# Remove tags associated with a KMS key
<a name="remove-tags"></a>

Tags help identify and organize your Amazon resources. You can remove the tags associated with your customer managed KMS keys in the Amazon KMS console or by using the [UntagResource](https://docs.amazonaws.cn/kms/latest/APIReference/API_UntagResource.html) operation. You cannot edit or remove the tags of an Amazon managed key.

The following procedures demonstrate how to remove tags from a KMS key. The Amazon KMS API examples use the [Amazon Command Line Interface (Amazon CLI)](http://www.amazonaws.cn/cli/), but you can use any supported programming language.

## Using the Amazon KMS console
<a name="delete-tag-console"></a>

1. Sign in to the Amazon Web Services Management Console and open the Amazon Key Management Service (Amazon KMS) console at [https://console.amazonaws.cn/kms](https://console.amazonaws.cn/kms).

1. To change the Amazon Web Services Region, use the Region selector in the upper-right corner of the page.

1. In the navigation pane, choose **Customer managed keys**. (You cannot manage the tags of an Amazon managed key)

1. You can use the table filter to display only KMS keys with particular tags. For details, see [View tags using the Amazon KMS console](view-tags.md#view-tag-console).

1. Select the check box next to the alias of a KMS key.

1. Choose **Key actions**, **Add or edit tags**.

1. On the details page for KMS key, choose the **Tags** tab.
   + To delete a tag, choose **Edit**. On the tag row, choose **Remove**, and then choose **Save**.

1. To save your changes, choose **Save changes**.

## Using the Amazon KMS API
<a name="tagging-keys-untag-resource"></a>

The [UntagResource](https://docs.amazonaws.cn/kms/latest/APIReference/API_UntagResource.html) operation deletes tags from a KMS key. To identify the tags to delete, specify the tag keys. You cannot use this operation to delete tags from KMS keys a different Amazon Web Services account.

When it succeeds, the `UntagResource` operation doesn't return any output. Also, if the specified tag key isn't found on the KMS key, it doesn't throw an exception or return a response. To confirm that the operation worked, use the [ListResourceTags](https://docs.amazonaws.cn/kms/latest/APIReference/API_ListResourceTags.html) operation.

For example, this command deletes the **Purpose** tag and its value from the specified KMS key.

```
$ aws kms untag-resource --key-id 1234abcd-12ab-34cd-56ef-1234567890ab --tag-keys Purpose
```