Help Center/ Organizations/ API Reference/ APIs/ Others/ Removing Tags from the Specified Resource
Updated on 2026-07-29 GMT+08:00
Online Debugging
CLI Examples
View PDF
Share

Removing Tags from the Specified Resource

Function

This API is used to remove any tags with the specified key from the specified resource. You can attach tags to the following resources in Organizations: accounts, OUs, roots, and policies. This API can be called only from the organization's management account.

Debugging

You can debug this API through automatic authentication in API Explorer or use the SDK sample code generated by API Explorer.

Authorization Information

Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.

  • If you are using role/policy-based authorization, see Permissions Policies and Supported Actions for details on the required permissions.
  • If you are using identity policy-based authorization, the following identity policy-based permissions are required.

    Action

    Access Level

    Resource Type (*: required)

    Condition Key

    Alias

    Dependencies

    organizations:resources:untag

    Tagging

    account

    g:ResourceTag/<tag-key>

    -

    -

    ou

    g:ResourceTag/<tag-key>

    root

    g:ResourceTag/<tag-key>

    policy

    g:ResourceTag/<tag-key>

    -

    • g:RequestTag/<tag-key>

    • g:TagKeys

URI

POST /v1/organizations/resources/{resource_id}/untag

Table 1 Path Parameters

Parameter

Mandatory

Type

Description

resource_id

Yes

String

Definition

Unique ID of a root, OU, account, or policy.

Constraints

Mandatory

Range

The value must comply with the regular expression ^(?:r-[0-9a-z]{4,32}|[\w-]+|ou-[0-9a-z]{8,32}|p-[0-9a-zA-Z_]{8,128})$.

The value contains a maximum of 130 characters.

Default Value

No default value

Request Parameters

Table 2 Request header parameters

Parameter

Mandatory

Type

Description

X-Security-Token

No

String

Definition

Security token (session token) of your temporary security credentials. If a temporary security credential is used, this header is required.

Constraints

N/A

Range

The value contains 0 to 32,768 characters.

Default Value

No default value
Table 3 Request body parameters

Parameter

Mandatory

Type

Description

tag_keys

Yes

Array of strings

Definition

Tag list information.

Constraints

Mandatory

Range

1 to 20 tags

Default Value

No default value

Response Parameters

Status code: 200

Successful.

None

Example Requests

Removing any tags with the specified key from the specified resource

POST https://{endpoint}/v1/organizations/resources/{resource_id}/untag

{
  "tag_keys" : [ "key1" ]
}

Example Responses

None

Status Codes

Status Code

Description

200

Successful.

Error Codes

See Error Codes.

Parent topic: Others