Delete a custom AWS console access role

DELETE 
/aws-roles/:id

Deletes a custom AWS console access role: DynamoDB item, IAM role, and S3 policy document. System roles cannot be deleted (GE-1034 → HTTP 500). Custom roles with UsersAttached cannot be deleted (GE-1034 → HTTP 500). Missing RoleId also GE-1034 → 500. Success Message is "Custom AWS role deleted successfully". DynamoDB delete failure returns DB-1003 (400). IAM/S3 failures return GE-1034/GE-1032 as GenericFailure → 500. Not idempotent after success.

Request

Responses

200

Custom role deleted (DeleteAwsSystemRoleResponse).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

Validation failure. Body is {"Message": " - "}. Common codes: AUTH-1001, DB-1003 (DynamoDB delete failed), GE-1020-style update failures are not typical here.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

Missing role, system role, users still attached, or IAM/S3 delete failures use GenericFailure (often GE-1034 / GE-1032) → HTTP 500.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers