Services and resource types that support enforcement - Amazon Organizations
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Services and resource types that support enforcement

The following services and resource types support enforcement with tag policies:

Basic Compliance Rules Required Tag Keys
Service Tag Policies JSON syntax Amazon CloudFormation Alias Reporting Mode Enforcement Mode Reporting Mode Enforce for IaC
AWS Amplify UI Builder [amplifyuibuilder] amplifyuibuilder:theme

  • AWS::AmplifyUIBuilder::Theme

Yes No No No
amplifyuibuilder:app/environment/components

  • AWS::AmplifyUIBuilder::Component

Yes Yes No No
amplifyuibuilder:component

  • AWS::AmplifyUIBuilder::Component

Yes No No No
amplifyuibuilder:ALL_SUPPORTED

  • N/A

No Yes No No
AWS Amplify [amplify] amplify:apps

  • AWS::Amplify::App

Yes No Yes Yes
AWS App Mesh [appmesh] appmesh:mesh

  • AWS::AppMesh::Mesh

Yes Yes Yes Yes
appmesh:mesh/virtualgateway/gatewayroute

  • AWS::AppMesh::GatewayRoute

Yes Yes Yes Yes
appmesh:mesh/virtualgateway

  • AWS::AppMesh::VirtualGateway

Yes Yes Yes Yes
appmesh:mesh/virtualnode

  • AWS::AppMesh::VirtualNode

Yes Yes Yes Yes
appmesh:mesh/virtualrouter/route

  • AWS::AppMesh::Route

Yes Yes Yes Yes
appmesh:mesh/virtualservice

  • AWS::AppMesh::VirtualService

Yes Yes Yes Yes
appmesh:mesh/virtualrouter

  • AWS::AppMesh::VirtualRouter

Yes Yes Yes Yes
appmesh:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS App Runner [apprunner] apprunner:autoscalingconfiguration

  • AWS::AppRunner::AutoScalingConfiguration

Yes No Yes Yes
apprunner:service

  • AWS::AppRunner::Service

Yes No Yes Yes
apprunner:connection

  • N/A

Yes No No No
apprunner:vpcingressconnection

  • AWS::AppRunner::VpcIngressConnection

Yes No Yes Yes
apprunner:observabilityconfiguration

  • AWS::AppRunner::ObservabilityConfiguration

Yes No Yes Yes
apprunner:vpcconnector

  • AWS::AppRunner::VpcConnector

Yes No Yes Yes
AWS AppConfig [appconfig] appconfig:application/environment

  • AWS::AppConfig::Environment

Yes Yes Yes Yes
appconfig:environment

  • AWS::AppConfig::Environment

Yes No No No
appconfig:configuration

  • N/A

Yes No No No
appconfig:extension

  • AWS::AppConfig::Extension

Yes No Yes Yes
appconfig:application

  • AWS::AppConfig::Application

Yes Yes Yes Yes
appconfig:extensionassociation

  • AWS::AppConfig::ExtensionAssociation

Yes No Yes Yes
appconfig:application/configurationprofile

  • AWS::AppConfig::ConfigurationProfile

Yes Yes Yes Yes
appconfig:application/environment/deployment

  • AWS::AppConfig::Deployment

Yes Yes No No
appconfig:deploymentstrategy

  • AWS::AppConfig::DeploymentStrategy

Yes Yes Yes Yes
AWS AppFabric [appfabric] appfabric:appbundle/ingestion

  • N/A

Yes No No No
appfabric:appbundle

  • N/A

Yes No No No
appfabric:appbundle/appauthorization

  • N/A

Yes No No No
AWS AppSync [appsync] appsync:domainnames

  • AWS::AppSync::DomainName

Yes No No No
appsync:apis

  • AWS::AppSync::GraphQLApi

Yes No No No
appsync:apis

  • AWS::AppSync::Api

Yes No No No
AWS Application Auto Scaling [application-autoscaling] application-autoscaling:scalable-target

  • AWS::ApplicationAutoScaling::ScalableTarget

Yes No No No
AWS Application Migration Service [mgn] mgn:source-server

  • N/A

Yes No No No
mgn:connector

  • N/A

Yes No No No
mgn:application

  • N/A

Yes No No No
mgn:wave

  • N/A

Yes No No No
mgn:launch-configuration-template

  • N/A

Yes No No No
mgn:replication-configuration-template

  • N/A

Yes No No No
mgn:job

  • N/A

Yes No No No
mgn:import

  • N/A

Yes No No No
mgn:vcenter-client

  • N/A

Yes No No No
mgn:export

  • N/A

Yes No No No
AWS Audit Manager [auditmanager] auditmanager:assessment

  • AWS::AuditManager::Assessment

Yes Yes Yes Yes
auditmanager:control

  • N/A

Yes Yes No No
auditmanager:assessmentframework

  • N/A

Yes Yes No No
auditmanager:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS B2B Data Interchange [b2bi] b2bi:profile

  • AWS::B2BI::Profile

Yes No Yes Yes
b2bi:partnership

  • AWS::B2BI::Partnership

Yes No Yes Yes
b2bi:transformer

  • AWS::B2BI::Transformer

Yes No Yes Yes
b2bi:capability

  • AWS::B2BI::Capability

Yes No Yes Yes
AWS Backup Gateway [backup-gateway] backup-gateway:vm

  • N/A

Yes Yes No No
backup-gateway:hypervisor

  • AWS::BackupGateway::Hypervisor

Yes Yes Yes Yes
backup-gateway:gateway

  • N/A

Yes Yes No No
backup-gateway:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Backup [backup-search] backup-search:search-export-job

  • N/A

Yes No No No
backup-search:search-job

  • N/A

Yes No No No
AWS Backup [backup] backup:legal-hold

  • N/A

Yes No No No
backup:tiering-configuration

  • N/A

Yes No No No
backup:report-plan

  • AWS::Backup::ReportPlan

Yes No Yes Yes
backup:backup-vault

  • AWS::Backup::LogicallyAirGappedBackupVault

  • AWS::Backup::BackupVault

Yes Yes No No
backup:restore-testing-plan

  • AWS::Backup::RestoreTestingPlan

Yes No Yes Yes
backup:framework

  • AWS::Backup::Framework

Yes No Yes Yes
backup:backup-plan

  • AWS::Backup::BackupPlan

Yes Yes Yes Yes
backup:recovery-point

  • N/A

Yes No No No
backup:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Batch [batch] batch:service-environment

  • AWS::Batch::ServiceEnvironment

Yes No No No
batch:job-definition

  • AWS::Batch::JobDefinition

Yes Yes Yes Yes
batch:scheduling-policy

  • AWS::Batch::SchedulingPolicy

Yes No Yes Yes
batch:consumable-resource

  • AWS::Batch::ConsumableResource

Yes No Yes Yes
batch:service-job

  • N/A

Yes No No No
batch:compute-environment

  • AWS::Batch::ComputeEnvironment

Yes No Yes Yes
batch:job

  • N/A

Yes Yes No No
batch:job-queue

  • AWS::Batch::JobQueue

Yes Yes Yes Yes
batch:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Billing And Cost Management Data Exports [bcm-data-exports] bcm-data-exports:export

  • AWS::BCMDataExports::Export

Yes No Yes Yes
AWS Billing And Cost Management Pricing Calculator [bcm-pricing-calculator] bcm-pricing-calculator:workload-estimate

  • N/A

Yes No No No
bcm-pricing-calculator:bill-estimate

  • N/A

Yes No No No
bcm-pricing-calculator:bill-scenario

  • N/A

Yes No No No
AWS Billing Conductor [billingconductor] billingconductor:billinggroup

  • AWS::BillingConductor::BillingGroup

Yes No No No
billingconductor:pricingplan

  • AWS::BillingConductor::PricingPlan

Yes No No No
billingconductor:customlineitem

  • AWS::BillingConductor::CustomLineItem

Yes No No No
billingconductor:pricingrule

  • AWS::BillingConductor::PricingRule

Yes No No No
AWS Billing [billing] billing:billingview

  • AWS::Billing::BillingView

Yes No No No
AWS Budget Service [budgets] budgets:budget

  • AWS::Budgets::Budget

Yes No Yes Yes
budgets:budget/action

  • AWS::Budgets::BudgetsAction

Yes No Yes Yes
AWS BugBust [bugbust] bugbust:event

  • N/A

Yes Yes No No
bugbust:ALL_SUPPORTED

  • N/A

No Yes No No
AWS Certificate Manager [acm] acm:certificate

  • AWS::CertificateManager::Certificate

Yes Yes Yes Yes
acm:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Chatbot [chatbot] chatbot:custom-action

  • AWS::Chatbot::CustomAction

Yes No No No
chatbot:chat-configuration/microsoft-teams-channel

  • AWS::Chatbot::SlackChannelConfiguration

  • AWS::Chatbot::MicrosoftTeamsChannelConfiguration

Yes No No No
chatbot:chat-configuration/slack-channel

  • AWS::Chatbot::SlackChannelConfiguration

  • AWS::Chatbot::MicrosoftTeamsChannelConfiguration

Yes No No No
chatbot:chat-configuration/chime-webhook

  • AWS::Chatbot::SlackChannelConfiguration

  • AWS::Chatbot::MicrosoftTeamsChannelConfiguration

Yes No No No
AWS Clean Rooms ML [cleanrooms-ml] cleanrooms-ml:configured-model-algorithm

  • N/A

Yes No No No
cleanrooms-ml:trained-model

  • N/A

Yes No No No
cleanrooms-ml:membership/trained-model

  • N/A

Yes No No No
cleanrooms-ml:configured-model-algorithm-association

  • N/A

Yes No No No
cleanrooms-ml:membership/configured-model-algorithm-association

  • N/A

Yes No No No
cleanrooms-ml:membership/trained-model-inference-job

  • N/A

Yes No No No
cleanrooms-ml:trained-model-inference-job

  • N/A

Yes No No No
cleanrooms-ml:audience-model

  • N/A

Yes No No No
cleanrooms-ml:audience-generation-job

  • N/A

Yes No No No
cleanrooms-ml:training-dataset

  • AWS::CleanRoomsML::TrainingDataset

Yes No Yes Yes
cleanrooms-ml:configured-audience-model

  • N/A

Yes No No No
AWS Clean Rooms [cleanrooms] cleanrooms:collaboration

  • AWS::CleanRooms::Collaboration

Yes Yes No No
cleanrooms:membership/privacybudgettemplate

  • AWS::CleanRooms::PrivacyBudgetTemplate

Yes No No No
cleanrooms:membership/configuredtableassociation

  • AWS::CleanRooms::ConfiguredTableAssociation

Yes Yes No No
cleanrooms:configuredtable

  • AWS::CleanRooms::ConfiguredTable

Yes Yes Yes Yes
cleanrooms:membership/analysistemplate

  • AWS::CleanRooms::AnalysisTemplate

Yes No No No
cleanrooms:membership/configuredaudiencemodelassociation

  • N/A

Yes No No No
cleanrooms:membership

  • AWS::CleanRooms::Membership

Yes Yes No No
cleanrooms:membership/idmappingtable

  • AWS::CleanRooms::IdMappingTable

Yes No No No
cleanrooms:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Cloud Map [servicediscovery] servicediscovery:namespace

  • AWS::ServiceDiscovery::HttpNamespace

  • AWS::ServiceDiscovery::PrivateDnsNamespace

Yes No No No
servicediscovery:service

  • AWS::ServiceDiscovery::Service

Yes No Yes Yes
AWS Cloud9 [cloud9] cloud9:environment

  • AWS::Cloud9::EnvironmentEC2

Yes Yes No No
cloud9:ALL_SUPPORTED

  • N/A

No Yes No No
AWS CloudFormation [cloudformation] cloudformation:stack

  • AWS::CloudFormation::Stack

Yes No Yes Yes
cloudformation:stackset

  • AWS::CloudFormation::StackSet

Yes No Yes Yes
AWS CloudHSM [cloudhsm] cloudhsm:backup

  • N/A

Yes No No No
cloudhsm:cluster

  • N/A

Yes No No No
AWS CloudTrail [cloudtrail] cloudtrail:channel

  • AWS::CloudTrail::Channel

Yes No Yes Yes
cloudtrail:eventdatastore

  • AWS::CloudTrail::EventDataStore

Yes No Yes Yes
cloudtrail:trail

  • AWS::CloudTrail::Trail

Yes Yes Yes Yes
cloudtrail:dashboard

  • AWS::CloudTrail::Dashboard

Yes No Yes Yes
cloudtrail:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS CloudWatch RUM [rum] rum:appmonitor

  • AWS::RUM::AppMonitor

Yes No Yes Yes
AWS CodeArtifact [codeartifact] codeartifact:repository

  • AWS::CodeArtifact::Repository

Yes No Yes Yes
codeartifact:domain

  • AWS::CodeArtifact::Domain

Yes No Yes Yes
codeartifact:package-group

  • AWS::CodeArtifact::PackageGroup

Yes No No No
AWS CodeBuild [codebuild] codebuild:project

  • AWS::CodeBuild::Project

Yes Yes Yes Yes
codebuild:fleet

  • AWS::CodeBuild::Fleet

Yes No No No
codebuild:report-group

  • AWS::CodeBuild::ReportGroup

Yes No Yes Yes
codebuild:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS CodeCommit [codecommit] codecommit:repository

  • AWS::CodeCommit::Repository

Yes Yes Yes Yes
codecommit:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS CodeConnections [codeconnections] codeconnections:host

  • N/A

Yes No No No
codeconnections:connection

  • AWS::CodeConnections::Connection

Yes No Yes Yes
codeconnections:repository-link

  • N/A

Yes No No No
AWS CodeDeploy [codedeploy] codedeploy:deploymentconfig

  • AWS::CodeDeploy::DeploymentConfig

Yes No Yes Yes
codedeploy:application

  • AWS::CodeDeploy::Application

Yes No Yes Yes
codedeploy:deploymentgroup

  • AWS::CodeDeploy::DeploymentGroup

Yes No No No
codedeploy:instance

  • N/A

Yes No No No
AWS CodePipeline [codepipeline] codepipeline:webhook

  • AWS::CodePipeline::Webhook

Yes Yes Yes Yes
codepipeline:pipeline

  • AWS::CodePipeline::Pipeline

Yes Yes Yes Yes
codepipeline:actiontype

  • AWS::CodePipeline::CustomActionType

Yes Yes Yes Yes
codepipeline:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS CodeStar Connections [codestar-connections] codestar-connections:connection

  • AWS::CodeStarConnections::Connection

Yes Yes Yes Yes
codestar-connections:host

  • N/A

Yes Yes No No
codestar-connections:repository-link

  • AWS::CodeStarConnections::RepositoryLink

Yes No Yes Yes
codestar-connections:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS CodeStar Notifications [codestar-notifications] codestar-notifications:notificationrule

  • AWS::CodeStarNotifications::NotificationRule

Yes No Yes Yes
AWS CodeStar [codestar] codestar:project

  • AWS::CodeStar::GitHubRepository

Yes No No No
AWS Config [config] config:aggregation-authorization

  • AWS::Config::AggregationAuthorization

Yes Yes Yes Yes
config:organization-config-rule

  • AWS::Config::OrganizationConfigRule

Yes No No No
config:organization-conformance-pack

  • AWS::Config::OrganizationConformancePack

Yes No No No
config:config-rule

  • AWS::Config::ConfigRule

Yes Yes Yes Yes
config:configuration-recorder

  • AWS::Config::ConfigurationRecorder

Yes No No No
config:stored-query

  • AWS::Config::StoredQuery

Yes No Yes Yes
config:config-aggregator

  • AWS::Config::ConfigurationAggregator

Yes Yes Yes Yes
config:conformance-pack

  • AWS::Config::ConformancePack

Yes No Yes Yes
config:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Control Tower [controltower] controltower:landingzone

  • AWS::ControlTower::LandingZone

Yes No No No
controltower:enabledcontrol

  • AWS::ControlTower::EnabledControl

Yes No No No
controltower:enabledbaseline

  • AWS::ControlTower::EnabledBaseline

Yes No No No
AWS Cost Explorer Service [ce] ce:anomalysubscription

  • AWS::CE::AnomalySubscription

Yes No Yes Yes
ce:costcategory

  • AWS::CE::CostCategory

Yes No Yes Yes
ce:anomalymonitor

  • AWS::CE::AnomalyMonitor

Yes No Yes Yes
AWS Cost and Usage Report [cur] cur:definition

  • AWS::CUR::ReportDefinition

Yes No Yes Yes
AWS Data Exchange [dataexchange] dataexchange:entitled-revisions

  • N/A

Yes No No No
dataexchange:event-actions

  • N/A

Yes No No No
dataexchange:entitled-data-sets

  • N/A

Yes No No No
dataexchange:data-grants

  • N/A

Yes No No No
dataexchange:data-sets

  • N/A

Yes No No No
AWS Data Pipeline [datapipeline] datapipeline:pipeline

  • AWS::DataPipeline::Pipeline

Yes No No No
AWS DataSync [datasync] datasync:location

  • AWS::DataSync::LocationEFS

  • AWS::DataSync::LocationS3

  • AWS::DataSync::LocationFSxLustre

  • AWS::DataSync::LocationNFS

  • AWS::DataSync::LocationFSxONTAP

  • AWS::DataSync::LocationObjectStorage

  • AWS::DataSync::LocationFSxOpenZFS

  • AWS::DataSync::LocationSMB

  • AWS::DataSync::LocationFSxWindows

  • AWS::DataSync::LocationAzureBlob

  • AWS::DataSync::LocationHDFS

Yes No No No
datasync:task

  • AWS::DataSync::Task

Yes No Yes Yes
datasync:task/execution

  • N/A

Yes No No No
datasync:agent

  • AWS::DataSync::Agent

Yes No No No
datasync:system/job

  • N/A

Yes No No No
datasync:system

  • N/A

Yes No No No
AWS Database Migration Service [dms] dms:assessment-run

  • N/A

Yes No No No
dms:subgrp

  • AWS::DMS::ReplicationSubnetGroup

Yes Yes Yes Yes
dms:es

  • AWS::DMS::EventSubscription

Yes Yes Yes Yes
dms:replication-config

  • AWS::DMS::ReplicationConfig

Yes No Yes Yes
dms:cert

  • AWS::DMS::Certificate

Yes No Yes Yes
dms:rep

  • AWS::DMS::ReplicationInstance

Yes Yes Yes Yes
dms:instance-profile

  • AWS::DMS::InstanceProfile

Yes No Yes Yes
dms:task

  • AWS::DMS::ReplicationTask

Yes Yes Yes Yes
dms:endpoint

  • AWS::DMS::Endpoint

Yes Yes Yes Yes
dms:data-migration

  • AWS::DMS::DataMigration

Yes No No No
dms:data-provider

  • AWS::DMS::DataProvider

Yes No Yes Yes
dms:migration-project

  • AWS::DMS::MigrationProject

Yes No Yes Yes
dms:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Deadline Cloud [deadline] deadline:license-endpoint

  • AWS::Deadline::LicenseEndpoint

Yes No Yes Yes
deadline:farm

  • AWS::Deadline::Farm

Yes No Yes Yes
deadline:monitor

  • AWS::Deadline::Monitor

Yes No No No
AWS DeepComposer [deepcomposer] deepcomposer:composition

  • N/A

Yes No No No
deepcomposer:model

  • N/A

Yes No No No
AWS DeepRacer [deepracer] deepracer:leaderboard_evaluation_job

  • N/A

Yes No No No
deepracer:leaderboard

  • N/A

Yes No No No
deepracer:model

  • N/A

Yes No No No
deepracer:training_job

  • N/A

Yes No No No
deepracer:evaluation_job

  • N/A

Yes No No No
deepracer:car

  • N/A

Yes No No No
AWS Device Farm [devicefarm] devicefarm:device

  • N/A

Yes No No No
devicefarm:testgrid-project

  • AWS::DeviceFarm::TestGridProject

Yes No Yes Yes
devicefarm:deviceinstance

  • N/A

Yes No No No
devicefarm:devicepool

  • AWS::DeviceFarm::DevicePool

Yes No No No
devicefarm:project

  • AWS::DeviceFarm::Project

Yes No Yes Yes
devicefarm:testgrid-session

  • N/A

Yes No No No
devicefarm:session

  • N/A

Yes No No No
devicefarm:instanceprofile

  • AWS::DeviceFarm::InstanceProfile

Yes No Yes Yes
devicefarm:networkprofile

  • AWS::DeviceFarm::NetworkProfile

Yes No No No
devicefarm:vpceconfiguration

  • AWS::DeviceFarm::VPCEConfiguration

Yes No No No
devicefarm:run

  • N/A

Yes No No No
AWS Diode Messaging [diode-messaging] diode-messaging:responding-flow

  • N/A

Yes No No No
diode-messaging:mapping

  • N/A

Yes Yes No No
diode-messaging:requesting-flow

  • N/A

Yes No No No
AWS Diode [diode] diode:transfer

  • N/A

Yes No No No
diode:account-mapping

  • N/A

Yes No No No
AWS Direct Connect [directconnect] directconnect:dxvif

  • N/A

Yes Yes No No
directconnect:dxlag

  • N/A

Yes Yes No No
directconnect:dxcon

  • N/A

Yes Yes No No
directconnect:dx-gateway

  • N/A

Yes No No No
directconnect:ALL_SUPPORTED

  • N/A

No Yes No No
AWS Directory Service [ds] ds:directory

  • AWS::DirectoryService::MicrosoftAD

  • AWS::DirectoryService::SimpleAD

Yes No No No
AWS Elastic Beanstalk [elasticbeanstalk] elasticbeanstalk:platform

  • N/A

Yes Yes No No
elasticbeanstalk:configurationtemplate

  • AWS::ElasticBeanstalk::ConfigurationTemplate

Yes Yes Yes Yes
elasticbeanstalk:application

  • AWS::ElasticBeanstalk::Application

Yes Yes Yes Yes
elasticbeanstalk:environment

  • AWS::ElasticBeanstalk::Environment

Yes No Yes Yes
elasticbeanstalk:applicationversion

  • AWS::ElasticBeanstalk::ApplicationVersion

Yes Yes Yes Yes
elasticbeanstalk:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Elastic Disaster Recovery [drs] drs:job

  • N/A

Yes No No No
drs:source-network

  • N/A

Yes No No No
drs:replication-configuration-template

  • N/A

Yes No No No
drs:source-server

  • N/A

Yes No No No
drs:launch-configuration-template

  • N/A

Yes No No No
drs:recovery-instance

  • N/A

Yes No No No
AWS Elastic Load Balancing [elasticloadbalancing] elasticloadbalancing:loadbalancer

  • AWS::ElasticLoadBalancingV2::LoadBalancer

Yes Yes Yes Yes
elasticloadbalancing:targetgroup

  • AWS::ElasticLoadBalancingV2::TargetGroup

Yes Yes Yes Yes
elasticloadbalancing:loadbalancer

  • AWS::ElasticLoadBalancing::LoadBalancer

Yes Yes Yes Yes
elasticloadbalancing:listener

  • AWS::ElasticLoadBalancingV2::Listener

Yes Yes Yes Yes
elasticloadbalancing:truststore

  • AWS::ElasticLoadBalancingV2::TrustStore

Yes No Yes Yes
elasticloadbalancing:listener-rule

  • AWS::ElasticLoadBalancingV2::ListenerRule

Yes Yes Yes Yes
AWS Elemental Appliances and Software [elemental-appliances-software] elemental-appliances-software:quote

  • N/A

Yes No No No
AWS Elemental MediaConnect [mediaconnect] mediaconnect:routeroutput

  • AWS::MediaConnect::RouterOutput

Yes No No No
mediaconnect:source

  • AWS::MediaConnect::FlowSource

Yes No Yes Yes
mediaconnect:output

  • AWS::MediaConnect::FlowOutput

Yes No Yes Yes
mediaconnect:entitlement

  • AWS::MediaConnect::FlowEntitlement

Yes No Yes Yes
mediaconnect:flow

  • AWS::MediaConnect::Flow

Yes No Yes Yes
mediaconnect:routernetworkinterface

  • AWS::MediaConnect::RouterNetworkInterface

Yes No No No
mediaconnect:flow/vpcinterface

  • AWS::MediaConnect::FlowVpcInterface

Yes No No No
mediaconnect:routerinput

  • AWS::MediaConnect::RouterInput

Yes No No No
AWS Elemental MediaConvert [mediaconvert] mediaconvert:queues

  • AWS::MediaConvert::Queue

Yes No Yes Yes
mediaconvert:presets

  • AWS::MediaConvert::Preset

Yes No Yes Yes
mediaconvert:jobtemplates

  • AWS::MediaConvert::JobTemplate

Yes No No No
mediaconvert:jobs

  • N/A

Yes No No No
AWS Elemental MediaLive [medialive] medialive:node

  • N/A

Yes No No No
medialive:sdisource

  • AWS::MediaLive::SdiSource

Yes No Yes Yes
medialive:reservation

  • N/A

Yes No No No
medialive:signal-map

  • AWS::MediaLive::SignalMap

Yes No Yes Yes
medialive:network

  • AWS::MediaLive::Network

Yes No Yes Yes
medialive:cloudwatch-alarm-template

  • AWS::MediaLive::CloudWatchAlarmTemplate

Yes No Yes Yes
medialive:eventbridge-rule-template

  • AWS::MediaLive::EventBridgeRuleTemplate

Yes No Yes Yes
medialive:multiplex

  • AWS::MediaLive::Multiplex

Yes No Yes Yes
medialive:cloudwatch-alarm-template-group

  • AWS::MediaLive::CloudWatchAlarmTemplateGroup

Yes No Yes Yes
medialive:eventbridge-rule-template-group

  • AWS::MediaLive::EventBridgeRuleTemplateGroup

Yes No Yes Yes
medialive:channel

  • AWS::MediaLive::Channel

Yes No No No
medialive:channelplacementgroup

  • AWS::MediaLive::ChannelPlacementGroup

Yes No Yes Yes
medialive:inputsecuritygroup

  • AWS::MediaLive::InputSecurityGroup

Yes No Yes Yes
medialive:input

  • AWS::MediaLive::Input

Yes No No No
medialive:inputdevice

  • N/A

Yes No No No
AWS Elemental MediaPackage V2 [mediapackagev2] mediapackagev2:channelGroup/channel/originEndpoint

  • AWS::MediaPackageV2::OriginEndpoint

Yes No Yes Yes
mediapackagev2:channelgroup/channel/originendpoint

  • AWS::MediaPackageV2::OriginEndpoint

Yes No Yes Yes
mediapackagev2:channelgroup

  • AWS::MediaPackageV2::ChannelGroup

Yes No Yes Yes
mediapackagev2:channelGroup/channel

  • AWS::MediaPackageV2::Channel

Yes No Yes Yes
mediapackagev2:channelgroup/channel

  • AWS::MediaPackageV2::Channel

Yes No Yes Yes
AWS Elemental MediaPackage [mediapackage-vod] mediapackage-vod:packaging-configurations

  • AWS::MediaPackage::PackagingConfiguration

Yes No Yes Yes
mediapackage-vod:assets

  • AWS::MediaPackage::Asset

Yes No Yes Yes
mediapackage-vod:packaging-groups

  • AWS::MediaPackage::PackagingGroup

Yes No Yes Yes
AWS Elemental MediaPackage [mediapackage] mediapackage:channels

  • AWS::MediaPackage::Channel

Yes No Yes Yes
mediapackage:origin_endpoints

  • AWS::MediaPackage::OriginEndpoint

Yes No Yes Yes
AWS Elemental MediaStore [mediastore] mediastore:folder

  • N/A

Yes No No No
mediastore:container

  • AWS::MediaStore::Container

Yes Yes No No
mediastore:object

  • N/A

Yes No No No
mediastore:ALL_SUPPORTED

  • N/A

No Yes No No
AWS Elemental MediaTailor [mediatailor] mediatailor:playbackconfiguration

  • AWS::MediaTailor::PlaybackConfiguration

Yes No Yes Yes
mediatailor:sourcelocation

  • AWS::MediaTailor::SourceLocation

Yes No Yes Yes
mediatailor:livesource

  • AWS::MediaTailor::LiveSource

Yes No Yes Yes
mediatailor:vodsource

  • AWS::MediaTailor::VodSource

Yes No Yes Yes
mediatailor:channel

  • AWS::MediaTailor::Channel

Yes No Yes Yes
AWS Elemental Support Cases [elemental-support-cases] elemental-support-cases:case

  • N/A

Yes No No No
AWS End User Messaging Social [social-messaging] social-messaging:waba

  • N/A

Yes No No No
social-messaging:phone-number-id

  • N/A

Yes No No No
AWS Entity Resolution [entityresolution] entityresolution:schemamapping

  • AWS::EntityResolution::SchemaMapping

Yes Yes Yes Yes
entityresolution:matchingworkflow

  • AWS::EntityResolution::MatchingWorkflow

Yes Yes Yes Yes
entityresolution:idnamespace

  • AWS::EntityResolution::IdNamespace

Yes No Yes Yes
entityresolution:idmappingworkflow

  • AWS::EntityResolution::IdMappingWorkflow

Yes No Yes Yes
entityresolution:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Fault Injection Service [fis] fis:action

  • N/A

Yes No No No
fis:experiment-template

  • AWS::FIS::ExperimentTemplate

Yes No Yes Yes
fis:experiment

  • N/A

Yes No No No
AWS Firewall Manager [fms] fms:applications-list

  • N/A

Yes No No No
fms:protocols-list

  • N/A

Yes No No No
fms:policy

  • AWS::FMS::Policy

Yes No No No
fms:resource-set

  • AWS::FMS::ResourceSet

Yes No No No
AWS Global Accelerator [globalaccelerator] globalaccelerator:accelerator

  • AWS::GlobalAccelerator::Accelerator

Yes Yes Yes Yes
globalaccelerator:attachment

  • AWS::GlobalAccelerator::CrossAccountAttachment

Yes No Yes Yes
AWS Glue DataBrew [databrew] databrew:job

  • AWS::DataBrew::Job

Yes No Yes Yes
databrew:recipe

  • AWS::DataBrew::Recipe

Yes No Yes Yes
databrew:schedule

  • AWS::DataBrew::Schedule

Yes No Yes Yes
databrew:project

  • AWS::DataBrew::Project

Yes No Yes Yes
databrew:ruleset

  • AWS::DataBrew::Ruleset

Yes No Yes Yes
databrew:dataset

  • AWS::DataBrew::Dataset

Yes No Yes Yes
AWS Glue [glue] glue:workflow

  • AWS::Glue::Workflow

Yes No No No
glue:integrationresourceproperty

  • AWS::Glue::IntegrationResourceProperty

Yes No No No
glue:integration

  • AWS::Glue::Integration

Yes No No No
glue:blueprint

  • N/A

Yes No No No
glue:completion

  • N/A

Yes No No No
glue:usageprofile

  • AWS::Glue::UsageProfile

Yes No Yes Yes
glue:job

  • AWS::Glue::Job

Yes No Yes Yes
glue:session

  • N/A

Yes No No No
glue:trigger

  • AWS::Glue::Trigger

Yes No Yes Yes
glue:catalog

  • N/A

Yes No No No
glue:devendpoint

  • AWS::Glue::DevEndpoint

Yes No No No
glue:dataqualityruleset

  • AWS::Glue::DataQualityRuleset

Yes No Yes Yes
glue:mltransform

  • AWS::Glue::MLTransform

Yes No Yes Yes
glue:connection

  • AWS::Glue::Connection

Yes No Yes Yes
glue:crawler

  • AWS::Glue::Crawler

Yes No Yes Yes
glue:registry

  • AWS::Glue::Registry

Yes No Yes Yes
glue:schema

  • AWS::Glue::Schema

Yes No Yes Yes
glue:customentitytype

  • AWS::Glue::CustomEntityType

Yes No Yes Yes
glue:database

  • AWS::Glue::Database

Yes No Yes Yes
AWS Ground Station [groundstation] groundstation:contact

  • N/A

Yes No No No
groundstation:mission-profile

  • AWS::GroundStation::MissionProfile

Yes No Yes Yes
groundstation:ephemeris

  • N/A

Yes No No No
groundstation:satellite

  • N/A

Yes No No No
groundstation:config

  • AWS::GroundStation::Config

Yes No Yes Yes
groundstation:dataflow-endpoint-group

  • AWS::GroundStation::DataflowEndpointGroup

Yes No Yes Yes
AWS HealthImaging [medical-imaging] medical-imaging:datastore

  • AWS::HealthImaging::Datastore

Yes No Yes Yes
medical-imaging:datastore/imageset

  • N/A

Yes No No No
AWS HealthLake [healthlake] healthlake:datastore

  • AWS::HealthLake::FHIRDatastore

Yes Yes Yes Yes
healthlake:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS HealthOmics [omics] omics:annotationstore

  • AWS::Omics::AnnotationStore

Yes Yes No No
omics:sequencestore/readset

  • N/A

Yes Yes No No
omics:referencestore/reference

  • N/A

Yes Yes No No
omics:run

  • N/A

Yes Yes No No
omics:runcache

  • N/A

Yes No No No
omics:sequencestore

  • AWS::Omics::SequenceStore

Yes Yes Yes Yes
omics:variantstore

  • AWS::Omics::VariantStore

Yes Yes No No
omics:rungroup

  • AWS::Omics::RunGroup

Yes Yes Yes Yes
omics:workflow

  • AWS::Omics::Workflow

Yes Yes Yes Yes
omics:referencestore

  • AWS::Omics::ReferenceStore

Yes Yes Yes Yes
omics:annotationstore/version

  • N/A

Yes Yes No No
omics:workflow/version

  • AWS::Omics::WorkflowVersion

Yes No No No
omics:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS IAM Access Analyzer [access-analyzer] access-analyzer:analyzer

  • AWS::AccessAnalyzer::Analyzer

Yes No Yes Yes
AWS IAM Identity Center [sso] sso:permissionset

  • AWS::SSO::PermissionSet

Yes No No No
sso:application

  • AWS::SSO::Application

Yes No No No
sso:instance

  • AWS::SSO::Instance

Yes No No No
sso:trustedtokenissuer

  • N/A

Yes No No No
AWS Identity and Access Management (IAM) [iam] iam:mfa

  • AWS::IAM::VirtualMFADevice

Yes Yes Yes Yes
iam:server-certificate

  • AWS::IAM::ServerCertificate

Yes Yes Yes Yes
iam:saml-provider

  • AWS::IAM::SAMLProvider

Yes Yes Yes Yes
iam:oidc-provider

  • AWS::IAM::OIDCProvider

Yes Yes Yes Yes
iam:policy

  • AWS::IAM::ManagedPolicy

  • AWS::IAM::Policy

Yes Yes No No
iam:role

  • AWS::IAM::Role

Yes No Yes Yes
iam:user

  • AWS::IAM::User

Yes No Yes Yes
iam:instance-profile

  • AWS::IAM::InstanceProfile

Yes Yes Yes Yes
iam:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Identity and Access Management Roles Anywhere [nile] nile:trust-anchor

  • AWS::RolesAnywhere::TrustAnchor

Yes No No No
nile:crl

  • AWS::RolesAnywhere::CRL

Yes No No No
nile:subject

  • N/A

Yes No No No
nile:profile

  • AWS::RolesAnywhere::Profile

Yes No No No
AWS Invoicing Service [invoicing] invoicing:procurement-portal-preference

  • N/A

Yes No No No
invoicing:invoice-unit

  • AWS::Invoicing::InvoiceUnit

Yes No Yes Yes
AWS IoT Analytics [iotanalytics] iotanalytics:channel

  • AWS::IoTAnalytics::Channel

Yes Yes No No
iotanalytics:dataset

  • AWS::IoTAnalytics::Dataset

Yes Yes No No
iotanalytics:datastore

  • AWS::IoTAnalytics::Datastore

Yes Yes No No
iotanalytics:pipeline

  • AWS::IoTAnalytics::Pipeline

Yes Yes No No
iotanalytics:ALL_SUPPORTED

  • N/A

No Yes No No
AWS IoT Core Device Advisor [iotdeviceadvisor] iotdeviceadvisor:suiterun

  • N/A

Yes No No No
iotdeviceadvisor:suitedefinition

  • AWS::IoTCoreDeviceAdvisor::SuiteDefinition

Yes No Yes Yes
AWS IoT Events [iotevents] iotevents:detectormodel

  • AWS::IoTEvents::DetectorModel

Yes Yes No No
iotevents:input

  • AWS::IoTEvents::Input

Yes Yes No No
iotevents:alarmmodel

  • AWS::IoTEvents::AlarmModel

Yes No No No
iotevents:ALL_SUPPORTED

  • N/A

No Yes No No
AWS IoT Fleet Hub for Device Management [iotfleethub] iotfleethub:application

  • AWS::IoTFleetHub::Application

Yes Yes Yes Yes
iotfleethub:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS IoT FleetWise [iotfleetwise] iotfleetwise:model-manifest

  • AWS::IoTFleetWise::ModelManifest

Yes No Yes Yes
iotfleetwise:vehicle

  • AWS::IoTFleetWise::Vehicle

Yes No Yes Yes
iotfleetwise:decoder-manifest

  • AWS::IoTFleetWise::DecoderManifest

Yes No Yes Yes
iotfleetwise:state-template

  • AWS::IoTFleetWise::StateTemplate

Yes No No No
iotfleetwise:fleet

  • AWS::IoTFleetWise::Fleet

Yes No Yes Yes
iotfleetwise:signal-catalog

  • AWS::IoTFleetWise::SignalCatalog

Yes No Yes Yes
iotfleetwise:campaign

  • AWS::IoTFleetWise::Campaign

Yes No Yes Yes
AWS IoT Greengrass [greengrass] greengrass:coresdefinition

  • AWS::Greengrass::CoreDefinition

Yes Yes Yes Yes
greengrass:components:versions

  • AWS::GreengrassV2::ComponentVersion

Yes No No No
greengrass:devicesdefinition

  • AWS::Greengrass::DeviceDefinition

Yes Yes Yes Yes
greengrass:connectorsdefinition

  • AWS::Greengrass::ConnectorDefinition

Yes Yes Yes Yes
greengrass:deployments

  • N/A

Yes No No No
greengrass:functionsdefinition

  • AWS::Greengrass::FunctionDefinition

Yes Yes Yes Yes
greengrass:bulk

  • N/A

Yes Yes No No
greengrass:resourcesdefinition

  • AWS::Greengrass::ResourceDefinition

Yes Yes Yes Yes
greengrass:components

  • N/A

Yes No No No
greengrass:groups

  • AWS::Greengrass::Group

Yes No Yes Yes
greengrass:loggersdefinition

  • AWS::Greengrass::LoggerDefinition

Yes Yes Yes Yes
greengrass:coredevices

  • N/A

Yes No No No
greengrass:subscriptionsdefinition

  • AWS::Greengrass::SubscriptionDefinition

Yes Yes Yes Yes
greengrass:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS IoT Managed Integrations [iotmanagedintegrations] iotmanagedintegrations:ota-task

  • N/A

Yes No No No
iotmanagedintegrations:managed-thing

  • AWS::IoTManagedIntegrations::ManagedThing

Yes No No No
iotmanagedintegrations:cloud-connector

  • N/A

Yes No No No
iotmanagedintegrations:account-association

  • N/A

Yes No No No
iotmanagedintegrations:provisioning-profile

  • AWS::IoTManagedIntegrations::ProvisioningProfile

Yes No No No
iotmanagedintegrations:credential-locker

  • AWS::IoTManagedIntegrations::CredentialLocker

Yes No No No
AWS IoT SiteWise [iotsitewise] iotsitewise:portal

  • AWS::IoTSiteWise::Portal

Yes No Yes Yes
iotsitewise:dashboard

  • AWS::IoTSiteWise::Dashboard

Yes No Yes Yes
iotsitewise:project

  • AWS::IoTSiteWise::Project

Yes No Yes Yes
iotsitewise:asset

  • AWS::IoTSiteWise::Asset

Yes Yes Yes Yes
iotsitewise:dataset

  • AWS::IoTSiteWise::Dataset

Yes No Yes Yes
iotsitewise:time-series

  • N/A

Yes No No No
iotsitewise:computation-model

  • AWS::IoTSiteWise::ComputationModel

Yes No No No
iotsitewise:asset-model

  • AWS::IoTSiteWise::AssetModel

Yes Yes Yes Yes
iotsitewise:gateway

  • AWS::IoTSiteWise::Gateway

Yes No Yes Yes
iotsitewise:access-policy

  • AWS::IoTSiteWise::AccessPolicy

Yes No Yes Yes
iotsitewise:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS IoT TwinMaker [iotdigitaltwin] iotdigitaltwin:workspace

  • AWS::IoTTwinMaker::Workspace

Yes No No No
iotdigitaltwin:workspace/component-type

  • AWS::IoTTwinMaker::ComponentType

Yes No No No
iotdigitaltwin:workspace/scene

  • AWS::IoTTwinMaker::Scene

Yes No No No
iotdigitaltwin:workspace/sync-job

  • AWS::IoTTwinMaker::SyncJob

Yes No No No
iotdigitaltwin:entity

  • AWS::IoTTwinMaker::Entity

Yes No No No
AWS IoT Wireless [iotwireless] iotwireless:sidewalkaccount

  • AWS::IoTWireless::PartnerAccount

Yes No Yes Yes
iotwireless:networkanalyzerconfiguration

  • AWS::IoTWireless::NetworkAnalyzerConfiguration

Yes No Yes Yes
iotwireless:serviceprofile

  • AWS::IoTWireless::ServiceProfile

Yes No Yes Yes
iotwireless:multicastgroup

  • AWS::IoTWireless::MulticastGroup

Yes No Yes Yes
iotwireless:wirelessgateway

  • AWS::IoTWireless::WirelessGateway

Yes No Yes Yes
iotwireless:wirelessdevice

  • AWS::IoTWireless::WirelessDevice

Yes No Yes Yes
iotwireless:destination

  • AWS::IoTWireless::Destination

Yes No Yes Yes
iotwireless:fuotatask

  • AWS::IoTWireless::FuotaTask

Yes No Yes Yes
iotwireless:importtask

  • AWS::IoTWireless::WirelessDeviceImportTask

Yes No Yes Yes
iotwireless:wirelessgatewaytaskdefinition

  • AWS::IoTWireless::TaskDefinition

Yes No Yes Yes
iotwireless:deviceprofile

  • AWS::IoTWireless::DeviceProfile

Yes No Yes Yes
AWS IoT [iot] iot:package

  • AWS::IoT::SoftwarePackage

Yes No Yes Yes
iot:authorizer

  • AWS::IoT::Authorizer

Yes No Yes Yes
iot:package/version

  • AWS::IoT::SoftwarePackageVersion

Yes No No No
iot:fleetmetric

  • AWS::IoT::FleetMetric

Yes No Yes Yes
iot:jobtemplate

  • AWS::IoT::JobTemplate

Yes No Yes Yes
iot:billinggroup

  • AWS::IoT::BillingGroup

Yes No Yes Yes
iot:provisioningtemplate

  • AWS::IoT::ProvisioningTemplate

Yes No Yes Yes
iot:thingtype

  • AWS::IoT::ThingType

Yes No Yes Yes
iot:thinggroup

  • AWS::IoT::ThingGroup

Yes No Yes Yes
iot:certificateprovider

  • AWS::IoT::CertificateProvider

Yes No Yes Yes
iot:rolealias

  • AWS::IoT::RoleAlias

Yes No Yes Yes
iot:cacert

  • AWS::IoT::CACertificate

Yes No Yes Yes
iot:custommetric

  • AWS::IoT::CustomMetric

Yes No Yes Yes
iot:domainconfiguration

  • AWS::IoT::DomainConfiguration

Yes No No No
iot:policy

  • AWS::IoT::Policy

Yes No Yes Yes
iot:mitigationaction

  • AWS::IoT::MitigationAction

Yes No Yes Yes
iot:securityprofile

  • AWS::IoT::SecurityProfile

Yes No Yes Yes
iot:rule

  • AWS::IoT::TopicRule

Yes No Yes Yes
iot:scheduledaudit

  • AWS::IoT::ScheduledAudit

Yes No Yes Yes
iot:tunnel

  • N/A

Yes No No No
iot:stream

  • N/A

Yes No No No
iot:job

  • N/A

Yes No No No
iot:otaupdate

  • N/A

Yes No No No
iot:command

  • AWS::IoT::Command

Yes No No No
iot:dimension

  • AWS::IoT::Dimension

Yes No Yes Yes
AWS Key Management Service [kms] kms:key

  • AWS::KMS::Key

Yes Yes Yes Yes
kms:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Lambda [lambda] lambda:layer/version

  • AWS::Lambda::LayerVersion

Yes No No No
lambda:layerversion

  • AWS::Lambda::LayerVersion

Yes No No No
lambda:layer

  • N/A

Yes No No No
lambda:function

  • AWS::Lambda::Function

Yes Yes Yes Yes
lambda:event-source-mapping

  • AWS::Lambda::EventSourceMapping

Yes No Yes Yes
lambda:code-signing-config

  • AWS::Lambda::CodeSigningConfig

Yes No Yes Yes
lambda:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Launch Wizard [launchwizard] launchwizard:deployment

  • AWS::LaunchWizard::Deployment

Yes No No No
AWS License Manager Linux Subscriptions Manager [license-manager-linux-subscriptions] license-manager-linux-subscriptions:subscription-provider

  • N/A

Yes No No No
AWS License Manager User Subscriptions [license-manager-user-subscriptions] license-manager-user-subscriptions:product-subscription

  • N/A

Yes No No No
license-manager-user-subscriptions:identity-provider

  • N/A

Yes No No No
license-manager-user-subscriptions:instance-user

  • N/A

Yes No No No
license-manager-user-subscriptions:license-server-endpoint

  • N/A

Yes No No No
AWS License Manager [license-manager] license-manager:license-asset-group

  • N/A

Yes No No No
license-manager:license

  • AWS::LicenseManager::License

Yes No Yes Yes
license-manager:license-asset-ruleset

  • N/A

Yes No No No
license-manager:license-configuration

  • N/A

Yes No No No
license-manager:report-generator

  • N/A

Yes No No No
license-manager:grant

  • AWS::LicenseManager::Grant

Yes No Yes Yes
AWS MWAA Serverless [airflow-serverless] airflow-serverless:workflow

  • N/A

Yes No No No
AWS Mainframe Modernization Application Testing [apptest] apptest:testsuite

  • N/A

Yes No No No
apptest:testconfiguration

  • N/A

Yes No No No
apptest:testcase

  • AWS::AppTest::TestCase

Yes No Yes Yes
apptest:testrun

  • N/A

Yes No No No
AWS Mainframe Modernization Service [m2] m2:app

  • AWS::M2::Application

Yes No No No
m2:env

  • AWS::M2::Environment

Yes No Yes Yes
AWS Marketplace Vendor Insights [vendor-insights] vendor-insights:security-profile

  • N/A

Yes No No No
vendor-insights:data-source

  • N/A

Yes No No No
AWS Marketplace [aws-marketplace] aws-marketplace:deploymentparameter

  • N/A

Yes No No No
aws-marketplace:changeset

  • N/A

Yes No No No
AWS Migration Hub Orchestrator [migrationhub-orchestrator] migrationhub-orchestrator:workflow

  • N/A

Yes No No No
migrationhub-orchestrator:template

  • N/A

Yes No No No
AWS Migration Hub Refactor Spaces [refactor-spaces] refactor-spaces:environment/application

  • AWS::RefactorSpaces::Application

Yes No Yes Yes
refactor-spaces:environment/application/service

  • AWS::RefactorSpaces::Service

Yes No Yes Yes
refactor-spaces:environment

  • AWS::RefactorSpaces::Environment

Yes No Yes Yes
refactor-spaces:environment/application/route

  • AWS::RefactorSpaces::Route

Yes No Yes Yes
AWS Network Firewall [network-firewall] network-firewall:stateless-rulegroup

  • AWS::NetworkFirewall::RuleGroup

Yes Yes Yes Yes
network-firewall:vpc-endpoint-association

  • AWS::NetworkFirewall::VpcEndpointAssociation

Yes No No No
network-firewall:firewall

  • AWS::NetworkFirewall::Firewall

Yes Yes Yes Yes
network-firewall:stateful-rulegroup

  • AWS::NetworkFirewall::RuleGroup

Yes Yes No No
network-firewall:firewall-policy

  • AWS::NetworkFirewall::FirewallPolicy

Yes Yes Yes Yes
network-firewall:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Network Manager [networkmanager] networkmanager:peering

  • AWS::NetworkManager::TransitGatewayPeering

Yes No No No
networkmanager:global-network

  • AWS::NetworkManager::GlobalNetwork

Yes No Yes Yes
networkmanager:link

  • AWS::NetworkManager::Link

Yes No Yes Yes
networkmanager:core-network

  • AWS::NetworkManager::CoreNetwork

Yes No Yes Yes
networkmanager:device

  • AWS::NetworkManager::Device

Yes No Yes Yes
networkmanager:connect-peer

  • AWS::NetworkManager::ConnectPeer

Yes No Yes Yes
networkmanager:attachment

  • AWS::NetworkManager::VpcAttachment

  • AWS::NetworkManager::ConnectAttachment

Yes No No No
networkmanager:site

  • AWS::NetworkManager::Site

Yes No Yes Yes
networkmanager:connection

  • N/A

Yes No No No
AWS OpsWorks Configuration Management [opsworks-cm] opsworks-cm:server

  • N/A

Yes No No No
opsworks-cm:backup

  • N/A

Yes No No No
AWS OpsWorks [opsworks] opsworks:instance

  • AWS::OpsWorks::Instance

Yes No No No
opsworks:stack

  • AWS::OpsWorks::Stack

Yes No No No
opsworks:layer

  • AWS::OpsWorks::Layer

Yes No No No
AWS Organizations [organizations] organizations:account

  • AWS::Organizations::Account

Yes Yes Yes Yes
organizations:ou

  • AWS::Organizations::OrganizationalUnit

Yes Yes Yes Yes
organizations:resourcepolicy

  • AWS::Organizations::ResourcePolicy

Yes No Yes Yes
organizations:root

  • N/A

Yes Yes No No
organizations:policy

  • AWS::Organizations::Policy

Yes Yes No No
organizations:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Outposts [outposts] outposts:site

  • N/A

Yes No No No
outposts:outpost

  • N/A

Yes No No No
AWS Panorama [panorama] panorama:package

  • AWS::Panorama::Package

Yes No Yes Yes
panorama:applicationinstance

  • AWS::Panorama::ApplicationInstance

Yes No No No
panorama:device

  • N/A

Yes No No No
AWS Parallel Computing Service [pcs] pcs:cluster

  • AWS::PCS::Cluster

Yes No No No
pcs:queue

  • AWS::PCS::Queue

Yes No No No
pcs:computenodegroup

  • AWS::PCS::ComputeNodeGroup

Yes No No No
AWS Partner Central Selling [partnercentral] partnercentral:opportunity

  • N/A

Yes No No No
partnercentral:engagement-by-accepting-invitation-task

  • N/A

Yes No No No
partnercentral:engagement-from-opportunity-task

  • N/A

Yes No No No
AWS Payment Cryptography [payment-cryptography] payment-cryptography:key

  • AWS::PaymentCryptography::Key

Yes No Yes Yes
AWS Payments [payments] payments:payment-instrument

  • N/A

Yes No No No
AWS Performance Insights [pi] pi:perf-reports

  • N/A

Yes No No No
AWS Private CA Connector for Active Directory [pca-connector-ad] pca-connector-ad:connector

  • AWS::PCAConnectorAD::Connector

Yes No No No
pca-connector-ad:connector/template

  • AWS::PCAConnectorAD::Template

Yes No No No
pca-connector-ad:directory-registration

  • AWS::PCAConnectorAD::DirectoryRegistration

Yes No No No
AWS Private CA Connector for SCEP [pca-connector-scep] pca-connector-scep:connector

  • AWS::PCAConnectorSCEP::Connector

Yes No No No
AWS Private Certificate Authority [acm-pca] acm-pca:certificate-authority

  • AWS::ACMPCA::CertificateAuthority

Yes Yes Yes Yes
acm-pca:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Proton [proton] proton:environment-template

  • AWS::Proton::EnvironmentTemplate

Yes No Yes Yes
proton:environment

  • N/A

Yes No No No
proton:service/service-instance

  • N/A

Yes No No No
proton:repository

  • N/A

Yes No No No
proton:component

  • N/A

Yes No No No
proton:environment-account-connection

  • AWS::Proton::EnvironmentAccountConnection

Yes No Yes Yes
proton:service

  • N/A

Yes No No No
proton:deployment

  • N/A

Yes No No No
proton:service-template

  • AWS::Proton::ServiceTemplate

Yes No Yes Yes
AWS Purchase Orders Console [purchase-orders] purchase-orders:purchase-order

  • N/A

Yes No No No
AWS RTB Fabric [rtbfabric] rtbfabric:requestergateway

  • AWS::RTBFabric::RequesterGateway

Yes No No No
rtbfabric:respondergateway

  • AWS::RTBFabric::ResponderGateway

Yes No No No
AWS Recycle Bin [rbin] rbin:rule

  • AWS::Rbin::Rule

Yes Yes Yes Yes
rbin:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Resilience Hub [resiliencehub] resiliencehub:app-assessment

  • N/A

Yes No No No
resiliencehub:resiliency-policy

  • AWS::ResilienceHub::ResiliencyPolicy

Yes No Yes Yes
resiliencehub:recommendation-template

  • N/A

Yes No No No
resiliencehub:app

  • AWS::ResilienceHub::App

Yes No Yes Yes
AWS Resource Access Manager (RAM) [ram] ram:resource-share

  • AWS::RAM::ResourceShare

Yes Yes Yes Yes
ram:resourceshareinvitation

  • N/A

Yes No No No
ram:permission

  • N/A

Yes No No No
ram:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Resource Groups [resource-groups] resource-groups:group

  • AWS::ResourceGroups::Group

Yes Yes Yes Yes
resource-groups:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS RoboMaker [robomaker] robomaker:world-generation-job

  • N/A

Yes No No No
robomaker:world-generation-jobs

  • N/A

Yes No No No
robomaker:simulation-job-batch

  • N/A

Yes No No No
robomaker:simulation-job

  • N/A

Yes No No No
robomaker:world-template

  • N/A

Yes No No No
robomaker:robot

  • AWS::RoboMaker::Robot

Yes No No No
robomaker:world-export-job

  • N/A

Yes No No No
robomaker:simulation-application

  • AWS::RoboMaker::SimulationApplication

Yes No No No
robomaker:deployment-job

  • N/A

Yes No No No
robomaker:robot-application

  • AWS::RoboMaker::RobotApplication

Yes No Yes Yes
robomaker:deployment-fleet

  • AWS::RoboMaker::Fleet

Yes No No No
robomaker:world

  • N/A

Yes No No No
AWS SQL Workbench [sqlworkbench] sqlworkbench:query

  • N/A

Yes No No No
sqlworkbench:notebook

  • N/A

Yes No No No
sqlworkbench:chart

  • N/A

Yes No No No
sqlworkbench:connection

  • N/A

Yes No No No
AWS Savings Plans [savingsplans] savingsplans:savingsplan

  • N/A

Yes No No No
AWS Secrets Manager [secretsmanager] secretsmanager:secret

  • AWS::SecretsManager::Secret

Yes Yes Yes Yes
secretsmanager:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Security Hub [securityhub] securityhub:connectorv2

  • N/A

Yes No No No
securityhub:automation-rulev2

  • AWS::SecurityHub::AutomationRuleV2

Yes No No No
securityhub:automation-rule

  • AWS::SecurityHub::AutomationRule

Yes No No No
securityhub:aggregatorv2

  • AWS::SecurityHub::AggregatorV2

Yes No No No
securityhub:hubv2

  • AWS::SecurityHub::HubV2

Yes No Yes Yes
securityhub:product-subscription

  • AWS::SecurityHub::ProductSubscription

Yes No No No
securityhub:hub

  • AWS::SecurityHub::Hub

Yes No No No
securityhub:configuration-policy

  • AWS::SecurityHub::ConfigurationPolicy

Yes No No No
AWS Service - Oracle Database@AWS [odb] odb:cloud-vm-cluster

  • AWS::ODB::CloudVmCluster

Yes No No No
odb:cloud-exadata-infrastructure

  • AWS::ODB::CloudExadataInfrastructure

Yes No No No
odb:db-node

  • N/A

Yes No No No
odb:cloud-autonomous-vm-cluster

  • AWS::ODB::CloudAutonomousVmCluster

Yes No No No
odb:odb-peering-connection

  • AWS::ODB::OdbPeeringConnection

Yes No No No
odb:odb-network

  • AWS::ODB::OdbNetwork

Yes No No No
AWS Service Catalog [catalog] catalog:portfolio

  • AWS::ServiceCatalog::Portfolio

Yes Yes Yes Yes
catalog:product

  • AWS::ServiceCatalog::CloudFormationProvisionedProduct

Yes Yes No No
catalog:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Service Catalog [servicecatalog] servicecatalog:attribute-groups

  • AWS::ServiceCatalogAppRegistry::AttributeGroup

Yes Yes Yes Yes
servicecatalog:applications

  • AWS::ServiceCatalogAppRegistry::Application

Yes Yes Yes Yes
servicecatalog:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Shield [shield] shield:protection

  • AWS::Shield::Protection

Yes No No No
shield:protection-group

  • AWS::Shield::ProtectionGroup

Yes No No No
AWS Signer [signer] signer:signing-profiles

  • AWS::Signer::SigningProfile

Yes No Yes Yes
AWS SimSpace Weaver [simspaceweaver] simspaceweaver:simulation

  • AWS::SimSpaceWeaver::Simulation

Yes No No No
AWS Snow Device Management [snow-device-management] snow-device-management:task

  • N/A

Yes No No No
snow-device-management:managed-device

  • N/A

Yes No No No
AWS Step Functions [states] states:execution

  • N/A

Yes No No No
states:activity

  • AWS::StepFunctions::Activity

Yes Yes Yes Yes
states:statemachine

  • AWS::StepFunctions::StateMachine

Yes Yes Yes Yes
states:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Storage Gateway [storagegateway] storagegateway:tapepool

  • N/A

Yes No No No
storagegateway:fs-association

  • N/A

Yes No No No
storagegateway:tape

  • N/A

Yes Yes No No
storagegateway:gateway

  • N/A

Yes Yes No No
storagegateway:gateway/volume

  • N/A

Yes Yes No No
storagegateway:share

  • N/A

Yes Yes No No
AWS Supply Chain [scn] scn:instance

  • N/A

Yes No No No
scn:billofmaterialsimportjob

  • N/A

Yes No No No
AWS Systems Manager Incident Manager Contacts [ssm-contacts] ssm-contacts:contact

  • AWS::SSMContacts::Contact

Yes Yes No No
ssm-contacts:rotation

  • AWS::SSMContacts::Rotation

Yes No No No
ssm-contacts:ALL_SUPPORTED

  • N/A

No Yes No No
AWS Systems Manager Incident Manager [ssm-incidents] ssm-incidents:incident-record

  • N/A

Yes No No No
ssm-incidents:replication-set

  • AWS::SSMIncidents::ReplicationSet

Yes No Yes Yes
ssm-incidents:response-plan

  • AWS::SSMIncidents::ResponsePlan

Yes No Yes Yes
AWS Systems Manager Quick Setup [ssm-quicksetup] ssm-quicksetup:configuration-manager

  • AWS::SSMQuickSetup::ConfigurationManager

Yes No No No
AWS Systems Manager [ssm] ssm:managed-instance

  • N/A

Yes Yes No No
ssm:document

  • AWS::SSM::Document

Yes Yes Yes Yes
ssm:automation-definition

  • N/A

Yes No No No
ssm:parameter

  • AWS::SSM::Parameter

Yes No Yes Yes
ssm:automation-execution

  • N/A

Yes Yes No No
ssm:opsitem

  • N/A

Yes Yes No No
ssm:patchbaseline

  • AWS::SSM::PatchBaseline

Yes Yes Yes Yes
ssm:session

  • N/A

Yes Yes No No
ssm:association

  • AWS::SSM::Association

Yes Yes Yes Yes
ssm:maintenancewindow

  • AWS::SSM::MaintenanceWindow

Yes Yes Yes Yes
ssm:opsmetadata

  • N/A

Yes No No No
ssm:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Systems Manager for SAP [ssm-sap] ssm-sap:hana/db

  • N/A

Yes No No No
ssm-sap:hana

  • AWS::SystemsManagerSAP::Application

Yes No No No
AWS Telco Network Builder [tnb] tnb:network-instance

  • N/A

Yes No No No
tnb:function-instance

  • N/A

Yes No No No
tnb:function-package

  • N/A

Yes No No No
tnb:network-package

  • N/A

Yes No No No
tnb:network-operation

  • N/A

Yes No No No
AWS Transfer Family [transfer] transfer:connector

  • AWS::Transfer::Connector

Yes No Yes Yes
transfer:user

  • AWS::Transfer::User

Yes Yes Yes Yes
transfer:workflow

  • AWS::Transfer::Workflow

Yes Yes Yes Yes
transfer:webapp

  • AWS::Transfer::WebApp

Yes No No No
transfer:agreement

  • AWS::Transfer::Agreement

Yes No Yes Yes
transfer:host-key

  • N/A

Yes No No No
transfer:server

  • AWS::Transfer::Server

Yes Yes Yes Yes
transfer:certificate

  • AWS::Transfer::Certificate

Yes No Yes Yes
transfer:profile

  • AWS::Transfer::Profile

Yes No Yes Yes
transfer:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
AWS Transform [transform] transform:connector

  • N/A

Yes No No No
AWS User Notifications Contacts [notifications-contacts] notifications-contacts:emailcontact

  • AWS::NotificationsContacts::EmailContact

Yes No Yes Yes
AWS User Notifications [notifications] notifications:configuration

  • AWS::Notifications::NotificationConfiguration

Yes No No No
AWS WAF Regional [waf-regional] waf-regional:rule

  • AWS::WAFRegional::Rule

Yes No No No
waf-regional:rulegroup

  • N/A

Yes No No No
waf-regional:ratebasedrule

  • AWS::WAFRegional::RateBasedRule

Yes No No No
waf-regional:webacl

  • AWS::WAFRegional::WebACL

Yes No No No
AWS WAF [waf] waf:rulegroup

  • N/A

Yes No No No
waf:webacl

  • AWS::WAF::WebACL

Yes No No No
waf:ratebasedrule

  • N/A

Yes No No No
waf:rule

  • AWS::WAF::Rule

Yes No No No
AWS Well-Architected Tool [wellarchitected] wellarchitected:lens

  • N/A

Yes No No No
wellarchitected:review-template

  • N/A

Yes No No No
wellarchitected:workload

  • N/A

Yes Yes No No
wellarchitected:profile

  • N/A

Yes No No No
wellarchitected:ALL_SUPPORTED

  • N/A

No Yes No No
AWS Wickr [wickr] wickr:network

  • N/A

Yes Yes No No
wickr:ALL_SUPPORTED

  • N/A

No Yes No No
AWS WorkSpaces Managed Instances [workspaces-instances] workspaces-instances:workspaceinstance

  • AWS::WorkspacesInstances::WorkspaceInstance

Yes No No No
AWS X-Ray [xray] xray:sampling-rule

  • AWS::XRay::SamplingRule

Yes No Yes Yes
xray:group

  • AWS::XRay::Group

Yes No Yes Yes
AWS rePost Private [repostspace] repostspace:space

  • N/A

Yes No No No
AWS service providing managed private networks [private-networks] private-networks:network-site

  • N/A

Yes No No No
private-networks:order

  • N/A

Yes No No No
private-networks:network

  • N/A

Yes No No No
private-networks:network-resource

  • N/A

Yes No No No
private-networks:device-identifier

  • N/A

Yes No No No
Alexa for Business [a4b] a4b:profile

  • N/A

Yes No No No
a4b:address-book

  • N/A

Yes No No No
a4b:network-profile

  • N/A

Yes No No No
a4b:user

  • N/A

Yes No No No
a4b:conference-provider

  • N/A

Yes No No No
a4b:skill-group

  • N/A

Yes No No No
a4b:room

  • N/A

Yes No No No
a4b:gateway-group

  • N/A

Yes No No No
a4b:schedule

  • N/A

Yes No No No
a4b:contact

  • N/A

Yes No No No
a4b:device

  • N/A

Yes No No No
Amazon AI Operations [aiops] aiops:investigation-group

  • AWS::AIOps::InvestigationGroup

Yes No No No
Amazon API Gateway Management [apigateway] apigateway:usageplans

  • N/A

Yes No No No
apigateway:apikeys

  • N/A

Yes Yes No No
apigateway:clientcertificates

  • N/A

Yes No No No
apigateway:restapis

  • N/A

Yes Yes No No
apigateway:domainnames

  • AWS::ApiGateway::DomainNameV2

Yes Yes No No
apigateway:domainnameaccessassociations

  • AWS::ApiGateway::DomainNameAccessAssociation

Yes No No No
apigateway:vpclinks

  • N/A

Yes No No No
apigateway:ALL_SUPPORTED

  • N/A

No Yes No No
Amazon ARC Region switch [arc-region-switch] arc-region-switch:plan

  • AWS::ARCRegionSwitch::Plan

Yes No No No
Amazon AppFlow [appflow] appflow:connector

  • AWS::AppFlow::Connector

Yes No No No
appflow:flow

  • AWS::AppFlow::Flow

Yes No Yes Yes
Amazon AppIntegrations [app-integrations] app-integrations:application-association

  • N/A

Yes No No No
app-integrations:data-integration

  • AWS::AppIntegrations::DataIntegration

Yes No Yes Yes
app-integrations:event-integration

  • AWS::AppIntegrations::EventIntegration

Yes No Yes Yes
app-integrations:data-integration-association

  • N/A

Yes No No No
app-integrations:application

  • AWS::AppIntegrations::Application

Yes No Yes Yes
app-integrations:event-integration-association

  • N/A

Yes No No No
Amazon AppStream 2.0 [appstream] appstream:image

  • N/A

Yes No No No
appstream:app-block

  • AWS::AppStream::AppBlock

Yes No Yes Yes
appstream:stack

  • AWS::AppStream::Stack

Yes No Yes Yes
appstream:app-block-builder

  • AWS::AppStream::AppBlockBuilder

Yes No No No
appstream:fleet

  • AWS::AppStream::Fleet

Yes No Yes Yes
appstream:image-builder

  • AWS::AppStream::ImageBuilder

Yes No Yes Yes
appstream:application

  • AWS::AppStream::Application

Yes No Yes Yes
Amazon Athena [athena] athena:datacatalog

  • AWS::Athena::DataCatalog

Yes No Yes Yes
athena:capacity-reservation

  • AWS::Athena::CapacityReservation

Yes No Yes Yes
athena:workgroup

  • AWS::Athena::WorkGroup

Yes Yes Yes Yes
athena:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Aurora DSQL [dsql] dsql:cluster

  • AWS::DSQL::Cluster

Yes No Yes Yes
Amazon Bedrock [bedrock-agentcore] bedrock-agentcore:workload-identity

  • AWS::BedrockAgentCore::WorkloadIdentity

Yes No No No
bedrock-agentcore:code-interpreter-custom

  • AWS::BedrockAgentCore::CodeInterpreterCustom

Yes No No No
bedrock-agentcore:gateway

  • AWS::BedrockAgentCore::Gateway

Yes No No No
bedrock-agentcore:token-vault

  • N/A

Yes No No No
bedrock-agentcore:memory

  • AWS::BedrockAgentCore::Memory

Yes No No No
bedrock-agentcore:workload-identity-directory

  • N/A

Yes No No No
bedrock-agentcore:runtime

  • AWS::BedrockAgentCore::Runtime

Yes No No No
bedrock-agentcore:browser-custom

  • AWS::BedrockAgentCore::BrowserCustom

Yes No No No
bedrock-agentcore:runtime-endpoint

  • AWS::BedrockAgentCore::RuntimeEndpoint

Yes No No No
Amazon Bedrock [bedrock] bedrock:model-copy-job

  • N/A

Yes No No No
bedrock:custom-model-deployment

  • N/A

Yes No No No
bedrock:prompt-router

  • N/A

Yes No No No
bedrock:agent-alias

  • AWS::Bedrock::AgentAlias

Yes No Yes Yes
bedrock:blueprint

  • AWS::Bedrock::Blueprint

Yes No Yes Yes
bedrock:model-customization-job

  • N/A

Yes No No No
bedrock:model-import-job

  • N/A

Yes No No No
bedrock:data-automation-invocation

  • N/A

Yes No No No
bedrock:data-automation-invocation-job

  • N/A

Yes No No No
bedrock:automated-reasoning-policy

  • AWS::Bedrock::AutomatedReasoningPolicy

Yes No No No
bedrock:model-evaluation-job

  • N/A

Yes No No No
bedrock:session

  • N/A

Yes No No No
bedrock:prompt

  • AWS::Bedrock::Prompt

Yes No Yes Yes
bedrock:guardrail

  • AWS::Bedrock::Guardrail

Yes No Yes Yes
bedrock:async-invoke

  • N/A

Yes No No No
bedrock:flow/alias

  • N/A

Yes No No No
bedrock:prompt-version

  • AWS::Bedrock::PromptVersion

Yes No No No
bedrock:data-automation-project

  • AWS::Bedrock::DataAutomationProject

Yes No Yes Yes
bedrock:provisioned-model

  • N/A

Yes No No No
bedrock:provisioned-model-v2

  • N/A

Yes No No No
bedrock:application-inference-profile

  • AWS::Bedrock::ApplicationInferenceProfile

Yes No Yes Yes
bedrock:imported-model

  • N/A

Yes No No No
bedrock:flow

  • AWS::Bedrock::Flow

Yes No Yes Yes
bedrock:flow/alias

  • AWS::Bedrock::FlowAlias

Yes No No No
bedrock:flow-alias

  • AWS::Bedrock::FlowAlias

Yes No No No
bedrock:knowledge-base

  • AWS::Bedrock::KnowledgeBase

Yes No Yes Yes
bedrock:agent

  • AWS::Bedrock::Agent

Yes No Yes Yes
bedrock:model-invocation-job

  • N/A

Yes No No No
bedrock:custom-model

  • N/A

Yes No No No
bedrock:evaluation-job

  • N/A

Yes No No No
Amazon Braket [braket] braket:quantum-task

  • N/A

Yes No No No
braket:job

  • N/A

Yes No No No
braket:spending-limit

  • N/A

Yes No No No
Amazon Chime [chime] chime:meeting

  • N/A

Yes Yes No No
chime:sip-media-application

  • N/A

Yes No No No
chime:sma

  • N/A

Yes Yes No No
chime:app-instance/bot

  • N/A

Yes No No No
chime:voice-profile-domain

  • N/A

Yes No No No
chime:app-instance/channel

  • N/A

Yes Yes No No
chime:app-instance/user

  • N/A

Yes Yes No No
chime:media-pipeline-kinesis-video-stream-pool

  • N/A

Yes No No No
chime:app-instance

  • N/A

Yes Yes No No
chime:media-pipeline

  • N/A

Yes Yes No No
chime:voice-connector

  • N/A

Yes No No No
chime:vc

  • N/A

Yes Yes No No
chime:media-insights-pipeline-configuration

  • N/A

Yes No No No
chime:ALL_SUPPORTED

  • N/A

No Yes No No
Amazon Cloud Directory [clouddirectory] clouddirectory:directory

  • N/A

Yes No No No
Amazon CloudFront [cloudfront] cloudfront:vpcorigin

  • AWS::CloudFront::VpcOrigin

Yes No No No
cloudfront:connection-function

  • AWS::CloudFront::ConnectionFunction

Yes No No No
cloudfront:distribution-tenant

  • AWS::CloudFront::DistributionTenant

Yes No No No
cloudfront:distribution

  • AWS::CloudFront::Distribution

Yes Yes Yes Yes
cloudfront:anycast-ip-list

  • AWS::CloudFront::AnycastIpList

Yes No No No
cloudfront:key-value-store

  • AWS::CloudFront::KeyValueStore

Yes No No No
cloudfront:keyvaluestore

  • AWS::CloudFront::KeyValueStore

Yes No No No
cloudfront:streaming-distribution

  • AWS::CloudFront::StreamingDistribution

Yes Yes No No
cloudfront:trust-store

  • N/A

Yes No No No
cloudfront:connection-group

  • AWS::CloudFront::ConnectionGroup

Yes No Yes Yes
cloudfront:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon CloudSearch [cloudsearch] cloudsearch:domain

  • N/A

Yes No No No
Amazon CloudWatch Application Insights [applicationinsights] applicationinsights:application

  • AWS::ApplicationInsights::Application

Yes No Yes Yes
Amazon CloudWatch Application Signals [application-signals] application-signals:slo

  • AWS::ApplicationSignals::ServiceLevelObjective

Yes No Yes Yes
Amazon CloudWatch Evidently [evidently] evidently:segment

  • AWS::Evidently::Segment

Yes No No No
evidently:project/launch

  • AWS::Evidently::Launch

Yes No No No
evidently:project

  • AWS::Evidently::Project

Yes No No No
evidently:project/feature

  • AWS::Evidently::Feature

Yes No No No
evidently:experiment

  • AWS::Evidently::Experiment

Yes No No No
evidently:project/experiment

  • AWS::Evidently::Experiment

Yes No No No
Amazon CloudWatch Internet Monitor [internetmonitor] internetmonitor:monitor

  • AWS::InternetMonitor::Monitor

Yes Yes Yes Yes
internetmonitor:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon CloudWatch Logs [logs] logs:log-group

  • AWS::Logs::LogGroup

Yes Yes Yes Yes
logs:delivery-destination

  • AWS::Logs::DeliveryDestination

Yes No Yes Yes
logs:scheduled-query

  • N/A

Yes No No No
logs:destination

  • AWS::Logs::Destination

Yes Yes Yes Yes
logs:delivery-source

  • AWS::Logs::DeliverySource

Yes No Yes Yes
logs:anomaly-detector

  • AWS::Logs::LogAnomalyDetector

Yes No Yes Yes
logs:delivery

  • AWS::Logs::Delivery

Yes No Yes Yes
Amazon CloudWatch Network Synthetic Monitor [networkmonitor] networkmonitor:monitor

  • N/A

Yes No No No
networkmonitor:probe

  • N/A

Yes No No No
Amazon CloudWatch Observability Access Manager [oam] oam:link

  • AWS::Oam::Link

Yes Yes No No
oam:sink

  • AWS::Oam::Sink

Yes Yes Yes Yes
oam:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon CloudWatch Observability Admin Service [observabilityadmin] observabilityadmin:organization-telemetry-rule

  • AWS::ObservabilityAdmin::OrganizationTelemetryRule

Yes No No No
observabilityadmin:s3tableintegration

  • N/A

Yes No No No
observabilityadmin:telemetry-rule

  • AWS::ObservabilityAdmin::TelemetryRule

Yes No No No
observabilityadmin:telemetry-pipeline

  • N/A

Yes No No No
observabilityadmin:organization-centralization-rule

  • AWS::ObservabilityAdmin::OrganizationCentralizationRule

Yes No No No
Amazon CloudWatch Synthetics [synthetics] synthetics:group

  • AWS::Synthetics::Group

Yes No Yes Yes
synthetics:canary

  • AWS::Synthetics::Canary

Yes No Yes Yes
Amazon CloudWatch [cloudwatch] cloudwatch:metric-stream

  • AWS::CloudWatch::MetricStream

Yes Yes Yes Yes
cloudwatch:slo

  • N/A

Yes No No No
cloudwatch:insight-rule

  • AWS::CloudWatch::InsightRule

Yes Yes Yes Yes
cloudwatch:alarm

  • AWS::CloudWatch::Alarm

Yes Yes Yes Yes
cloudwatch:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon CodeCatalyst [codecatalyst] codecatalyst:identity-center-applications

  • N/A

Yes No No No
codecatalyst:space

  • N/A

Yes No No No
codecatalyst:connections

  • N/A

Yes Yes No No
codecatalyst:ALL_SUPPORTED

  • N/A

No Yes No No
Amazon CodeGuru Profiler [codeguru-profiler] codeguru-profiler:profilinggroup

  • AWS::CodeGuruProfiler::ProfilingGroup

Yes No Yes Yes
Amazon CodeGuru Reviewer [codeguru-reviewer] codeguru-reviewer:association

  • AWS::CodeGuruReviewer::RepositoryAssociation

Yes Yes Yes Yes
codeguru-reviewer:codereview

  • N/A

Yes No No No
codeguru-reviewer:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon CodeGuru Security [codeguru-security] codeguru-security:scans

  • N/A

Yes Yes No No
codeguru-security:ALL_SUPPORTED

  • N/A

No Yes No No
Amazon CodeWhisperer [codewhisperer] codewhisperer:profile

  • N/A

Yes No No No
codewhisperer:customization

  • N/A

Yes No No No
Amazon Cognito Identity [cognito-identity] cognito-identity:identitypool

  • AWS::Cognito::IdentityPool

Yes Yes Yes Yes
cognito-identity:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Cognito Identity [cognito-idp] cognito-idp:userpool

  • AWS::Cognito::UserPool

Yes Yes Yes Yes
cognito-idp:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Comprehend [comprehend] comprehend:targeted-sentiment-detection-job

  • N/A

Yes No No No
comprehend:entity-recognizer-endpoint

  • N/A

Yes No No No
comprehend:sentiment-detection-job

  • N/A

Yes No No No
comprehend:flywheel

  • AWS::Comprehend::Flywheel

Yes No Yes Yes
comprehend:document-classifier-endpoint

  • N/A

Yes No No No
comprehend:entity-recognizer

  • N/A

Yes Yes No No
comprehend:topics-detection-job

  • N/A

Yes No No No
comprehend:events-detection-job

  • N/A

Yes No No No
comprehend:document-classifier

  • AWS::Comprehend::DocumentClassifier

Yes Yes Yes Yes
comprehend:key-phrases-detection-job

  • N/A

Yes No No No
comprehend:document-classification-job

  • N/A

Yes No No No
comprehend:entities-detection-job

  • N/A

Yes No No No
comprehend:dominant-language-detection-job

  • N/A

Yes No No No
comprehend:flywheel/dataset

  • N/A

Yes No No No
comprehend:pii-entities-detection-job

  • N/A

Yes No No No
comprehend:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Connect Cases [cases] cases:related-item

  • N/A

Yes No No No
cases:domain/case/related-item

  • N/A

Yes No No No
cases:layout

  • N/A

Yes No No No
cases:field

  • N/A

Yes No No No
cases:template

  • N/A

Yes No No No
cases:domain/case

  • N/A

Yes No No No
cases:domain

  • N/A

Yes No No No
Amazon Connect Customer Profiles [profile] profile:domains/object-types

  • AWS::CustomerProfiles::ObjectType

Yes No Yes Yes
profile:domains/domain-object-types

  • N/A

Yes No No No
profile:domains

  • AWS::CustomerProfiles::Domain

Yes No Yes Yes
profile:domains/integrations

  • AWS::CustomerProfiles::Integration

Yes No Yes Yes
Amazon Connect Outbound Campaigns [connect-campaigns] connect-campaigns:campaign

  • AWS::ConnectCampaigns::Campaign

Yes No Yes Yes
Amazon Connect Voice ID [voiceid] voiceid:domain

  • AWS::VoiceID::Domain

Yes No No No
Amazon Connect [connect] connect:instance/evaluation-form

  • AWS::Connect::EvaluationForm

Yes No Yes Yes
connect:instance/agent-state

  • AWS::Connect::AgentStatus

Yes No No No
connect:wildcardagentstatus

  • N/A

Yes No No No
connect:instance/transfer-destination

  • AWS::Connect::QuickConnect

Yes Yes Yes Yes
connect:instance/use-case

  • N/A

Yes No No No
connect:wildcardquickconnect

  • N/A

Yes No No No
connect:instance/task-template

  • AWS::Connect::TaskTemplate

Yes No Yes Yes
connect:instance/agent

  • AWS::Connect::User

Yes Yes Yes Yes
connect:traffic-distribution-group

  • AWS::Connect::TrafficDistributionGroup

Yes No No No
connect:instance/flow-module

  • AWS::Connect::ContactFlowModule

Yes No Yes Yes
connect:phone-number

  • AWS::Connect::PhoneNumber

Yes No Yes Yes
connect:instance/agent-group

  • AWS::Connect::UserHierarchyGroup

Yes No No No
connect:instance/operating-hours

  • AWS::Connect::HoursOfOperation

Yes No Yes Yes
connect:instance/security-profile

  • AWS::Connect::SecurityProfile

Yes No Yes Yes
connect:wildcardcontactflow

  • N/A

Yes No No No
connect:instance/queue

  • AWS::Connect::Queue

Yes Yes Yes Yes
connect:instance/contact-evaluation

  • N/A

Yes No No No
connect:instance/rule

  • AWS::Connect::Rule

Yes No Yes Yes
connect:instance/integration-association

  • AWS::Connect::IntegrationAssociation

Yes Yes Yes Yes
connect:instance/contact-flow

  • AWS::Connect::ContactFlow

Yes Yes Yes Yes
connect:instance/vocabulary

  • N/A

Yes No No No
connect:instance

  • AWS::Connect::Instance

Yes No Yes Yes
connect:instance/routing-profile

  • AWS::Connect::RoutingProfile

Yes Yes Yes Yes
connect:wildcardqueue

  • N/A

Yes No No No
connect:contact

  • N/A

Yes No No No
connect:instance/prompt

  • AWS::Connect::Prompt

Yes No Yes Yes
connect:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Data Lifecycle Manager [dlm] dlm:policy

  • AWS::DLM::LifecyclePolicy

Yes Yes Yes Yes
dlm:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon DataZone [datazone] datazone:domain

  • AWS::DataZone::Domain

Yes No Yes Yes
Amazon Detective [detective] detective:graph

  • AWS::Detective::Graph

Yes No Yes Yes
Amazon DocumentDB Elastic Clusters [docdb-elastic] docdb-elastic:cluster

  • AWS::DocDBElastic::Cluster

Yes No No No
docdb-elastic:cluster-pg

  • AWS::DocDBElastic::Cluster

Yes No No No
docdb-elastic:cluster-snapshot

  • N/A

Yes No No No
Amazon DynamoDB Accelerator (DAX) [dax] dax:cache

  • AWS::DAX::Cluster

Yes No Yes Yes
Amazon DynamoDB [dynamodb] dynamodb:globaltable

  • AWS::DynamoDB::GlobalTable

Yes No No No
dynamodb:table

  • AWS::DynamoDB::Table

Yes Yes Yes Yes
dynamodb:index

  • N/A

Yes No No No
dynamodb:table/stream

  • N/A

Yes No No No
dynamodb:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon EC2 Auto Scaling [autoscaling] autoscaling:autoscalinggroup

  • AWS::AutoScaling::AutoScalingGroup

Yes No No No
Amazon EC2 Image Builder [imagebuilder] imagebuilder:infrastructure-configuration

  • AWS::ImageBuilder::InfrastructureConfiguration

Yes No Yes Yes
imagebuilder:image-recipe

  • AWS::ImageBuilder::ImageRecipe

Yes No Yes Yes
imagebuilder:container-recipe

  • AWS::ImageBuilder::ContainerRecipe

Yes No Yes Yes
imagebuilder:image

  • AWS::ImageBuilder::Image

Yes No Yes Yes
imagebuilder:workflow

  • AWS::ImageBuilder::Workflow

Yes No Yes Yes
imagebuilder:component

  • AWS::ImageBuilder::Component

Yes No Yes Yes
imagebuilder:lifecycle-policy

  • AWS::ImageBuilder::LifecyclePolicy

Yes No Yes Yes
imagebuilder:distribution-configuration

  • AWS::ImageBuilder::DistributionConfiguration

Yes No Yes Yes
imagebuilder:image-pipeline

  • AWS::ImageBuilder::ImagePipeline

Yes No Yes Yes
Amazon EC2 [ec2] ec2:image-usage-report

  • N/A

Yes No No No
ec2:ipam-external-resource-verification-token

  • N/A

Yes Yes No No
ec2:security-group

  • AWS::EC2::SecurityGroup

Yes Yes Yes Yes
ec2:traffic-mirror-session

  • AWS::EC2::TrafficMirrorSession

Yes Yes Yes Yes
ec2:ipam-pool

  • AWS::EC2::IPAMPool

Yes Yes Yes Yes
ec2:security-group-rule

  • AWS::EC2::SecurityGroupIngress

  • AWS::EC2::SecurityGroupEgress

Yes No No No
ec2:local-gateway-virtual-interface-group

  • AWS::EC2::LocalGatewayVirtualInterfaceGroup

Yes No No No
ec2:natgateway

  • AWS::EC2::NatGateway

Yes Yes Yes Yes
ec2:import-snapshot-task

  • N/A

Yes Yes No No
ec2:internet-gateway

  • AWS::EC2::InternetGateway

Yes Yes Yes Yes
ec2:transit-gateway

  • AWS::EC2::TransitGateway

Yes Yes Yes Yes
ec2:dhcp-options

  • AWS::EC2::DHCPOptions

Yes Yes Yes Yes
ec2:image

  • N/A

Yes Yes No No
ec2:network-insights-access-scope-analysis

  • AWS::EC2::NetworkInsightsAccessScopeAnalysis

Yes Yes Yes Yes
ec2:ipv4pool-ec2

  • N/A

Yes Yes No No
ec2:transit-gateway-policy-table

  • N/A

Yes Yes No No
ec2:transit-gateway-attachment

  • AWS::EC2::TransitGatewayVpcAttachment

  • AWS::EC2::TransitGatewayAttachment

  • AWS::EC2::TransitGatewayPeeringAttachment

Yes Yes Yes Yes
ec2:volume

  • AWS::EC2::Volume

Yes Yes Yes Yes
ec2:import-image-task

  • N/A

Yes Yes No No
ec2:subnet

  • AWS::EC2::Subnet

Yes Yes Yes Yes
ec2:vpc

  • AWS::EC2::VPC

Yes Yes Yes Yes
ec2:vpc-endpoint-service-permission

  • AWS::EC2::VPCEndpointServicePermissions

Yes No Yes Yes
ec2:capacity-reservation

  • AWS::EC2::CapacityReservation

Yes Yes Yes Yes
ec2:network-acl

  • AWS::EC2::NetworkAcl

Yes Yes Yes Yes
ec2:verified-access-trust-provider

  • AWS::EC2::VerifiedAccessTrustProvider

Yes Yes Yes Yes
ec2:vpn-gateway

  • AWS::EC2::VPNGateway

Yes Yes Yes Yes
ec2:carrier-gateway

  • AWS::EC2::CarrierGateway

Yes Yes Yes Yes
ec2:elastic-gpu

  • N/A

Yes No No No
ec2:elasticgpu

  • N/A

Yes No No No
ec2:local-gateway-route-table

  • AWS::EC2::LocalGatewayRouteTable

Yes Yes Yes Yes
ec2:network-insights-access-scope

  • AWS::EC2::NetworkInsightsAccessScope

Yes Yes Yes Yes
ec2:transit-gateway-connect-peer

  • AWS::EC2::TransitGatewayConnectPeer

Yes Yes Yes Yes
ec2:verified-access-group

  • AWS::EC2::VerifiedAccessGroup

Yes Yes Yes Yes
ec2:traffic-mirror-target

  • AWS::EC2::TrafficMirrorTarget

Yes Yes Yes Yes
ec2:coip-pool

  • N/A

Yes Yes No No
ec2:fleet

  • AWS::EC2::EC2Fleet

Yes Yes Yes Yes
ec2:local-gateway-route-table-virtual-interface-group-association

  • AWS::EC2::LocalGatewayRouteTableVirtualInterfaceGroupAssociation

Yes Yes Yes Yes
ec2:transit-gateway-multicast-domain

  • AWS::EC2::TransitGatewayMulticastDomain

Yes Yes Yes Yes
ec2:network-interface

  • AWS::EC2::NetworkInterface

Yes Yes Yes Yes
ec2:capacity-manager-data-export

  • AWS::EC2::CapacityManagerDataExport

Yes No No No
ec2:client-vpn-endpoint

  • AWS::EC2::ClientVpnEndpoint

Yes Yes Yes Yes
ec2:spot-instances-request

  • N/A

Yes Yes No No
ec2:network-insights-path

  • AWS::EC2::NetworkInsightsPath

Yes Yes Yes Yes
ec2:instance-connect-endpoint

  • AWS::EC2::InstanceConnectEndpoint

Yes Yes Yes Yes
ec2:traffic-mirror-filter-rule

  • AWS::EC2::TrafficMirrorFilterRule

Yes No Yes Yes
ec2:local-gateway-virtual-interface

  • AWS::EC2::LocalGatewayVirtualInterface

Yes No No No
ec2:vpc-peering-connection

  • AWS::EC2::VPCPeeringConnection

Yes Yes Yes Yes
ec2:snapshot

  • N/A

Yes Yes No No
ec2:customer-gateway

  • AWS::EC2::CustomerGateway

Yes Yes Yes Yes
ec2:capacity-block

  • N/A

Yes No No No
ec2:verified-access-endpoint

  • AWS::EC2::VerifiedAccessEndpoint

Yes Yes Yes Yes
ec2:vpn-connection

  • AWS::EC2::VPNConnection

Yes Yes Yes Yes
ec2:ipam-scope

  • AWS::EC2::IPAMScope

Yes Yes Yes Yes
ec2:host-reservation

  • N/A

Yes Yes No No
ec2:replace-root-volume-task

  • N/A

Yes Yes No No
ec2:instance

  • AWS::EC2::Instance

Yes Yes Yes Yes
ec2:fpga-image

  • N/A

Yes Yes No No
ec2:route-server-endpoint

  • AWS::EC2::RouteServerEndpoint

Yes No No No
ec2:key-pair

  • AWS::EC2::KeyPair

Yes Yes Yes Yes
ec2:vpc-endpoint-connection

  • N/A

Yes No No No
ec2:dedicated-host

  • AWS::EC2::Host

Yes Yes Yes Yes
ec2:local-gateway-route-table-vpc-association

  • AWS::EC2::LocalGatewayRouteTableVPCAssociation

Yes Yes Yes Yes
ec2:vpc-endpoint-service

  • AWS::EC2::VPCEndpointService

Yes Yes Yes Yes
ec2:egress-only-internet-gateway

  • AWS::EC2::EgressOnlyInternetGateway

Yes Yes Yes Yes
ec2:ipam-resource-discovery

  • AWS::EC2::IPAMResourceDiscovery

Yes Yes Yes Yes
ec2:mac-modification-task

  • N/A

Yes No No No
ec2:network-insights-analysis

  • AWS::EC2::NetworkInsightsAnalysis

Yes Yes Yes Yes
ec2:placement-group

  • AWS::EC2::PlacementGroup

Yes Yes Yes Yes
ec2:instance-event-window

  • N/A

Yes Yes No No
ec2:ipv6pool-ec2

  • N/A

Yes No No No
ec2:prefix-list

  • AWS::EC2::PrefixList

Yes Yes Yes Yes
ec2:vpc-endpoint

  • AWS::EC2::VPCEndpoint

Yes Yes Yes Yes
ec2:elastic-ip

  • AWS::EC2::EIP

Yes Yes Yes Yes
ec2:export-instance-task

  • N/A

Yes Yes No No
ec2:reserved-instances

  • N/A

Yes Yes No No
ec2:export-image-task

  • N/A

Yes Yes No No
ec2:subnet-cidr-reservation

  • N/A

Yes Yes No No
ec2:vpc-flow-log

  • AWS::EC2::FlowLog

Yes Yes Yes Yes
ec2:capacity-reservation-fleet

  • AWS::EC2::CapacityReservationFleet

Yes Yes Yes Yes
ec2:ipam-resource-discovery-association

  • AWS::EC2::IPAMResourceDiscoveryAssociation

Yes Yes Yes Yes
ec2:transit-gateway-route-table-announcement

  • N/A

Yes Yes No No
ec2:traffic-mirror-filter

  • AWS::EC2::TrafficMirrorFilter

Yes Yes Yes Yes
ec2:outpost-lag

  • N/A

Yes No No No
ec2:local-gateway

  • N/A

Yes No No No
ec2:launch-template

  • AWS::EC2::LaunchTemplate

Yes Yes Yes Yes
ec2:vpc-block-public-access-exclusion

  • AWS::EC2::VPCBlockPublicAccessExclusion

Yes No Yes Yes
ec2:route-table

  • AWS::EC2::RouteTable

Yes Yes Yes Yes
ec2:ipam

  • AWS::EC2::IPAM

Yes Yes Yes Yes
ec2:declarative-policies-report

  • N/A

Yes No No No
ec2:verified-access-instance

  • AWS::EC2::VerifiedAccessInstance

Yes Yes Yes Yes
ec2:transit-gateway-route-table

  • AWS::EC2::TransitGatewayRouteTable

Yes Yes Yes Yes
ec2:spot-fleet-request

  • AWS::EC2::SpotFleet

Yes Yes Yes Yes
ec2:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon EMR Serverless [emr-serverless] emr-serverless:jobruns

  • N/A

Yes No No No
emr-serverless:applications

  • AWS::EMRServerless::Application

Yes Yes Yes Yes
Amazon EMR on EKS (EMR Containers) [emr-containers] emr-containers:virtualclusters/jobruns

  • N/A

Yes No No No
emr-containers:virtualclusters/endpoints

  • N/A

Yes No No No
emr-containers:securityconfigurations

  • N/A

Yes No No No
emr-containers:jobtemplates

  • N/A

Yes No No No
emr-containers:virtualclusters

  • AWS::EMRContainers::VirtualCluster

Yes No Yes Yes
Amazon ElastiCache [elasticache] elasticache:securitygroup

  • AWS::ElastiCache::SecurityGroup

Yes No Yes Yes
elasticache:parametergroup

  • AWS::ElastiCache::ParameterGroup

Yes No Yes Yes
elasticache:usergroup

  • AWS::ElastiCache::UserGroup

Yes No Yes Yes
elasticache:snapshot

  • N/A

Yes No No No
elasticache:subnetgroup

  • AWS::ElastiCache::SubnetGroup

Yes No Yes Yes
elasticache:cluster

  • AWS::ElastiCache::CacheCluster

Yes Yes Yes Yes
elasticache:reserved-instance

  • N/A

Yes No No No
elasticache:serverlesscache

  • AWS::ElastiCache::ServerlessCache

Yes No No No
elasticache:replicationgroup

  • AWS::ElastiCache::ReplicationGroup

Yes No Yes Yes
elasticache:serverlesscachesnapshot

  • N/A

Yes No No No
elasticache:user

  • AWS::ElastiCache::User

Yes No Yes Yes
elasticache:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Elastic Container Registry [ecr-public] ecr-public:repository

  • AWS::ECR::PublicRepository

Yes No Yes Yes
Amazon Elastic Container Registry [ecr] ecr:repository

  • AWS::ECR::Repository

Yes Yes Yes Yes
ecr:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Elastic Container Service [ecs] ecs:task

  • N/A

Yes No No No
ecs:capacity-provider

  • AWS::ECS::CapacityProvider

Yes Yes Yes Yes
ecs:service-revision

  • N/A

Yes No No No
ecs:service

  • AWS::ECS::Service

Yes Yes Yes Yes
ecs:cluster

  • AWS::ECS::Cluster

Yes Yes Yes Yes
ecs:service-deployment

  • N/A

Yes No No No
ecs:task-definition

  • AWS::ECS::TaskDefinition

Yes Yes Yes Yes
ecs:container-instance

  • N/A

Yes No No No
ecs:task-set

  • AWS::ECS::TaskSet

Yes Yes Yes Yes
ecs:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Elastic File System [elasticfilesystem] elasticfilesystem:file-system

  • AWS::EFS::FileSystem

Yes Yes Yes Yes
elasticfilesystem:access-point

  • AWS::EFS::AccessPoint

Yes No Yes Yes
elasticfilesystem:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Elastic Inference [amazonelasticinference] amazonelasticinference:accelerator

  • N/A

Yes No No No
Amazon Elastic Kubernetes Service [eks] eks:cluster

  • AWS::EKS::Cluster

Yes Yes Yes Yes
eks:access-entry

  • AWS::EKS::AccessEntry

Yes No Yes Yes
eks:addon

  • AWS::EKS::Addon

Yes No Yes Yes
eks:podidentityassociation

  • AWS::EKS::PodIdentityAssociation

Yes No Yes Yes
eks:dashboard

  • N/A

Yes No No No
eks:eks-anywhere-subscription

  • N/A

Yes No No No
eks:identityproviderconfig

  • AWS::EKS::IdentityProviderConfig

Yes No Yes Yes
eks:nodegroup

  • AWS::EKS::Nodegroup

Yes No Yes Yes
eks:fargateprofile

  • AWS::EKS::FargateProfile

Yes No Yes Yes
eks:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Elastic MapReduce [elasticmapreduce] elasticmapreduce:cluster

  • AWS::EMR::Cluster

Yes Yes Yes Yes
elasticmapreduce:editor

  • N/A

Yes Yes No No
elasticmapreduce:notebook-execution

  • N/A

Yes No No No
elasticmapreduce:studio

  • AWS::EMR::Studio

Yes No No No
elasticmapreduce:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Elastic VMware Service [evs] evs:environment

  • AWS::EVS::Environment

Yes No No No
Amazon EventBridge Pipes [pipes] pipes:pipe

  • AWS::Pipes::Pipe

Yes Yes Yes Yes
pipes:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon EventBridge Scheduler [scheduler] scheduler:schedule-group

  • AWS::Scheduler::ScheduleGroup

Yes Yes Yes Yes
scheduler:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon EventBridge Schemas [schemas] schemas:discoverer

  • AWS::EventSchemas::Discoverer

Yes No Yes Yes
schemas:registry

  • AWS::EventSchemas::Registry

Yes No Yes Yes
schemas:schema

  • AWS::EventSchemas::Schema

Yes No Yes Yes
Amazon EventBridge [events] events:event-bus

  • AWS::Events::EventBus

Yes Yes Yes Yes
events:rule

  • AWS::Events::Rule

Yes Yes Yes Yes
events:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon FSx [fsx] fsx:backup

  • N/A

Yes Yes No No
fsx:storage-virtual-machine

  • AWS::FSx::StorageVirtualMachine

Yes No Yes Yes
fsx:snapshot

  • AWS::FSx::Snapshot

Yes No Yes Yes
fsx:file-system

  • AWS::FSx::FileSystem

Yes Yes Yes Yes
fsx:association

  • AWS::FSx::DataRepositoryAssociation

Yes No Yes Yes
fsx:file-cache

  • N/A

Yes No No No
fsx:volume

  • AWS::FSx::Volume

Yes No Yes Yes
fsx:task

  • N/A

Yes No No No
fsx:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon FinSpace [finspace] finspace:kxenvironment/kxdatabase/kxdataview

  • N/A

Yes No No No
finspace:kxenvironment/kxuser

  • N/A

Yes No No No
finspace:environment

  • AWS::FinSpace::Environment

Yes No No No
finspace:kxenvironment/kxdatabase

  • N/A

Yes No No No
finspace:kxenvironment/kxvolume

  • N/A

Yes No No No
finspace:kxenvironment

  • N/A

Yes No No No
finspace:kxenvironment/kxscalinggroup

  • N/A

Yes No No No
finspace:kxenvironment/kxcluster

  • N/A

Yes No No No
Amazon Forecast [forecast] forecast:dataset-import-job

  • N/A

Yes No No No
forecast:predictor-backtest-export-job

  • N/A

Yes No No No
forecast:forecast-endpoint

  • N/A

Yes No No No
forecast:dataset-group

  • AWS::Forecast::DatasetGroup

Yes No Yes Yes
forecast:what-if-forecast-export

  • N/A

Yes No No No
forecast:monitor

  • N/A

Yes No No No
forecast:forecast-export-job

  • N/A

Yes No No No
forecast:dataset

  • AWS::Forecast::Dataset

Yes No Yes Yes
forecast:what-if-forecast

  • N/A

Yes No No No
forecast:predictor

  • N/A

Yes No No No
forecast:what-if-analysis

  • N/A

Yes No No No
forecast:explainability

  • N/A

Yes No No No
forecast:explainability-export

  • N/A

Yes No No No
forecast:forecast

  • N/A

Yes No No No
Amazon Fraud Detector [frauddetector] frauddetector:detector

  • AWS::FraudDetector::Detector

Yes Yes Yes Yes
frauddetector:detector-version

  • N/A

Yes Yes No No
frauddetector:batch-prediction

  • N/A

Yes No No No
frauddetector:label

  • AWS::FraudDetector::Label

Yes No Yes Yes
frauddetector:event-type

  • AWS::FraudDetector::EventType

Yes No Yes Yes
frauddetector:external-model

  • N/A

Yes No No No
frauddetector:batch-import

  • N/A

Yes No No No
frauddetector:entity-type

  • AWS::FraudDetector::EntityType

Yes No Yes Yes
frauddetector:outcome

  • AWS::FraudDetector::Outcome

Yes No Yes Yes
frauddetector:model-version

  • N/A

Yes No No No
frauddetector:list

  • AWS::FraudDetector::List

Yes No Yes Yes
frauddetector:rule

  • N/A

Yes Yes No No
frauddetector:variable

  • AWS::FraudDetector::Variable

Yes Yes Yes Yes
frauddetector:model

  • N/A

Yes Yes No No
frauddetector:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon FreeRTOS [freertos] freertos:subscription

  • N/A

Yes No No No
freertos:configuration

  • N/A

Yes No No No
Amazon GameLift Servers [gamelift] gamelift:script

  • AWS::GameLift::Script

Yes No Yes Yes
gamelift:build

  • AWS::GameLift::Build

Yes No Yes Yes
gamelift:containergroupdefinition

  • AWS::GameLift::ContainerGroupDefinition

Yes No No No
gamelift:gamesessionqueue

  • AWS::GameLift::GameSessionQueue

Yes No Yes Yes
gamelift:fleet

  • AWS::GameLift::Fleet

Yes No Yes Yes
gamelift:matchmakingruleset

  • AWS::GameLift::MatchmakingRuleSet

Yes No Yes Yes
gamelift:location

  • AWS::GameLift::Location

Yes No Yes Yes
gamelift:alias

  • AWS::GameLift::Alias

Yes No Yes Yes
gamelift:gameservergroup

  • AWS::GameLift::GameServerGroup

Yes No Yes Yes
gamelift:containerfleet

  • AWS::GameLift::ContainerFleet

Yes No No No
gamelift:matchmakingconfiguration

  • AWS::GameLift::MatchmakingConfiguration

Yes No Yes Yes
Amazon GameLift Streams [gameliftstreams] gameliftstreams:application

  • AWS::GameLiftStreams::Application

Yes No No No
gameliftstreams:streamgroup

  • AWS::GameLiftStreams::StreamGroup

Yes No No No
Amazon GuardDuty [AWS] AWS::GuardDuty::PublishingDestination

  • AWS::GuardDuty::PublishingDestination

Yes No No No
Amazon GuardDuty [guardduty] guardduty:malware-protection-plan

  • AWS::GuardDuty::MalwareProtectionPlan

Yes No Yes Yes
guardduty:detector

  • AWS::GuardDuty::Detector

Yes Yes Yes Yes
guardduty:detector/ipset

  • AWS::GuardDuty::IPSet

Yes Yes Yes Yes
guardduty:detector/threatintelset

  • AWS::GuardDuty::ThreatIntelSet

Yes Yes Yes Yes
guardduty:detector/filter

  • AWS::GuardDuty::Filter

Yes Yes Yes Yes
Amazon Honeycode [honeycode] honeycode:screen-automation

  • N/A

Yes No No No
honeycode:workbook

  • N/A

Yes No No No
honeycode:table

  • N/A

Yes No No No
honeycode:screen

  • N/A

Yes No No No
Amazon Inspector [inspector2] inspector2:codescan-configuration

  • AWS::InspectorV2::CisScanConfiguration

Yes No No No
inspector2:cis-configuration

  • AWS::InspectorV2::CisScanConfiguration

Yes No No No
inspector2:filter

  • AWS::InspectorV2::Filter

Yes Yes Yes Yes
inspector2:codesecurity-integration

  • N/A

Yes No No No
inspector2:codesecurity-configuration

  • N/A

Yes No No No
inspector2:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Interactive Video Service [ivs] ivs:public-key

  • AWS::IVS::PublicKey

Yes No Yes Yes
ivs:ingest-configuration

  • AWS::IVS::IngestConfiguration

Yes No Yes Yes
ivs:recording-configuration

  • AWS::IVS::RecordingConfiguration

Yes No Yes Yes
ivs:transcode-configuration

  • N/A

Yes No No No
ivs:chat-room

  • AWS::IVSChat::Room

Yes No No No
ivs:playback-restriction-policy

  • AWS::IVS::PlaybackRestrictionPolicy

Yes No Yes Yes
ivs:channel

  • AWS::IVS::Channel

Yes No Yes Yes
ivs:playback-key

  • AWS::IVS::PlaybackKeyPair

Yes No Yes Yes
ivs:stream-key

  • AWS::IVS::StreamKey

Yes No Yes Yes
ivs:composition

  • N/A

Yes No No No
ivs:stage

  • AWS::IVS::Stage

Yes No Yes Yes
ivs:storage-configuration

  • AWS::IVS::StorageConfiguration

Yes No Yes Yes
ivs:encoder-configuration

  • AWS::IVS::EncoderConfiguration

Yes No Yes Yes
Amazon Kendra Intelligent Ranking [kendra-ranking] kendra-ranking:rescore-execution-plan

  • AWS::KendraRanking::ExecutionPlan

Yes No Yes Yes
Amazon Kendra [kendra] kendra:index

  • AWS::Kendra::Index

Yes No Yes Yes
kendra:index/thesaurus

  • N/A

Yes No No No
kendra:index/query-suggestions-block-list

  • N/A

Yes No No No
kendra:index/data-source

  • AWS::Kendra::DataSource

Yes No Yes Yes
kendra:index/featured-results-set

  • N/A

Yes No No No
Amazon Keyspaces (for Apache Cassandra) [cassandra] cassandra:keyspace

  • AWS::Cassandra::Keyspace

Yes No Yes Yes
cassandra:table

  • AWS::Cassandra::Table

Yes No No No
Amazon Kinesis Analytics [kinesisanalytics] kinesisanalytics:application

  • AWS::KinesisAnalytics::Application

Yes Yes Yes Yes
kinesisanalytics:application

  • AWS::KinesisAnalyticsV2::Application

Yes Yes Yes Yes
kinesisanalytics:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Kinesis Data Streams [kinesis] kinesis:stream

  • AWS::Kinesis::Stream

Yes No Yes Yes
kinesis:stream/consumer

  • AWS::Kinesis::StreamConsumer

Yes No Yes Yes
Amazon Kinesis Firehose [firehose] firehose:deliverystream

  • AWS::KinesisFirehose::DeliveryStream

Yes Yes Yes Yes
firehose:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Kinesis Video Streams [kinesisvideo] kinesisvideo:stream

  • AWS::KinesisVideo::Stream

Yes No Yes Yes
kinesisvideo:channel

  • AWS::KinesisVideo::SignalingChannel

Yes No Yes Yes
Amazon Lex [lex] lex:bot-channel

  • N/A

Yes No No No
lex:test-set

  • N/A

Yes No No No
lex:bot-alias

  • AWS::Lex::BotAlias

Yes No Yes Yes
lex:bot

  • AWS::Lex::Bot

Yes No Yes Yes
Amazon Lightsail [lightsail] lightsail:keypair

  • N/A

Yes No No No
lightsail:distribution

  • AWS::Lightsail::Distribution

Yes No Yes Yes
lightsail:containerservice

  • AWS::Lightsail::Container

Yes No Yes Yes
lightsail:disksnapshot

  • AWS::Lightsail::DiskSnapshot

Yes No No No
lightsail:relationaldatabase

  • AWS::Lightsail::Database

Yes No No No
lightsail:certificate

  • AWS::Lightsail::Certificate

Yes No Yes Yes
lightsail:bucket

  • AWS::Lightsail::Bucket

Yes No Yes Yes
lightsail:instance

  • AWS::Lightsail::Instance

Yes No Yes Yes
lightsail:disk

  • AWS::Lightsail::Disk

Yes No Yes Yes
lightsail:loadbalancer

  • AWS::Lightsail::LoadBalancer

Yes No Yes Yes
lightsail:domain

  • AWS::Lightsail::Domain

Yes No Yes Yes
lightsail:instancesnapshot

  • AWS::Lightsail::InstanceSnapshot

Yes No No No
lightsail:relationaldatabasesnapshot

  • N/A

Yes No No No
lightsail:staticip

  • AWS::Lightsail::StaticIp

Yes No Yes Yes
Amazon Location [geo] geo:geofence-collection

  • AWS::Location::GeofenceCollection

Yes No Yes Yes
geo:tracker

  • AWS::Location::Tracker

Yes No Yes Yes
geo:api-key

  • AWS::Location::APIKey

Yes No Yes Yes
geo:place-index

  • AWS::Location::PlaceIndex

Yes No Yes Yes
geo:route-calculator

  • AWS::Location::RouteCalculator

Yes No Yes Yes
geo:map

  • AWS::Location::Map

Yes No Yes Yes
Amazon Lookout for Equipment [lookoutequipment] lookoutequipment:dataset

  • N/A

Yes No No No
lookoutequipment:label-group

  • N/A

Yes No No No
lookoutequipment:inference-scheduler

  • AWS::LookoutEquipment::InferenceScheduler

Yes No No No
lookoutequipment:model

  • N/A

Yes No No No
Amazon Lookout for Metrics [lookoutmetrics] lookoutmetrics:metricset

  • N/A

Yes No No No
lookoutmetrics:anomalydetector

  • AWS::LookoutMetrics::AnomalyDetector

Yes No Yes Yes
lookoutmetrics:alert

  • AWS::LookoutMetrics::Alert

Yes No Yes Yes
Amazon Lookout for Vision [lookoutvision] lookoutvision:model

  • N/A

Yes No No No
Amazon MQ [mq] mq:configuration

  • AWS::AmazonMQ::Configuration

Yes Yes Yes Yes
mq:broker

  • AWS::AmazonMQ::Broker

Yes Yes Yes Yes
mq:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Machine Learning [machinelearning] machinelearning:evaluation

  • N/A

Yes No No No
machinelearning:mlmodel

  • N/A

Yes No No No
machinelearning:batchprediction

  • N/A

Yes No No No
machinelearning:datasource

  • N/A

Yes No No No
Amazon Macie [macie2] macie2:classification-job

  • N/A

Yes No No No
macie2:ALL_SUPPORTED

  • N/A

No Yes No No
Amazon Macie [macie] macie:allow-list

  • AWS::Macie::AllowList

Yes No No No
macie:member

  • N/A

Yes No No No
macie:findings-filter

  • AWS::Macie::FindingsFilter

Yes No No No
macie:classification-job

  • N/A

Yes No No No
macie:custom-data-identifier

  • AWS::Macie::CustomDataIdentifier

Yes No No No
Amazon Managed Blockchain [managedblockchain] managedblockchain:proposals

  • N/A

Yes No No No
managedblockchain:members

  • AWS::ManagedBlockchain::Member

Yes No No No
managedblockchain:accessors

  • AWS::ManagedBlockchain::Accessor

Yes No Yes Yes
managedblockchain:networks

  • N/A

Yes No No No
managedblockchain:nodes

  • AWS::ManagedBlockchain::Node

Yes No No No
managedblockchain:invitations

  • N/A

Yes No No No
Amazon Managed Grafana [grafana] grafana:workspaces

  • AWS::Grafana::Workspace

Yes No Yes Yes
Amazon Managed Service for Prometheus [aps] aps:scraper

  • AWS::APS::Scraper

Yes No No No
aps:anomalydetector

  • AWS::APS::AnomalyDetector

Yes No No No
aps:workspace

  • AWS::APS::Workspace

Yes No Yes Yes
aps:rulegroupsnamespace

  • AWS::APS::RuleGroupsNamespace

Yes No Yes Yes
Amazon Managed Streaming for Apache Kafka [kafka] kafka:vpc-connection

  • AWS::MSK::VpcConnection

Yes No No No
kafka:cluster

  • AWS::MSK::Cluster

Yes No No No
kafka:replicator

  • AWS::MSK::Replicator

Yes No Yes Yes
Amazon Managed Streaming for Kafka Connect [kafkaconnect] kafkaconnect:worker-configuration

  • AWS::KafkaConnect::WorkerConfiguration

Yes No Yes Yes
kafkaconnect:connector

  • AWS::KafkaConnect::Connector

Yes No No No
kafkaconnect:custom-plugin

  • AWS::KafkaConnect::CustomPlugin

Yes No Yes Yes
Amazon Managed Workflows for Apache Airflow [airflow] airflow:environment

  • AWS::MWAA::Environment

Yes No Yes Yes
Amazon MemoryDB [memorydb] memorydb:cluster

  • AWS::MemoryDB::Cluster

Yes No Yes Yes
memorydb:acl

  • AWS::MemoryDB::ACL

Yes No Yes Yes
memorydb:subnetgroup

  • AWS::MemoryDB::SubnetGroup

Yes No Yes Yes
memorydb:reservednode

  • N/A

Yes No No No
memorydb:multiregioncluster

  • AWS::MemoryDB::MultiRegionCluster

Yes No No No
memorydb:user

  • AWS::MemoryDB::User

Yes No Yes Yes
memorydb:parametergroup

  • AWS::MemoryDB::ParameterGroup

Yes No Yes Yes
memorydb:snapshot

  • N/A

Yes No No No
Amazon Nimble Studio [nimble] nimble:studio

  • AWS::NimbleStudio::Studio

Yes No No No
nimble:launch-profile

  • N/A

Yes No No No
nimble:streaming-session

  • N/A

Yes No No No
nimble:streaming-session-backup

  • N/A

Yes No No No
nimble:streaming-image

  • N/A

Yes No No No
nimble:studio-component

  • N/A

Yes No No No
Amazon One Enterprise [one] one:site

  • N/A

Yes No No No
one:device-instance

  • N/A

Yes No No No
one:device-configuration-template

  • N/A

Yes No No No
Amazon OpenSearch Ingestion [osis] osis:pipeline

  • AWS::OSIS::Pipeline

Yes No Yes Yes
Amazon OpenSearch Serverless [aoss] aoss:collection

  • AWS::OpenSearchServerless::Collection

Yes Yes Yes Yes
aoss:collection-group

  • N/A

Yes No No No
aoss:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon OpenSearch [es] es:domain

  • AWS::Elasticsearch::Domain

  • AWS::OpenSearchService::Domain

Yes Yes No No
es:ALL_SUPPORTED

  • N/A

No Yes No No
Amazon OpenSearch [opensearch] opensearch:datasource

  • N/A

Yes No No No
Amazon Personalize [personalize] personalize:data-deletion-job

  • N/A

Yes No No No
personalize:dataset-group

  • AWS::Personalize::DatasetGroup

Yes No Yes Yes
personalize:batch-segment-job

  • N/A

Yes No No No
personalize:campaign

  • N/A

Yes No No No
personalize:recommender

  • N/A

Yes No No No
personalize:batch-inference-job

  • N/A

Yes No No No
personalize:event-tracker

  • N/A

Yes No No No
personalize:dataset-import-job

  • N/A

Yes No No No
personalize:dataset

  • AWS::Personalize::Dataset

Yes No Yes Yes
personalize:solution

  • AWS::Personalize::Solution

Yes No Yes Yes
personalize:filter

  • N/A

Yes No No No
personalize:dataset-export-job

  • N/A

Yes No No No
Amazon Pinpoint SMS and Voice Service [sms-voice] sms-voice:sender-id

  • AWS::SMSVOICE::SenderId

Yes Yes No No
sms-voice:protect-configuration

  • AWS::SMSVOICE::ProtectConfiguration

Yes No No No
sms-voice:opt-out-list

  • AWS::SMSVOICE::OptOutList

Yes Yes No No
sms-voice:phone-number

  • AWS::SMSVOICE::PhoneNumber

Yes Yes No No
sms-voice:pool

  • AWS::SMSVOICE::Pool

Yes Yes No No
sms-voice:configuration-set

  • AWS::SMSVOICE::ConfigurationSet

Yes Yes No No
sms-voice:ALL_SUPPORTED

  • N/A

No Yes No No
Amazon Pinpoint [mobiletargeting] mobiletargeting:templates

  • AWS::Pinpoint::SmsTemplate

  • AWS::Pinpoint::PushTemplate

  • AWS::Pinpoint::InAppTemplate

  • AWS::Pinpoint::EmailTemplate

Yes No No No
mobiletargeting:apps

  • AWS::Pinpoint::App

Yes No Yes Yes
Amazon Q Business Q Apps [qapps] qapps:application/qapp/session

  • N/A

Yes No No No
qapps:application/qapp

  • N/A

Yes No No No
Amazon Q Business [qbusiness] qbusiness:application/plugin

  • AWS::QBusiness::Plugin

Yes No No No
qbusiness:application/retriever

  • AWS::QBusiness::Retriever

Yes No No No
qbusiness:application/index/data-source

  • AWS::QBusiness::DataSource

Yes No No No
qbusiness:application

  • AWS::QBusiness::Application

Yes No No No
qbusiness:application/web-experience

  • AWS::QBusiness::WebExperience

Yes No No No
qbusiness:application/index

  • AWS::QBusiness::Index

Yes No No No
Amazon Q in Connect [wisdom] wisdom:content-association

  • N/A

Yes No No No
wisdom:content

  • N/A

Yes Yes No No
wisdom:assistant

  • AWS::Wisdom::Assistant

Yes Yes Yes Yes
wisdom:quick-response

  • AWS::Wisdom::QuickResponse

Yes No No No
wisdom:ai-agent

  • AWS::Wisdom::AIAgent

Yes No Yes Yes
wisdom:message-template

  • AWS::Wisdom::MessageTemplate

Yes No No No
wisdom:knowledge-base

  • AWS::Wisdom::KnowledgeBase

Yes Yes Yes Yes
wisdom:session

  • N/A

Yes Yes No No
wisdom:ai-prompt

  • AWS::Wisdom::AIPrompt

Yes No No No
wisdom:ai-guardrail

  • AWS::Wisdom::AIGuardrail

Yes No No No
wisdom:association

  • AWS::Wisdom::AssistantAssociation

Yes Yes Yes Yes
wisdom:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon QLDB [qldb] qldb:ledger

  • AWS::QLDB::Ledger

Yes No No No
qldb:stream

  • AWS::QLDB::Stream

Yes No No No
qldb:ledger/table

  • N/A

Yes No No No
Amazon QuickSight [quicksight] quicksight:vpcconnection

  • AWS::QuickSight::VPCConnection

Yes No No No
quicksight:analysis

  • AWS::QuickSight::Analysis

Yes No No No
quicksight:folder

  • AWS::QuickSight::Folder

Yes No No No
quicksight:custompermissions

  • AWS::QuickSight::CustomPermissions

Yes No No No
quicksight:brand

  • N/A

Yes No No No
quicksight:user

  • N/A

Yes No No No
quicksight:datasource

  • AWS::QuickSight::DataSource

Yes No No No
quicksight:template

  • AWS::QuickSight::Template

Yes No No No
quicksight:topic

  • AWS::QuickSight::Topic

Yes No No No
quicksight:email-customization-template

  • N/A

Yes No No No
quicksight:theme

  • AWS::QuickSight::Theme

Yes No No No
quicksight:customization

  • N/A

Yes No No No
quicksight:flow

  • N/A

Yes No No No
quicksight:action-connector

  • N/A

Yes No No No
quicksight:namespace

  • N/A

Yes No No No
quicksight:dataset

  • AWS::QuickSight::DataSet

Yes No No No
quicksight:dashboard

  • AWS::QuickSight::Dashboard

Yes No No No
Amazon RDS [neptune-graph] neptune-graph:export-task

  • N/A

Yes No No No
neptune-graph:graph

  • AWS::NeptuneGraph::Graph

Yes No No No
neptune-graph:graph-snapshot

  • N/A

Yes No No No
Amazon RDS [rds] rds:cluster-snapshot

  • N/A

Yes No No No
rds:db

  • AWS::DocDB::DBInstance

  • AWS::RDS::DBInstance

Yes No Yes Yes
rds:globalcluster

  • AWS::RDS::GlobalCluster

Yes No No No
rds:global-cluster

  • AWS::RDS::GlobalCluster

Yes No Yes Yes
rds:subgrp

  • AWS::RDS::DBSubnetGroup

Yes Yes Yes Yes
rds:cluster-auto-backup

  • N/A

Yes No No No
rds:deployment

  • N/A

Yes No No No
rds:pg

  • AWS::Neptune::DBParameterGroup

Yes Yes Yes Yes
rds:cluster-pg

  • AWS::Neptune::DBClusterParameterGroup

Yes Yes Yes Yes
rds:snapshot-tenant-database

  • N/A

Yes No No No
rds:es

  • AWS::DocDB::EventSubscription

Yes Yes Yes Yes
rds:pg

  • AWS::RDS::DBParameterGroup

Yes Yes Yes Yes
rds:target-group

  • AWS::RDS::DBProxyTargetGroup

Yes Yes Yes Yes
rds:cluster

  • AWS::DocDB::DBCluster

Yes No Yes Yes
rds:snapshot

  • N/A

Yes No No No
rds:db-proxy

  • AWS::RDS::DBProxy

Yes Yes Yes Yes
rds:es

  • AWS::RDS::EventSubscription

Yes Yes Yes Yes
rds:cluster-endpoint

  • N/A

Yes Yes No No
rds:integration

  • AWS::RDS::Integration

Yes No No No
rds:ri

  • N/A

Yes Yes No No
rds:auto-backup

  • N/A

Yes No No No
rds:secgrp

  • AWS::RDS::DBSecurityGroup

Yes Yes Yes Yes
rds:cev

  • AWS::RDS::CustomDBEngineVersion

Yes No Yes Yes
rds:db-proxy-endpoint

  • AWS::RDS::DBProxyEndpoint

Yes Yes Yes Yes
rds:cluster-pg

  • AWS::RDS::DBClusterParameterGroup

Yes Yes Yes Yes
rds:optgrp

  • AWS::RDS::OptionGroup

Yes No No No
rds:og

  • AWS::RDS::OptionGroup

Yes Yes Yes Yes
rds:db

  • AWS::Neptune::DBInstance

Yes No Yes Yes
rds:subgrp

  • AWS::DocDB::DBSubnetGroup

Yes Yes Yes Yes
rds:tenant-database

  • N/A

Yes No No No
rds:subgrp

  • AWS::Neptune::DBSubnetGroup

Yes Yes Yes Yes
rds:cluster-pg

  • AWS::DocDB::DBClusterParameterGroup

Yes Yes Yes Yes
rds:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Redshift Serverless [redshift-serverless] redshift-serverless:recoverypoint

  • N/A

Yes No No No
redshift-serverless:workgroup

  • AWS::RedshiftServerless::Workgroup

Yes Yes Yes Yes
redshift-serverless:namespace

  • AWS::RedshiftServerless::Namespace

Yes Yes Yes Yes
redshift-serverless:snapshot

  • AWS::RedshiftServerless::Snapshot

Yes No No No
redshift-serverless:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Redshift [redshift] redshift:eventsubscription

  • AWS::Redshift::EventSubscription

Yes Yes Yes Yes
redshift:hsmconfiguration

  • N/A

Yes Yes No No
redshift:subnetgroup

  • AWS::Redshift::ClusterSubnetGroup

Yes Yes Yes Yes
redshift:snapshotcopygrant

  • N/A

Yes Yes No No
redshift:qev2idcapplication

  • N/A

Yes No No No
redshift:securitygroupingress

  • AWS::Redshift::ClusterSecurityGroupIngress

Yes No No No
redshift:namespace

  • N/A

Yes No No No
redshift:snapshotschedule

  • N/A

Yes Yes No No
redshift:securitygroup

  • AWS::Redshift::ClusterSecurityGroup

Yes No No No
redshift:hsmclientcertificate

  • N/A

Yes Yes No No
redshift:redshiftidcapplication

  • N/A

Yes No No No
redshift:cluster

  • AWS::Redshift::Cluster

Yes Yes Yes Yes
redshift:snapshot

  • N/A

Yes Yes No No
redshift:usagelimit

  • N/A

Yes No No No
redshift:integration

  • AWS::Redshift::Integration

Yes No Yes Yes
redshift:parametergroup

  • AWS::Redshift::ClusterParameterGroup

Yes Yes Yes Yes
redshift:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Rekognition [rekognition] rekognition:project/version

  • N/A

Yes No No No
rekognition:project

  • AWS::Rekognition::Project

Yes No No No
rekognition:collection

  • AWS::Rekognition::Collection

Yes No Yes Yes
rekognition:streamprocessor

  • AWS::Rekognition::StreamProcessor

Yes No No No
Amazon Route 53 Profiles [route53profiles] route53profiles:profile-association

  • AWS::Route53Profiles::ProfileAssociation

Yes No Yes Yes
route53profiles:profile

  • AWS::Route53Profiles::Profile

Yes No Yes Yes
Amazon Route 53 Recovery Controls [route53-recovery-control] route53-recovery-control:controlpanel/safetyrule

  • AWS::Route53RecoveryControl::SafetyRule

Yes No Yes Yes
route53-recovery-control:cluster

  • AWS::Route53RecoveryControl::Cluster

Yes No Yes Yes
route53-recovery-control:controlpanel

  • AWS::Route53RecoveryControl::ControlPanel

Yes No Yes Yes
Amazon Route 53 Recovery Readiness [route53-recovery-readiness] route53-recovery-readiness:recovery-group

  • AWS::Route53RecoveryReadiness::RecoveryGroup

Yes No Yes Yes
route53-recovery-readiness:readiness-check

  • AWS::Route53RecoveryReadiness::ReadinessCheck

Yes No Yes Yes
route53-recovery-readiness:cell

  • AWS::Route53RecoveryReadiness::Cell

Yes No Yes Yes
route53-recovery-readiness:resource-set

  • AWS::Route53RecoveryReadiness::ResourceSet

Yes No Yes Yes
Amazon Route 53 Resolver [route53resolver] route53resolver:resolver-rule

  • AWS::Route53Resolver::ResolverRule

Yes Yes Yes Yes
route53resolver:firewall-domain-list

  • AWS::Route53Resolver::FirewallDomainList

Yes No Yes Yes
route53resolver:resolver-endpoint

  • AWS::Route53Resolver::ResolverEndpoint

Yes Yes Yes Yes
route53resolver:resolver-query-log-config

  • AWS::Route53Resolver::ResolverQueryLoggingConfig

Yes No Yes Yes
route53resolver:firewall-rule-group

  • AWS::Route53Resolver::FirewallRuleGroup

Yes No Yes Yes
route53resolver:firewall-rule-group-association

  • AWS::Route53Resolver::FirewallRuleGroupAssociation

Yes No Yes Yes
route53resolver:outpost-resolver

  • AWS::Route53Resolver::OutpostResolver

Yes No No No
route53resolver:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon Route 53 [route53] route53:healthcheck

  • AWS::Route53::HealthCheck

Yes No Yes Yes
route53:domain

  • N/A

Yes No No No
route53:hostedzone

  • AWS::Route53::HostedZone

Yes Yes Yes Yes
route53:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon S3 Express [s3express] s3express:accesspoint

  • AWS::S3Express::AccessPoint

Yes No No No
s3express:bucket

  • AWS::S3Express::DirectoryBucket

Yes No Yes Yes
Amazon S3 Glacier [glacier] glacier:vaults

  • N/A

Yes No No No
Amazon S3 Tables [s3tables] s3tables:TableBucket

  • AWS::S3Tables::TableBucket

Yes No No No
s3tables:table

  • AWS::S3Tables::Table

Yes No No No
Amazon S3 Vectors [s3vectors] s3vectors:index

  • AWS::S3Vectors::Index

Yes No No No
s3vectors:vectorbucket

  • AWS::S3Vectors::VectorBucket

Yes No No No
Amazon S3 [s3] s3:accessgrantsinstance

  • AWS::S3::AccessGrantsInstance

Yes No No No
s3:bucket

  • AWS::S3::Bucket

Yes Yes Yes Yes
s3:job

  • N/A

Yes No No No
s3:access-grants

  • AWS::S3::AccessGrant

Yes No No No
s3:storage-lens

  • AWS::S3::StorageLens

Yes Yes Yes Yes
s3:access-grants/location

  • AWS::S3::AccessGrantsLocation

Yes No No No
s3:accessgrantslocation

  • AWS::S3::AccessGrantsLocation

Yes No No No
s3:storage-lens-group

  • AWS::S3::StorageLensGroup

Yes Yes Yes Yes
s3:accesspoint

  • AWS::S3::AccessPoint

Yes No Yes Yes
s3:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon SES [ses] ses:identity

  • AWS::SES::EmailIdentity

  • AWS::PinpointEmail::Identity

Yes No Yes Yes
ses:dedicated-ip-pool

  • AWS::SES::DedicatedIpPool

  • AWS::PinpointEmail::DedicatedIpPool

Yes No Yes Yes
ses:contact-list

  • AWS::SES::ContactList

Yes No Yes Yes
ses:mailmanager-ingress-point

  • AWS::SES::MailManagerIngressPoint

Yes No Yes Yes
ses:configuration-set

  • AWS::SES::ConfigurationSet

  • AWS::PinpointEmail::ConfigurationSet

Yes No Yes Yes
ses:mailmanager-address-list

  • AWS::SES::MailManagerAddressList

Yes No No No
ses:multi-region-endpoint

  • AWS::SES::MultiRegionEndpoint

Yes No No No
ses:mailmanager-archive

  • AWS::SES::MailManagerArchive

Yes No Yes Yes
ses:mailmanager-traffic-policy

  • AWS::SES::MailManagerTrafficPolicy

Yes No Yes Yes
ses:mailmanager-rule-set

  • AWS::SES::MailManagerRuleSet

Yes No Yes Yes
Amazon SNS [sns] sns:topic

  • AWS::SNS::Topic

Yes Yes Yes Yes
sns:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon SQS [sqs] sqs:queue

  • AWS::SQS::Queue

Yes Yes Yes Yes
sqs:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Amazon SageMaker [sagemaker] sagemaker:image

  • AWS::SageMaker::Image

Yes No Yes Yes
sagemaker:model-quality-job-definition

  • AWS::SageMaker::ModelQualityJobDefinition

Yes No Yes Yes
sagemaker:monitoring-schedule

  • AWS::SageMaker::MonitoringSchedule

Yes No Yes Yes
sagemaker:transform-job

  • N/A

Yes No No No
sagemaker:code-repository

  • AWS::SageMaker::CodeRepository

Yes No Yes Yes
sagemaker:imageversion

  • AWS::SageMaker::ImageVersion

Yes No No No
sagemaker:experiment

  • N/A

Yes Yes No No
sagemaker:action

  • N/A

Yes Yes No No
sagemaker:hyper-parameter-tuning-job

  • N/A

Yes No No No
sagemaker:model-bias-job-definition

  • AWS::SageMaker::ModelBiasJobDefinition

Yes No Yes Yes
sagemaker:app-image-config

  • AWS::SageMaker::AppImageConfig

Yes Yes Yes Yes
sagemaker:model

  • AWS::SageMaker::Model

Yes No Yes Yes
sagemaker:training-plan

  • N/A

Yes No No No
sagemaker:workforce

  • N/A

Yes No No No
sagemaker:model-explainability-job-definition

  • AWS::SageMaker::ModelExplainabilityJobDefinition

Yes No Yes Yes
sagemaker:model-card

  • AWS::SageMaker::ModelCard

Yes No Yes Yes
sagemaker:model-card-export-job

  • N/A

Yes No No No
sagemaker:notebook-instance-lifecycle-config

  • AWS::SageMaker::NotebookInstanceLifecycleConfig

Yes No Yes Yes
sagemaker:notebook-instance

  • AWS::SageMaker::NotebookInstance

Yes No Yes Yes
sagemaker:compilation-job

  • N/A

Yes No No No
sagemaker:model-package

  • AWS::SageMaker::ModelPackage

Yes Yes Yes Yes
sagemaker:data-quality-job-definition

  • AWS::SageMaker::DataQualityJobDefinition

Yes No Yes Yes
sagemaker:user-profile

  • AWS::SageMaker::UserProfile

Yes No Yes Yes
sagemaker:domain

  • AWS::SageMaker::Domain

Yes No Yes Yes
sagemaker:mlflow-tracking-server

  • AWS::SageMaker::MlflowTrackingServer

Yes No Yes Yes
sagemaker:edge-packaging-job

  • N/A

Yes No No No
sagemaker:cluster

  • AWS::SageMaker::Cluster

Yes No Yes Yes
sagemaker:device

  • AWS::SageMaker::Device

Yes No No No
sagemaker:feature-group

  • AWS::SageMaker::FeatureGroup

Yes No Yes Yes
sagemaker:artifact

  • N/A

Yes Yes No No
sagemaker:studio-lifecycle-config

  • AWS::SageMaker::StudioLifecycleConfig

Yes No Yes Yes
sagemaker:cluster-scheduler-config

  • N/A

Yes No No No
sagemaker:automl-job

  • N/A

Yes No No No
sagemaker:app

  • AWS::SageMaker::App

Yes No Yes Yes
sagemaker:space

  • AWS::SageMaker::Space

Yes No Yes Yes
sagemaker:inference-component

  • AWS::SageMaker::InferenceComponent

Yes No Yes Yes
sagemaker:endpoint

  • AWS::SageMaker::Endpoint

Yes No Yes Yes
sagemaker:workteam

  • AWS::SageMaker::Workteam

Yes No Yes Yes
sagemaker:inference-experiment

  • AWS::SageMaker::InferenceExperiment

Yes No Yes Yes
sagemaker:optimization-job

  • N/A

Yes No No No
sagemaker:algorithm

  • N/A

Yes No No No
sagemaker:pipeline/execution

  • N/A

Yes No No No
sagemaker:pipeline-execution

  • N/A

Yes No No No
sagemaker:project

  • AWS::SageMaker::Project

Yes Yes Yes Yes
sagemaker:model-package-group

  • AWS::SageMaker::ModelPackageGroup

Yes Yes Yes Yes
sagemaker:labeling-job

  • N/A

Yes No No No
sagemaker:edge-deployment

  • N/A

Yes No No No
sagemaker:training-job

  • N/A

Yes Yes No No
sagemaker:compute-quota

  • N/A

Yes No No No
sagemaker:reserved-capacity

  • N/A

Yes No No No
sagemaker:context

  • N/A

Yes Yes No No
sagemaker:partner-app

  • AWS::SageMaker::PartnerApp

Yes No No No
sagemaker:experiment-trial

  • N/A

Yes No No No
sagemaker:hub

  • N/A

Yes No No No
sagemaker:flow-definition

  • N/A

Yes Yes No No
sagemaker:pipeline

  • AWS::SageMaker::Pipeline

Yes Yes Yes Yes
sagemaker:lineage-group

  • N/A

Yes No No No
sagemaker:inference-recommendations-job

  • N/A

Yes No No No
sagemaker:device-fleet

  • AWS::SageMaker::DeviceFleet

Yes No No No
sagemaker:hub-content

  • N/A

Yes No No No
sagemaker:experiment-trial-component

  • N/A

Yes No No No
sagemaker:endpoint-config

  • AWS::SageMaker::EndpointConfig

Yes No Yes Yes
sagemaker:processing-job

  • AWS::SageMaker::ProcessingJob

Yes Yes Yes Yes
sagemaker:human-task-ui

  • N/A

Yes Yes No No
Amazon SageMaker geospatial capabilities [sagemaker-geospatial] sagemaker-geospatial:raster-data-collection

  • N/A

Yes No No No
sagemaker-geospatial:earth-observation-job

  • N/A

Yes No No No
sagemaker-geospatial:vector-enrichment-job

  • N/A

Yes No No No
Amazon Security Lake [securitylake] securitylake:data-lake

  • AWS::SecurityLake::DataLake

Yes Yes No No
securitylake:subscriber

  • AWS::SecurityLake::Subscriber

Yes Yes No No
securitylake:ALL_SUPPORTED

  • N/A

No Yes No No
Amazon Simple Workflow Service [swf] swf:domain

  • N/A

Yes No No No
Amazon Textract [textract] textract:adapters

  • N/A

Yes Yes No No
textract:ALL_SUPPORTED

  • N/A

No Yes No No
Amazon Timestream InfluxDB [timestream-influxdb] timestream-influxdb:db-instance

  • N/A

Yes No No No
Amazon Timestream [timestream] timestream:database

  • AWS::Timestream::Database

Yes No Yes Yes
timestream:database/table

  • AWS::Timestream::Table

Yes No Yes Yes
timestream:scheduled-query

  • AWS::Timestream::ScheduledQuery

Yes No Yes Yes
Amazon Transcribe [transcribe] transcribe:vocabulary-filter

  • N/A

Yes No No No
transcribe:vocabulary

  • N/A

Yes No No No
transcribe:transcription-job

  • N/A

Yes No No No
transcribe:medical-transcription-job

  • N/A

Yes No No No
transcribe:medical-vocabulary

  • N/A

Yes No No No
transcribe:medical-scribe-job

  • N/A

Yes No No No
transcribe:language-model

  • N/A

Yes No No No
Amazon Translate [translate] translate:parallel-data

  • N/A

Yes No No No
translate:terminology

  • N/A

Yes No No No
Amazon VPC Lattice [vpc-lattice] vpc-lattice:service/listener/rule

  • AWS::VpcLattice::Rule

Yes No Yes Yes
vpc-lattice:servicenetworkserviceassociation

  • AWS::VpcLattice::ServiceNetworkServiceAssociation

Yes No Yes Yes
vpc-lattice:service/listener

  • AWS::VpcLattice::Listener

Yes No Yes Yes
vpc-lattice:accesslogsubscription

  • AWS::VpcLattice::AccessLogSubscription

Yes No Yes Yes
vpc-lattice:servicenetworkresourceassociation

  • AWS::VpcLattice::ServiceNetworkResourceAssociation

Yes No No No
vpc-lattice:domainverification

  • N/A

Yes No No No
vpc-lattice:resourceendpointassociation

  • N/A

Yes No No No
vpc-lattice:servicenetworkvpcassociation

  • AWS::VpcLattice::ServiceNetworkVpcAssociation

Yes No Yes Yes
vpc-lattice:service

  • AWS::VpcLattice::Service

Yes No Yes Yes
vpc-lattice:servicenetwork

  • AWS::VpcLattice::ServiceNetwork

Yes No Yes Yes
vpc-lattice:resourceconfiguration

  • AWS::VpcLattice::ResourceConfiguration

Yes No No No
vpc-lattice:targetgroup

  • AWS::VpcLattice::TargetGroup

Yes No Yes Yes
vpc-lattice:resourcegateway

  • AWS::VpcLattice::ResourceGateway

Yes No No No
Amazon Verified Permissions [verifiedpermissions] verifiedpermissions:policy-store

  • AWS::VerifiedPermissions::PolicyStore

Yes No Yes Yes
Amazon WorkLink [worklink] worklink:fleet

  • N/A

Yes Yes No No
Amazon WorkMail [workmail] workmail:organization

  • N/A

Yes No No No
Amazon WorkSpaces Secure Browser [workspaces-web] workspaces-web:portal

  • AWS::WorkSpacesWeb::Portal

Yes No Yes Yes
workspaces-web:ipaccesssettings

  • AWS::WorkSpacesWeb::IpAccessSettings

Yes No Yes Yes
workspaces-web:useraccessloggingsettings

  • AWS::WorkSpacesWeb::UserAccessLoggingSettings

Yes No Yes Yes
workspaces-web:dataprotectionsettings

  • AWS::WorkSpacesWeb::DataProtectionSettings

Yes No No No
workspaces-web:sessionlogger

  • AWS::WorkSpacesWeb::SessionLogger

Yes No No No
workspaces-web:usersettings

  • AWS::WorkSpacesWeb::UserSettings

Yes No Yes Yes
workspaces-web:browsersettings

  • AWS::WorkSpacesWeb::BrowserSettings

Yes No Yes Yes
workspaces-web:identityprovider

  • AWS::WorkSpacesWeb::IdentityProvider

Yes No No No
workspaces-web:networksettings

  • AWS::WorkSpacesWeb::NetworkSettings

Yes No Yes Yes
workspaces-web:truststore

  • AWS::WorkSpacesWeb::TrustStore

Yes No Yes Yes
Amazon WorkSpaces Secure Browser [workspacesweb] workspacesweb:identityprovider

  • AWS::WorkSpacesWeb::IdentityProvider

Yes No No No
Amazon WorkSpaces Thin Client [thinclient] thinclient:environment

  • AWS::WorkSpacesThinClient::Environment

Yes No No No
thinclient:environments

  • AWS::WorkSpacesThinClient::Environment

Yes No No No
thinclient:device

  • N/A

Yes No No No
thinclient:devices

  • N/A

Yes No No No
thinclient:softwareset

  • N/A

Yes No No No
Amazon WorkSpaces [workspaces] workspaces:directory

  • N/A

Yes Yes No No
workspaces:workspace

  • AWS::WorkSpaces::Workspace

Yes Yes No No
workspaces:workspacebundle

  • N/A

Yes Yes No No
workspaces:workspaceimage

  • N/A

Yes Yes No No
workspaces:connectionalias

  • AWS::WorkSpaces::ConnectionAlias

Yes Yes Yes Yes
workspaces:workspacespool

  • AWS::WorkSpaces::WorkspacesPool

Yes No Yes Yes
workspaces:workspaceipgroup

  • N/A

Yes Yes No No
workspaces:ALL_SUPPORTED

  • N/A

No Yes Yes Yes
Deprecated - AWS IoT 1-Click [iot1click] iot1click:devices

  • N/A

Yes No No No
iot1click:projects

  • N/A

Yes No No No
Deprecated AWS IoT RoboRunner [iotroborunner] iotroborunner:site

  • N/A

Yes No No No
iotroborunner:site/worker-fleet

  • N/A

Yes No No No
Multi-party approval [mpa] mpa:approval-team

  • AWS::MPA::ApprovalTeam

Yes No No No
mpa:identity-source

  • AWS::MPA::IdentitySource

Yes No No No
Service Quotas [servicequotas] servicequotas:quota

  • N/A

Yes No No No
route53globalresolver [route53globalresolver] route53globalresolver:firewall-domain-list

  • N/A

Yes No No No