Deleting a tag from an access point - Amazon Simple Storage Service
PermissionsTroubleshooting errorsSteps
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Deleting a tag from an access point

You can remove tags from Amazon S3 Access Points. An Amazon tag is a key-value pair that holds metadata about resources, in this case Access Points. For more information about tags, see Using tags with S3 Access Points for general purpose buckets.

Note

If you delete a tag and later learn that it was being used to track costs or for access control, you can add the tag back to the access point.

Permissions

To delete a tag from an access point, you must have the following permission:

  • s3:UntagResource

Troubleshooting errors

If you encounter an error when attempting to delete a tag from an access point, you can do the following:

  • Verify that you have the required Permissions to delete a tag from an access point.

Steps

You can delete tags from access points by using the Amazon S3 console, the Amazon Command Line Interface (Amazon CLI), the Amazon S3 REST API, and Amazon SDKs.

To delete tags from an access point using the Amazon S3 console:

  1. Sign in to Amazon S3 console at https://console.amazonaws.cn/s3/.

  2. In the left navigation pane, choose Access Points (General Purpose Buckets).

  3. Choose the access point name.

  4. Choose the Properties tab.

  5. Scroll to the Tags section and select the checkbox next to the tag or tags that you would like to delete.

  6. Choose Delete.

  7. The Delete user-defined tags pop-up appears and asks you to confirm the deletion of the tag or tags you selected.

  8. Choose Delete to confirm.

SDK for Java 2.x

This example shows you how to delete tags from an access point by using the Amazon SDK for Java 2.x. To use the command replace the user input placeholders with your own information. 

UntagResourceRequest tagResourceRequest = UntagResourceRequest.builder()
                .resourceArn(arn:aws-cn::s3:region:111122223333:accesspoint/my-access-point/*)
                .accountId(111122223333)
                .tagKeys(List.of("key1", "key2")).build();
awss3Control.untagResource(tagResourceRequest);

For information about the Amazon S3 REST API support for deleting tags from an access point, see the following section in the Amazon Simple Storage Service API Reference:

To install the Amazon CLI, see Installing the Amazon CLI in the Amazon Command Line Interface User Guide.

The following CLI example shows you how to delete tags from an access point by using the Amazon CLI. To use the command replace the user input placeholders with your own information.

Request:

aws s3control untag-resource \
--account-id 111122223333 \
--resource-arn arn:aws-cn::s3:region:444455556666:access-point/my-access-point \
--tag-keys "tagkey1" "tagkey2"
  
  
  aws s3control untag-resource \
--account-id 111122223333 \
--resource-arn arn:aws-cn::s3:region:444455556666:accesspointmy-access-point/* \
--tag-keys "key1" "key2"

Response:

{
  "ResponseMetadata": {
    "RequestId": "EXAMPLE123456789",
    "HTTPStatusCode": 204,
    "HTTPHeaders": {
        "date": "Wed, 19 Jun 2025 10:30:00 GMT",
        "content-length": "0"
    },
    "RetryAttempts": 0
  }
}