Deleting a tag from an access point for directory buckets
You can remove tags from Access Points for directory buckets. For additional information, see Using tags with S3 Access Points for directory buckets.
Note
If you delete a tag and later learn that it was being used to track costs or for access control, you can add the tag back to the access point for directory buckets.
Permissions
To delete a tag from an access point for directory buckets, you must have the following permission:
s3express:UntagResource
Troubleshooting errors
If you encounter an error when attempting to delete a tag from an access point for directory buckets, you can do the following:
Verify that you have the required Permissions to delete a tag from an access point for directory buckets.
Steps
You can delete tags from access points for directory buckets by using the Amazon S3 console, the Amazon Command Line Interface (Amazon CLI), the Amazon S3 REST API, and Amazon SDKs.
To delete tags from an access point for directory buckets using the Amazon S3 console:
Sign in to Amazon S3 console at https://console.amazonaws.cn/s3/
. In the left navigation pane, choose Access Points (Directory Buckets).
Choose the access point name.
Choose the Properties tab.
Scroll to the Tags section and select the checkbox next to the tag or tags that you would like to delete.
Choose Delete.
The Delete user-defined tags pop-up appears and asks you to confirm the deletion of the tag or tags you selected.
Choose Delete to confirm.
For information about the Amazon S3 REST API support for deleting tags from an access point, see the following section in the Amazon Simple Storage Service API Reference:
To install the Amazon CLI, see Installing the Amazon CLI in the Amazon Command Line Interface User Guide.
The following CLI example shows you how to delete tags from an access point by using the Amazon CLI. To use the command replace the user input placeholders
with your own information.
Request:
aws s3control untag-resource \ --account-id
111122223333
\ --resource-arn arn:aws-cn::s3:region
:111122223333
:accesspoint//* \ --tag-keys "
my-access-point
key1
" "key2
"
Response:
{ "ResponseMetadata": { "RequestId": "EXAMPLE123456789", "HTTPStatusCode": 204, "HTTPHeaders": { "date": "Wed, 19 Jun 2025 10:30:00 GMT", "content-length": "0" }, "RetryAttempts": 0 } }