View a markdown version of this page

Delete machine-to-machine client stacks - Innovation Sandbox on AWS

Delete machine-to-machine client stacks

If you deployed any machine-to-machine (M2M) client stacks to grant programmatic API access, delete them before uninstalling the solution stacks. Each M2M client stack is a separate AWS CloudFormation stack that creates a dedicated IAM role trusted by an external principal. If you leave these stacks in place, they orphan IAM roles that reference the removed API.

Delete each M2M client stack using the same tool you used to deploy it — the scripts/m2m tooling described in Programmatic access (machine-to-machine), or the AWS CloudFormation console. To identify all M2M client stacks, use the M2M client listing script or filter CloudFormation stacks by the aws-solutions:isb-stack-type=M2mClient tag.

Note

If you disabled a client role using a revocation policy, remove that policy before deleting the stack; otherwise the stack deletion fails.