errors

If you encounter an error when attempting to delete a tag from an access point for directory buckets, you can do the following:

  • Verify that you have the required Permissions to delete a tag from an access point for directory buckets.

Steps

You can delete tags from access points for directory buckets by using the Amazon S3 console, the Amazon Command Line Interface (Amazon CLI), the Amazon S3 REST API, and Amazon SDKs.

To delete tags from an access point for directory buckets using the Amazon S3 console:

  1. Sign in to Amazon S3 console at https://console.amazonaws.cn/s3/.

  2. In the left navigation pane, choose Access Points (Directory Buckets).

  3. Choose the access point name.

  4. Choose the Properties tab.

  5. Scroll to the Tags section and select the checkbox next to the tag or tags that you would like to delete.

  6. Choose Delete.

  7. The Delete user-defined tags pop-up appears and asks you to confirm the deletion of the tag or tags you selected.

  8. Choose Delete to confirm.

SDK for Java 2.x

This example shows you how to delete tags from a directory bucket by using the Amazon SDK for Java 2.x. To use the command replace the user input placeholders with your own information.

import software.amazon.awssdk.regions.Region; import software.amazon.awssdk.services.s3control.S3ControlClient; import software.amazon.awssdk.services.s3control.model.ListTagsForResourceRequest; import software.amazon.awssdk.services.s3control.model.ListTagsForResourceResponse; public class ListTagsForResourceExample { public static void listTagsForResourceExample() { S3ControlClient s3Control = S3ControlClient.builder().region(Region.US_WEST_2).build(); UntagResourceRequest untagResourceRequest = UntagResourceRequest.builder() .resourceArn("arn:aws-cn::s3:region:111122223333:accesspoint/my-access-point/*") .accountId("111122223333") .tagKeys("key1") .build(); UntagResourceResponse response = s3Control.untagResource(untagResourceRequest); System.out.println("Status code (should be 204):"); System.out.println(response.sdkHttpResponse().statusCode()); } }

For information about the Amazon S3 REST API support for deleting tags from an access point, see the following section in the Amazon Simple Storage Service API Reference:

To install the Amazon CLI, see Installing the Amazon CLI in the Amazon Command Line Interface User Guide.

The following CLI example shows you how to delete tags from an access point by using the Amazon CLI. To use the command replace the user input placeholders with your own information.

Request:

aws s3control untag-resource \ --account-id 111122223333 \ --resource-arn arn:aws-cn::s3:region:111122223333:accesspoint/my-access-point/* \ --tag-keys "key1" "key2"

Response:

{ "ResponseMetadata": { "RequestId": "EXAMPLE123456789", "HTTPStatusCode": 204, "HTTPHeaders": { "date": "Wed, 19 Jun 2025 10:30:00 GMT", "content-length": "0" }, "RetryAttempts": 0 } }