Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions,
see Getting Started with Amazon Web Services in China
(PDF).
Use DeletePolicyVersion
with an Amazon SDK or command line tool
The following code examples show how to use DeletePolicyVersion
.
Action examples are code excerpts from larger programs and must be run in context. You can see this action in
context in the following code examples:
- CLI
-
- Amazon CLI
-
To delete a version of a managed policy
This example deletes the version identified as v2
from the policy whose ARN is arn:aws:iam::123456789012:policy/MySamplePolicy
.
aws iam delete-policy-version \
--policy-arn arn:aws:iam::123456789012:policy/MyPolicy \
--version-id v2
This command produces no output.
For more information, see Policies and permissions in IAM in the Amazon IAM User Guide.
- PowerShell
-
- Tools for PowerShell
-
Example 1: This example deletes the version identified as v2
from the policy whose ARN is arn:aws:iam::123456789012:policy/MySamplePolicy
.
Remove-IAMPolicyVersion -PolicyArn arn:aws:iam::123456789012:policy/MySamplePolicy -VersionID v2
Example 2: This example deletes a policy by first deleting all non-default policy versions and then deleting the policy itself. The first line retrieves the policy object. The second line retrieves all of the policy versions that are not flagged as the default into a collection and then uses this command to delete each policy in the collection. The last line removes the policy itself as well as the remaining default version. Note that to successfully delete a managed policy, you must also detach the policy from any users, groups, or roles by using the Unregister-IAMUserPolicy
, Unregister-IAMGroupPolicy
, and Unregister-IAMRolePolicy
commands. See the example for the Remove-IAMPolicy
cmdlet.
$pol = Get-IAMPolicy -PolicyArn arn:aws:iam::123456789012:policy/MySamplePolicy
Get-IAMPolicyVersions -PolicyArn $pol.Arn | where {-not $_.IsDefaultVersion} | Remove-IAMPolicyVersion -PolicyArn $pol.Arn -force
Remove-IAMPolicy -PolicyArn $pol.Arn -force
For a complete list of Amazon SDK developer guides and code examples, see
Using IAM with an Amazon SDK.
This topic also includes information about getting started and details about previous SDK versions.