View a markdown version of this page

Resource types you can search for with Resource Explorer - Amazon Resource Explorer
Supported services and resource typesProgrammatically accessing the list of supported resource typesResource types that appear as other types
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Resource types you can search for with Resource Explorer

Resource Explorer supports resource types across numerous Amazon services. Resource discovery happens automatically when you access Resource Explorer with appropriate permissions. If you have, at minimum, the permissions in the AWSResourceExplorerReadOnlyAccess managed policy, you can immediately search all tagged resources and supported untagged resources created after the immediate resource discovery release. For complete resource discovery with automatic updates, you'll also need the iam:CreateServiceLinkedRole permission (included in the AWSResourceExplorerFullAccess managed policy). After the service-linked role is created in your account by any user, subsequent users need only the permissions in the AWSResourceExplorerReadOnlyAccess managed policy to get complete results.

Some resource types are identified by Amazon resource name (ARN) strings that share a common format with another resource type. When this happens, Resource Explorer can report such resources as that other resource type. For list of resource types affected by this issue, see Resource types that appear as other types.

At this time, tags attached to Amazon Identity and Access Management (IAM) resources, such as roles or users, can't be used for searching.

If you have encrypted access to some of your resources, Resource Explorer is unable to discover them. You will not see these resources in your search results.

The following tables list the resource types that are supported for searching in Amazon Resource Explorer.

Note

As of May 20, 2026, Resource Explorer no longer supports the following resource types:

  • Amazon Inspector— inspector:target/template

  • Amazon Panorama— panorama:device

  • Amazon Panorama— panorama:package

As of May 15, 2026, Resource Explorer no longer supports the following resource types:

  • Amazon IoT Events— iotevents:alarmModel

  • Amazon IoT Events— iotevents:detectorModel

  • Amazon IoT Events— iotevents:input

As of February 10, 2026, Resource Explorer no longer supports the following resource types:

  • Amazon Chime— chime:media-pipeline

As of February 10, 2026, Resource Explorer no longer supports the following resource types:

  • Amazon Location Service— geo:map

  • Amazon Location Service— geo:place-index

  • Amazon Location Service— geo:tracker

As of December 5, 2025, Resource Explorer no longer supports the following resource types:

  • Amazon IoT Analytics— iotanalytics:channel

  • Amazon IoT Analytics— iotanalytics:dataset

  • Amazon IoT Analytics— iotanalytics:datastore

  • Amazon IoT Analytics— iotanalytics:pipeline

As of November 21, 2025, Resource Explorer no longer supports the following resource types:

  • Amazon IoT FleetWise— iotfleethub:application

As of November 3, 2025, Resource Explorer no longer supports the following resource types:

  • Amazon Lookout for Metrics— lookoutmetrics:Alert

  • Amazon Lookout for Metrics— lookoutmetrics:AnomalyDetector

  • Amazon Lookout for Vision— lookoutvision:project

As of October 13, 2025, Resource Explorer no longer supports the following resource types:

  • Amazon CloudWatch Evidently— evidently:project

  • Amazon CloudWatch Evidently— evidently:project/experiment

  • Amazon CloudWatch Evidently— evidently:project/feature

  • Amazon CloudWatch Evidently— evidently:project/launch

As of October 1, 2025, Resource Explorer no longer supports the following resource types:

  • Amazon Quantum Ledger Database (Amazon QLDB) — qldb:ledger

  • Amazon Quantum Ledger Database (Amazon QLDB) — qldb:stream

As of July 9, 2024, Resource Explorer no longer supports the following resource types:

  • Amazon Elastic Container Service — ecs:task

  • Amazon Systems Manager — ssm:automation-execution

  • Amazon Systems Manager — ssm:patchbaseline

Supported services and resource types

Supported Amazon Web Services services

Amazon API Gateway

  • apigateway:apis

  • apigateway:apis/integrations

  • apigateway:apis/routes

  • apigateway:apis/stages

  • apigateway:restapis

  • apigateway:restapis/deployments

  • apigateway:restapis/resources

  • apigateway:restapis/resources/methods

  • apigateway:restapis/stages

  • apigateway:vpclinks

Amazon Direct Connect

  • directconnect:dx-gateway

Amazon Partner Network

  • partnercentral:catalog/engagement

  • partnercentral:catalog/engagement-invitation

  • partnercentral:catalog/opportunity

  • partnercentral:catalog/resource-snapshot-job

  • partnercentral:resourcesnapshot

Amazon Shield

  • shield:protection

  • shield:protection-group

Amazon Systems Manager Incident Manager

  • ssm-incidents:response-plan

Amazon WAFV2

  • wafv2:ipset

  • wafv2:regexpatternset

  • wafv2:rulegroup

  • wafv2:webacl

Amazon Macie

  • macie2:allow-list

  • macie2:custom-data-identifier

  • macie2:findings-filter

  • macie2:member

OpenSearch Service Serverless Service

  • aoss:collection

Amazon S3 Express

  • s3express:bucket

Amazon VPC Lattice

  • vpc-lattice:service

  • vpc-lattice:service/listener

  • vpc-lattice:servicenetwork

  • vpc-lattice:servicenetworkserviceassociation

  • vpc-lattice:targetgroup

Amazon Verified Permissions

  • verifiedpermissions:policy-store

Amazon WorkSpaces Web

  • workspaces-web:portal

Amazon Amplify

  • amplify:apps

  • amplify:apps/branches

  • amplify:apps/domains

Amazon App Runner

  • apprunner:autoscalingconfiguration

  • apprunner:connection

  • apprunner:service

  • apprunner:vpcconnector

Amazon AppConfig

  • appconfig:application

  • appconfig:application/environment

  • appconfig:deploymentstrategy

  • appconfig:extensionassociation

Amazon AppFlow

  • appflow:flow

AppIntegrations

  • app-integrations:application

  • app-integrations:event-integration

Amazon App Mesh

  • appmesh:mesh

  • appmesh:mesh/virtualGateway

  • appmesh:mesh/virtualGateway/gatewayRoute

  • appmesh:mesh/virtualNode

  • appmesh:mesh/virtualRouter

  • appmesh:mesh/virtualRouter/route

  • appmesh:mesh/virtualService

Amazon AppStream

  • appstream:app-block

  • appstream:application

  • appstream:fleet

  • appstream:image-builder

  • appstream:stack

Amazon AppSync

  • appsync:apis

Amazon Application Discovery Service

  • ds:directory

Amazon Application Recovery Controller (ARC)

  • route53-recovery-control:cluster

  • route53-recovery-control:controlpanel/routingcontrol

  • route53-recovery-control:controlpanel/safetyrule

Amazon Athena

  • athena:datacatalog

  • athena:workgroup

Amazon Audit Manager

  • auditmanager:assessment

Amazon Backup

  • backup:backup-plan

  • backup:backup-vault

  • backup:report-plan

Amazon Backup gateway

  • backup-gateway:hypervisor

Amazon Batch

  • batch:compute-environment

  • batch:job-definition

  • batch:job-queue

  • batch:scheduling-policy

Amazon Bedrock

  • bedrock:agent

  • bedrock:agent-alias

  • bedrock:application-inference-profile

  • bedrock:data-automation-project

  • bedrock:flow

  • bedrock:flow/alias

  • bedrock:guardrail

  • bedrock:knowledge-base

  • bedrock:prompt

  • bedrock:prompt-router

Amazon Certificate Manager

  • acm:certificate

Amazon Chime

  • chime:app-instance

  • chime:app-instance/bot

  • chime:app-instance/user

  • chime:media-insights-pipeline-configuration

  • chime:media-pipeline-kinesis-video-stream-pool

  • chime:sma

  • chime:vc

Amazon Cloud Map

  • servicediscovery:service

Amazon Cloud9

  • cloud9:environment

Amazon CloudFormation

  • cloudformation:stack

  • cloudformation:stackset

Amazon CloudFront

  • cloudfront:cache-policy

  • cloudfront:continuous-deployment-policy

  • cloudfront:distribution

  • cloudfront:field-level-encryption-config

  • cloudfront:field-level-encryption-profile

  • cloudfront:function

  • cloudfront:origin-access-control

  • cloudfront:origin-access-identity

  • cloudfront:origin-request-policy

  • cloudfront:realtime-log-config

  • cloudfront:response-headers-policy

Amazon CloudTrail

  • cloudtrail:channel

  • cloudtrail:dashboard

  • cloudtrail:eventdatastore

  • cloudtrail:trail

Amazon CloudWatch

  • cloudwatch:alarm

  • cloudwatch:dashboard

  • cloudwatch:insight-rule

  • cloudwatch:metric-stream

Amazon CloudWatch Logs

  • logs:destination

  • logs:log-group

Amazon CloudWatch Observability Access Manager

  • oam:sink

Amazon CloudWatch RUM

  • rum:appmonitor

Amazon CloudWatch Synthetics

  • synthetics:canary

  • synthetics:group

Amazon CodeArtifact

  • codeartifact:domain

  • codeartifact:repository

Amazon CodeBuild

  • codebuild:project

Amazon CodeCommit

  • codecommit:repository

Amazon CodeConnections

  • codeconnections:connection

Amazon CodeDeploy

  • codedeploy:application

  • codedeploy:deploymentconfig

Amazon CodeGuru Profiler

  • codeguru-profiler:profilingGroup

Amazon CodeGuru Reviewer

  • codeguru-reviewer:association

Amazon CodePipeline

  • codepipeline:pipeline

  • codepipeline:webhook

AWS CodeStar Connections

  • codestar-connections:connection

  • codestar-connections:host

Amazon Cognito Identity

  • cognito-identity:identitypool

Amazon Cognito IdentityPool

  • cognito-idp:userpool

Amazon Comprehend

  • comprehend:document-classifier

  • comprehend:entity-recognizer

  • comprehend:flywheel

Amazon Config

  • config:config-rule

Amazon Connect Customer

  • connect:instance

  • connect:instance/agent

  • connect:instance/operating-hours

  • connect:instance/queue

  • connect:instance/rule

  • connect:instance/task-template

  • connect:instance/transfer-destination

  • connect:phone-number

Amazon Connect Customer Customer Profiles

  • profile:domains

  • profile:domains/integrations

  • profile:domains/object-types

Connect Customer Wisdom

  • wisdom:assistant

  • wisdom:association

  • wisdom:content

  • wisdom:knowledge-base

Amazon Cost Explorer

  • ce:anomalymonitor

  • ce:anomalysubscription

Amazon Data Exchange

  • dataexchange:data-sets

  • dataexchange:data-sets/revisions

Amazon Data Pipeline

  • datapipeline:pipeline

Amazon DataSync

  • datasync:location

  • datasync:task

Amazon Database Migration Service

  • dms:cert

  • dms:endpoint

  • dms:es

  • dms:rep

  • dms:subgrp

  • dms:task

Amazon Detective

  • detective:graph

Amazon Device Farm

  • devicefarm:instanceprofile

  • devicefarm:project

  • devicefarm:testgrid-project

Amazon DynamoDB

  • dynamodb:table

DynamoDB Accelerator

  • dax:cache

Amazon EC2 Auto Scaling

  • autoscaling:autoScalingGroup

EC2 Image Builder

  • imagebuilder:component

  • imagebuilder:container-recipe

  • imagebuilder:distribution-configuration

  • imagebuilder:image

  • imagebuilder:image-pipeline

  • imagebuilder:image-recipe

  • imagebuilder:infrastructure-configuration

Amazon EMR

  • elasticmapreduce:cluster

Amazon EMR Serverless

  • emr-serverless:applications

Amazon EMR on EKS

  • emr-containers:jobtemplates

  • emr-containers:securityconfigurations

  • emr-containers:virtualclusters

  • emr-containers:virtualclusters/endpoints

Amazon ElastiCache

  • elasticache:cluster

  • elasticache:globalreplicationgroup

  • elasticache:parametergroup

  • elasticache:replicationgroup

  • elasticache:reserved-instance

  • elasticache:snapshot

  • elasticache:subnetgroup

  • elasticache:user

  • elasticache:usergroup

Amazon Elastic Beanstalk

  • elasticbeanstalk:application

  • elasticbeanstalk:applicationversion

  • elasticbeanstalk:configurationtemplate

  • elasticbeanstalk:environment

Amazon Elastic Compute Cloud (Amazon EC2)

  • ec2:capacity-reservation

  • ec2:capacity-reservation-fleet

  • ec2:carrier-gateway

  • ec2:client-vpn-endpoint

  • ec2:customer-gateway

  • ec2:dedicated-host

  • ec2:dhcp-options

  • ec2:egress-only-internet-gateway

  • ec2:elastic-ip

  • ec2:fleet

  • ec2:fpga-image

  • ec2:host-reservation

  • ec2:image

  • ec2:instance

  • ec2:instance-event-window

  • ec2:internet-gateway

  • ec2:ipam

  • ec2:ipam-pool

  • ec2:ipam-resource-discovery

  • ec2:ipam-resource-discovery-association

  • ec2:ipam-scope

  • ec2:ipv4pool-ec2

  • ec2:key-pair

  • ec2:launch-template

  • ec2:natgateway

  • ec2:network-acl

  • ec2:network-insights-access-scope

  • ec2:network-insights-access-scope-analysis

  • ec2:network-insights-analysis

  • ec2:network-insights-path

  • ec2:network-interface

  • ec2:placement-group

  • ec2:prefix-list

  • ec2:reserved-instances

  • ec2:route-table

  • ec2:security-group

  • ec2:security-group-rule

  • ec2:snapshot

  • ec2:spot-fleet-request

  • ec2:spot-instances-request

  • ec2:subnet

  • ec2:subnet-cidr-reservation

  • ec2:traffic-mirror-filter

  • ec2:traffic-mirror-filter-rule

  • ec2:traffic-mirror-session

  • ec2:traffic-mirror-target

  • ec2:transit-gateway

  • ec2:transit-gateway-attachment

  • ec2:transit-gateway-connect-peer

  • ec2:transit-gateway-multicast-domain

  • ec2:transit-gateway-policy-table

  • ec2:transit-gateway-route-table

  • ec2:transit-gateway-route-table-announcement

  • ec2:verified-access-endpoint

  • ec2:verified-access-group

  • ec2:verified-access-instance

  • ec2:verified-access-trust-provider

  • ec2:volume

  • ec2:vpc

  • ec2:vpc-endpoint

  • ec2:vpc-flow-log

  • ec2:vpc-peering-connection

  • ec2:vpn-connection

  • ec2:vpn-gateway

Amazon Elastic Container Registry

  • ecr:repository

Amazon Elastic Container Registry Public

  • ecr-public:repository

Amazon Elastic Container Service

  • ecs:capacity-provider

  • ecs:cluster

  • ecs:container-instance

  • ecs:service

  • ecs:task-definition

  • ecs:task-set

Amazon Elastic File System

  • elasticfilesystem:access-point

  • elasticfilesystem:file-system

Amazon Elastic Kubernetes Service (Amazon EKS)

  • eks:cluster

  • eks:daemonset

  • eks:deployment

  • eks:eks-anywhere-subscription

  • eks:endpointslice

  • eks:ingress

  • eks:namespace

  • eks:persistentvolume

  • eks:podidentityassociation

  • eks:replicaset

  • eks:service

  • eks:statefulset

Elastic Load Balancing

  • elasticloadbalancing:listener-rule/app

  • elasticloadbalancing:listener/app

  • elasticloadbalancing:listener/gwy

  • elasticloadbalancing:listener/net

  • elasticloadbalancing:loadbalancer

  • elasticloadbalancing:loadbalancer/app

  • elasticloadbalancing:loadbalancer/gwy

  • elasticloadbalancing:loadbalancer/net

  • elasticloadbalancing:targetgroup

AWS Elemental MediaPackage

  • mediapackage:channels

  • mediapackage:origin_endpoints

AWS Elemental MediaPackage VoD

  • mediapackage-vod:assets

  • mediapackage-vod:packaging-configurations

  • mediapackage-vod:packaging-groups

AWS Elemental MediaStore

  • mediastore:container

AWS Elemental MediaTailor

  • mediatailor:channel

  • mediatailor:liveSource

  • mediatailor:playbackConfiguration

  • mediatailor:vodSource

Amazon CloudWatch Events

  • events:api-destination

  • events:archive

  • events:connection

  • events:endpoint

  • events:event-bus

  • events:rule

Amazon EventBridge Pipes

  • pipes:pipe

Amazon EventBridge Scheduler

  • scheduler:schedule-group

Amazon EventBridge Schemas

  • schemas:discoverer

Amazon FSx

  • fsx:backup

  • fsx:file-system

Amazon Fault Injection Service

  • fis:experiment

  • fis:experiment-template

Amazon FinSpace

  • finspace:environment

Firehose

  • firehose:deliverystream

Amazon Forecast

  • forecast:dataset

  • forecast:dataset-group

  • forecast:dataset-import-job

  • forecast:forecast

  • forecast:forecast-export-job

  • forecast:predictor

  • forecast:predictor-backtest-export-job

Amazon Fraud Detector

  • frauddetector:detector

  • frauddetector:entity-type

  • frauddetector:event-type

  • frauddetector:external-model

  • frauddetector:label

  • frauddetector:model

  • frauddetector:outcome

  • frauddetector:variable

Amazon GameLift Servers

  • gamelift:alias

  • gamelift:build

  • gamelift:gamesessionqueue

  • gamelift:location

  • gamelift:matchmakingconfiguration

  • gamelift:matchmakingruleset

  • gamelift:script

Amazon Global Accelerator

  • globalaccelerator:accelerator

  • globalaccelerator:accelerator/listener

  • globalaccelerator:accelerator/listener/endpoint-group

Amazon Glue

  • glue:crawler

  • glue:dataQualityRuleset

  • glue:database

  • glue:job

  • glue:mlTransform

  • glue:registry

  • glue:table

  • glue:trigger

Amazon Glue DataBrew

  • databrew:dataset

  • databrew:job

  • databrew:project

  • databrew:recipe

  • databrew:ruleset

  • databrew:schedule

Amazon Ground Station

  • groundstation:config

  • groundstation:dataflow-endpoint-group

  • groundstation:mission-profile

Amazon GuardDuty

  • guardduty:detector

  • guardduty:detector/filter

  • guardduty:detector/ipset

  • guardduty:detector/publishingDestination

  • guardduty:detector/threatintelset

  • guardduty:malware-protection-plan

Amazon HealthLake

  • healthlake:datastore/fhir

Amazon HealthOmics

  • omics:referenceStore

  • omics:runGroup

  • omics:workflow

IAM Access Analyzer

  • access-analyzer:analyzer

Amazon IVS

  • ivschat:logging-configuration

  • ivschat:room

Amazon Identity and Access Management

  • iam:group

  • iam:instance-profile

  • iam:mfa

  • iam:oidc-provider

  • iam:policy

  • iam:role

  • iam:saml-provider

  • iam:server-certificate

  • iam:user

Amazon Inspector

  • inspector2:filter

Amazon Interactive Video Service

  • ivs:channel

  • ivs:encoder-configuration

  • ivs:ingest-configuration

  • ivs:playback-key

  • ivs:playback-restriction-policy

  • ivs:recording-configuration

  • ivs:storage-configuration

  • ivs:stream-key

Amazon IoT

  • iot:authorizer

  • iot:billinggroup

  • iot:cacert

  • iot:cert

  • iot:fleetmetric

  • iot:job

  • iot:jobtemplate

  • iot:mitigationaction

  • iot:policy

  • iot:provisioningtemplate

  • iot:rolealias

  • iot:rule

  • iot:ruledestination

  • iot:scheduledaudit

  • iot:securityprofile

  • iot:thing

  • iot:thinggroup

  • iot:thingtype

Amazon IoT Core Device Advisor

  • iotdeviceadvisor:suitedefinition

Amazon IoT FleetWise

  • iotfleetwise:decoder-manifest

  • iotfleetwise:model-manifest

  • iotfleetwise:signal-catalog

  • iotfleetwise:vehicle

Amazon IoT Greengrass

  • greengrass:components:versions

  • greengrass:connectorsDefinition

  • greengrass:coresDefinition

  • greengrass:devicesDefinition

  • greengrass:functionsDefinition

  • greengrass:groups

  • greengrass:loggersDefinition

  • greengrass:resourcesDefinition

  • greengrass:subscriptionsDefinition

Amazon IoT SiteWise

  • iotsitewise:access-policy

  • iotsitewise:asset

  • iotsitewise:asset-model

  • iotsitewise:dashboard

  • iotsitewise:gateway

  • iotsitewise:portal

  • iotsitewise:project

Amazon IoT TwinMaker

  • iottwinmaker:workspace

  • iottwinmaker:workspace/component-type

  • iottwinmaker:workspace/entity

  • iottwinmaker:workspace/sync-job

Amazon IoT Wireless

  • iotwireless:Destination

  • iotwireless:DeviceProfile

  • iotwireless:FuotaTask

  • iotwireless:MulticastGroup

  • iotwireless:ServiceProfile

  • iotwireless:SidewalkAccount

  • iotwireless:WirelessDevice

  • iotwireless:WirelessGateway

  • iotwireless:WirelessGatewayTaskDefinition

Amazon Kendra

  • kendra:index

  • kendra:index/access-control-configuration

  • kendra:index/data-source

  • kendra:index/experience

  • kendra:index/faq

  • kendra:index/featured-results-set

  • kendra:index/query-suggestions-block-list

  • kendra:index/thesaurus

Amazon Key Management Service

  • kms:key

Amazon Kinesis

  • kinesis:stream

Amazon Managed Service for Apache Flink

  • kinesisanalytics:application

Amazon Kinesis Video Streams

  • kinesisvideo:channel

  • kinesisvideo:stream

Amazon Lambda

  • lambda:code-signing-config

  • lambda:event-source-mapping

  • lambda:function

  • lambda:function/version

  • lambda:layer/version

Amazon Lex

  • lex:bot

  • lex:bot-alias

Amazon License Manager

  • license-manager:grant

Amazon MQ

  • mq:broker

  • mq:configuration

Amazon Mainframe Modernization

  • m2:env

Amazon Managed Blockchain

  • managedblockchain:accessors

Amazon Managed Grafana

  • grafana:workspaces

Amazon Managed Service for Prometheus

  • aps:rulegroupsnamespace

  • aps:workspace

Amazon Managed Streaming for Apache Kafka

  • kafka:cluster

  • kafka:configuration

Amazon Managed Workflows for Apache Airflow

  • airflow:environment

Amazon MemoryDB

  • memorydb:acl

  • memorydb:cluster

  • memorydb:parametergroup

  • memorydb:snapshot

  • memorydb:subnetgroup

  • memorydb:user

Amazon Migration Hub Refactor Spaces

  • refactor-spaces:environment

  • refactor-spaces:environment/application

  • refactor-spaces:environment/application/route

  • refactor-spaces:environment/application/service

Amazon Mobile Targeting

  • mobiletargeting:apps/campaigns

  • mobiletargeting:apps/segments

  • mobiletargeting:templates/EMAIL

  • mobiletargeting:templates/PUSH

  • mobiletargeting:templates/SMS

Amazon Network Firewall

  • network-firewall:firewall

  • network-firewall:firewall-policy

  • network-firewall:stateful-rulegroup

  • network-firewall:stateless-rulegroup

Amazon Network Manager

  • networkmanager:attachment

  • networkmanager:core-network

  • networkmanager:device

  • networkmanager:global-network

  • networkmanager:link

Amazon OpenSearch Service

  • es:domain

Amazon Outposts

  • outposts:site

Amazon Personalize

  • personalize:dataset

  • personalize:dataset-group

  • personalize:schema

  • personalize:solution

Amazon Private Certificate Authority

  • acm-pca:certificate-authority

Amazon Proton

  • proton:environment-account-connection

  • proton:environment-template

  • proton:service-template

Amazon Quick

  • quicksight:dataset

  • quicksight:datasource

  • quicksight:template

  • quicksight:theme

Amazon Redshift

  • redshift:cluster

  • redshift:eventsubscription

  • redshift:hsmclientcertificate

  • redshift:parametergroup

  • redshift:snapshot

  • redshift:snapshotcopygrant

  • redshift:snapshotschedule

  • redshift:subnetgroup

  • redshift:usagelimit

Amazon Rekognition

  • rekognition:project

Amazon Relational Database Service (Amazon RDS)

  • rds:auto-backup

  • rds:cev

  • rds:cluster

  • rds:cluster-endpoint

  • rds:cluster-pg

  • rds:cluster-snapshot

  • rds:db

  • rds:db-proxy

  • rds:db-proxy-endpoint

  • rds:deployment

  • rds:es

  • rds:global-cluster

  • rds:og

  • rds:pg

  • rds:ri

  • rds:secgrp

  • rds:snapshot

  • rds:subgrp

Amazon Resilience Hub

  • resiliencehub:app

  • resiliencehub:resiliency-policy

Amazon Resource Access Manager

  • ram:permission

  • ram:resource-share

Amazon Resource Groups

  • resource-groups:group

Amazon Resource Explorer

  • resource-explorer-2:index

  • resource-explorer-2:view

Amazon Route 53

  • route53:domain

  • route53:healthcheck

  • route53:hostedzone

Amazon Route 53 Recovery Readiness

  • route53-recovery-readiness:cell

  • route53-recovery-readiness:readiness-check

  • route53-recovery-readiness:recovery-group

  • route53-recovery-readiness:resource-set

Amazon Route 53 Resolver

  • route53resolver:firewall-domain-list

  • route53resolver:firewall-rule-group

  • route53resolver:firewall-rule-group-association

  • route53resolver:resolver-endpoint

  • route53resolver:resolver-query-log-config

  • route53resolver:resolver-rule

Amazon Glacier

  • glacier:vaults

Amazon SageMaker AI

  • sagemaker:action

  • sagemaker:algorithm

  • sagemaker:app

  • sagemaker:app-image-config

  • sagemaker:artifact

  • sagemaker:cluster

  • sagemaker:code-repository

  • sagemaker:context

  • sagemaker:domain

  • sagemaker:endpoint

  • sagemaker:endpoint-config

  • sagemaker:experiment

  • sagemaker:experiment-trial

  • sagemaker:experiment-trial-component

  • sagemaker:feature-group

  • sagemaker:flow-definition

  • sagemaker:hub

  • sagemaker:hub-content

  • sagemaker:human-loop

  • sagemaker:human-task-ui

  • sagemaker:image

  • sagemaker:image-version

  • sagemaker:inference-component

  • sagemaker:inference-experiment

  • sagemaker:mlflow-tracking-server

  • sagemaker:model

  • sagemaker:model-card

  • sagemaker:model-package

  • sagemaker:model-package-group

  • sagemaker:monitoring-schedule

  • sagemaker:notebook-instance

  • sagemaker:notebook-instance-lifecycle-config

  • sagemaker:partner-app

  • sagemaker:pipeline

  • sagemaker:project

  • sagemaker:space

  • sagemaker:studio-lifecycle-config

  • sagemaker:user-profile

  • sagemaker:workforce

  • sagemaker:workteam

Amazon Secrets Manager

  • secretsmanager:secret

Amazon Service Catalog

  • servicecatalog:applications

  • servicecatalog:attribute-groups

Amazon Signer

  • signer:signing-profiles

Amazon Simple Email Service

  • ses:configuration-set

  • ses:contact-list

  • ses:dedicated-ip-pool

  • ses:identity

Amazon Simple Notification Service

  • sns:topic

Amazon Simple Queue Service

  • sqs:queue

Amazon Simple Storage Service (Amazon S3)

  • s3:accesspoint

  • s3:bucket

  • s3:multiregionaccesspoint

  • s3:storage-lens

  • s3:storage-lens-group

Amazon Step Functions States Language

  • states:activity

  • states:stateMachine

Storage Gateway

  • storagegateway:gateway

  • storagegateway:share

Amazon Systems Manager

  • ssm:association

  • ssm:document

  • ssm:maintenancewindow

  • ssm:managed-instance

  • ssm:parameter

  • ssm:resource-data-sync

  • ssm:session

  • ssm:windowtarget

  • ssm:windowtask

Amazon Transfer Family

  • transfer:agreement

  • transfer:certificate

  • transfer:connector

  • transfer:profile

  • transfer:server

  • transfer:user

  • transfer:workflow

Amazon WorkSpaces

  • workspaces:connectionalias

  • workspaces:workspace

Amazon Bedrock AgentCore

  • bedrock-agentcore:runtime

Amazon Budgets

  • budgets:budget

  • budgets:budget/action

Amazon Clean Rooms

  • cleanrooms:collaboration

Amazon Data Lifecycle Manager

  • dlm:policy

Amazon Kendra Intelligent Ranking

  • kendra-ranking:rescore-execution-plan

AWS Elemental MediaConnect

  • mediaconnect:flow

  • mediaconnect:gateway

Amazon Well-Architected Tool

  • wellarchitected:workload

Amazon X-Ray

  • xray:sampling-rule

Programmatically accessing the list of supported resource types

To access the list of supported resource types from code, you can invoke the ListSupportedResourceTypes operation from any Amazon SDK.

For example, you can run the list-supported-resource-types Amazon Command Line Interface (Amazon CLI) command, as shown in the following example.

$ aws resource-explorer-2 list-supported-resource-types
{
    "ResourceTypes": [
        {
            "ResourceType": "acm-pca:certificate-authority",
            "Service": "acm-pca"
        },
        {
            "ResourceType": "airflow:environment",
            "Service": "airflow"
        },
        {
            "ResourceType": "amplify:branches",
            "Service": "amplify"
        },
... truncated for brevity ...

Resource types that appear as other types

Some resource types are identified by Amazon resource name (ARN) strings that share a common format with another resource type. When this happens, Resource Explorer can report such resources as that other resource type. This affects the resource types in the following table.

Actual resource type Reported as resource type

ec2:securitygroupegress

ec2:securitygroupingress

ec2:security-group-rule

elasticloadbalancingv2:loadbalancer

elasticloadbalancing:loadbalancer

docdb:dbcluster

neptune:dbcluster

rds:dbcluster

rds:cluster

docdb:dbclusterparametergroup

neptune:dbclusterparametergroup

rds:dbclusterparametergroup

rds:cluster-pg

docdb:clustersnapshot

neptune:dbclustersnapshot

rds:clustersnapshot

rds:cluster-snapshot

docdb:dbinstance

neptune:dbinstance

rds:dbinstance

rds:db

docdb:eventsubscription

neptune:eventsubscription

rds:eventsubscription

rds:es

docdb:globalcluster

rds:globalcluster

rds:global-cluster

neptune:dbparametergroup

rds:dbparametergroup

rds:pg

docdb:dbsubnetgroup

neptune:dbsubnetgroup

rds:dbsubnetgroup

rds:subgrp