AWS Firewall Manager
Firewall Management (API Version 2018-01-01)


Permanently deletes an AWS Firewall Manager policy.

Request Syntax

{ "DeleteAllPolicyResources": boolean, "PolicyId": "string" }

Request Parameters

For information about the parameters that are common to all actions, see Common Parameters.

The request accepts the following data in JSON format.


If True, the request will also perform a clean-up process that will:

  • Delete rule groups created by AWS Firewall Manager

  • Remove web ACLs from in-scope resources

  • Delete web ACLs that contain no rules or rule groups

After the cleanup, in-scope resources will no longer be protected by web ACLs in this policy. Protection of out-of-scope resources will remain unchanged. Scope is determined by tags and accounts associated with the policy. When creating the policy, if you specified that only resources in specific accounts or with specific tags be protected by the policy, those resources are in-scope. All others are out of scope. If you did not specify tags or accounts, all resources are in-scope.

Type: Boolean

Required: No


The ID of the policy that you want to delete. PolicyId is returned by PutPolicy and by ListPolicies.

Type: String

Length Constraints: Fixed length of 36.

Pattern: ^[a-z0-9A-Z-]{36}$

Required: Yes

Response Elements

If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.


For information about the errors that are common to all actions, see Common Errors.


The operation failed because of a system problem, even though the request was valid. Retry your request.

HTTP Status Code: 400


The operation failed because there was nothing to do. For example, you might have submitted an AssociateAdminAccount request, but the account ID that you submitted was already set as the AWS Firewall Manager administrator.

HTTP Status Code: 400


The specified resource was not found.

HTTP Status Code: 400

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: