Revokes any permissions in the queue policy that matches the specified Label
parameter.
Note
Only the owner of a queue can remove permissions from it.
Cross-account permissions don’t apply to this action. For more information, see Grant cross-account permissions to a role and a user name in the Amazon SQS Developer Guide .
To remove the ability to change queue permissions, you must deny permission to the AddPermission
, RemovePermission
, and SetQueueAttributes
actions in your IAM policy.
See also: AWS API Documentation
See ‘aws help’ for descriptions of global parameters.
remove-permission
--queue-url <value>
--label <value>
[--cli-input-json | --cli-input-yaml]
[--generate-cli-skeleton <value>]
--queue-url
(string)
The URL of the Amazon SQS queue from which permissions are removed.
Queue URLs and names are case-sensitive.
--label
(string)
The identification of the permission to remove. This is the label added using the `` AddPermission `` action.
--cli-input-json
| --cli-input-yaml
(string)
Reads arguments from the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton
. If other arguments are provided on the command line, those values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally. This may not be specified along with --cli-input-yaml
.
--generate-cli-skeleton
(string)
Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input
, prints a sample input JSON that can be used as an argument for --cli-input-json
. Similarly, if provided yaml-input
it will print a sample input YAML that can be used with --cli-input-yaml
. If provided with the value output
, it validates the command inputs and returns a sample output JSON for that command.
See ‘aws help’ for descriptions of global parameters.
To remove a permission
This example removes the permission with the specified label from the specified queue.
Command:
aws sqs remove-permission --queue-url https://sqs.us-east-1.amazonaws.com/80398EXAMPLE/MyQueue --label SendMessagesFromMyQueue
Output:
None.
None