Table Of Contents


User Guide

First time using the AWS CLI? See the User Guide for help getting started.

[ aws . fms ]



Permanently deletes an AWS Firewall Manager policy.

See also: AWS API Documentation

See 'aws help' for descriptions of global parameters.


--policy-id <value>
[--delete-all-policy-resources | --no-delete-all-policy-resources]
[--cli-input-json <value>]
[--generate-cli-skeleton <value>]


--policy-id (string)

The ID of the policy that you want to delete. PolicyId is returned by PutPolicy and by ListPolicies .

--delete-all-policy-resources | --no-delete-all-policy-resources (boolean)

If True , the request will also perform a clean-up process that will:

  • Delete rule groups created by AWS Firewall Manager
  • Remove web ACLs from in-scope resources
  • Delete web ACLs that contain no rules or rule groups

After the cleanup, in-scope resources will no longer be protected by web ACLs in this policy. Protection of out-of-scope resources will remain unchanged. Scope is determined by tags and accounts associated with the policy. When creating the policy, if you specified that only resources in specific accounts or with specific tags be protected by the policy, those resources are in-scope. All others are out of scope. If you did not specify tags or accounts, all resources are in-scope.

--cli-input-json (string) Performs service operation based on the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally.

--generate-cli-skeleton (string) Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input, prints a sample input JSON that can be used as an argument for --cli-input-json. If provided with the value output, it validates the command inputs and returns a sample output JSON for that command.

See 'aws help' for descriptions of global parameters.