Resource types you can search for with Resource Explorer - Amazon Resource Explorer
Supported services and resource typesProgrammatically accessing the list of supported resource typesResource types that appear as other types
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Resource types you can search for with Resource Explorer

The following tables list the resource types that are supported for searching in Amazon Resource Explorer.

Notes

  • Some resource types are identified by Amazon resource name (ARN) strings that share a common format with another resource type. When this happens, Resource Explorer can report such resources as that other resource type. For list of resource types affected by this issue, see Resource types that appear as other types.

  • At this time, tags attached to Amazon Identity and Access Management (IAM) resources, such as roles or users, can't be used for searching.

Supported services and resource types

Amazon CloudFront

  • cloudfront:cache-policy

  • cloudfront:distribution

  • cloudfront:function

  • cloudfront:origin-access-identity

  • cloudfront:origin-request-policy

  • cloudfront:realtime-log-config

  • cloudfront:response-headers-policy

Amazon CloudWatch

  • cloudwatch:alarm

  • cloudwatch:dashboard

  • cloudwatch:insight-rule

  • cloudwatch:metric-stream

Amazon CloudWatch Logs

  • logs:destination

  • logs:log-group

Amazon DynamoDB

  • dynamodb:table

Amazon ElastiCache

  • elasticache:cluster

  • elasticache:globalreplicationgroup

  • elasticache:parametergroup

  • elasticache:replicationgroup

  • elasticache:reserved-instance

  • elasticache:snapshot

  • elasticache:subnetgroup

  • elasticache:user

  • elasticache:usergroup

Amazon Elastic Compute Cloud (Amazon EC2)

  • ec2:capacity-reservation

  • ec2:capacity-reservation-fleet

  • ec2:client-vpn-endpoint

  • ec2:customer-gateway

  • ec2:dedicated-host

  • ec2:dhcp-options

  • ec2:egress-only-internet-gateway

  • ec2:elastic-gpu

  • ec2:elastic-ip

  • ec2:fleet

  • ec2:fpga-image

  • ec2:host-reservation

  • ec2:image

  • ec2:instance

  • ec2:instance-event-window

  • ec2:internet-gateway

  • ec2:ipam

  • ec2:ipam-pool

  • ec2:ipam-scope

  • ec2:ipv4pool-ec2

  • ec2:key-pair

  • ec2:launch-template

  • ec2:natgateway

  • ec2:network-acl

  • ec2:network-insights-access-scope

  • ec2:network-insights-access-scope-analysis

  • ec2:network-insights-analysis

  • ec2:network-insights-path

  • ec2:network-interface

  • ec2:placement-group

  • ec2:prefix-list

  • ec2:reserved-instances

  • ec2:route-table

  • ec2:security-group

  • ec2:security-group-rule

  • ec2:snapshot

  • ec2:spot-fleet-request

  • ec2:spot-instances-request

  • ec2:subnet

  • ec2:subnet-cidr-reservation

  • ec2:traffic-mirror-filter

  • ec2:traffic-mirror-filter-rule

  • ec2:traffic-mirror-session

  • ec2:traffic-mirror-target

  • ec2:transit-gateway

  • ec2:transit-gateway-attachment

  • ec2:transit-gateway-connect-peer

  • ec2:transit-gateway-multicast-domain

  • ec2:transit-gateway-policy-table

  • ec2:transit-gateway-route-table

  • ec2:volume

  • ec2:vpc

  • ec2:vpc-endpoint

  • ec2:vpc-flow-log

  • ec2:vpc-peering-connection

  • ec2:vpn-connection

  • ec2:vpn-gateway

Amazon Elastic Container Service

  • ecs:cluster

  • ecs:container-instance

  • ecs:service

  • ecs:task

  • ecs:task-definition

  • ecs:task-set

Elastic Load Balancing

  • elasticloadbalancing:listener

  • elasticloadbalancing:listener-rule

  • elasticloadbalancing:listener-rule/app

  • elasticloadbalancing:listener/app

  • elasticloadbalancing:listener/net

  • elasticloadbalancing:loadbalancer

  • elasticloadbalancing:loadbalancer/app

  • elasticloadbalancing:loadbalancer/net

  • elasticloadbalancing:targetgroup

Amazon Identity and Access Management

  • iam:group

  • iam:instance-profile

  • iam:oidc-provider

  • iam:policy

  • iam:role

  • iam:saml-provider

  • iam:server-certificate

  • iam:user

Amazon Kinesis

  • kinesis:stream

Amazon Lambda

  • lambda:code-signing-config

  • lambda:event-source-mapping

  • lambda:function

Amazon OpenSearch Service

  • es:domain

Amazon Redshift

  • redshift:cluster

  • redshift:eventsubscription

  • redshift:parametergroup

  • redshift:snapshot

  • redshift:snapshotcopygrant

  • redshift:snapshotschedule

  • redshift:subnetgroup

  • redshift:usagelimit

Amazon Relational Database Service (Amazon RDS)

  • rds:auto-backup

  • rds:cev

  • rds:cluster

  • rds:cluster-endpoint

  • rds:cluster-pg

  • rds:cluster-snapshot

  • rds:db

  • rds:db-proxy

  • rds:db-proxy-endpoint

  • rds:es

  • rds:global-cluster

  • rds:og

  • rds:pg

  • rds:ri

  • rds:secgrp

  • rds:snapshot

  • rds:subgrp

Amazon Resource Explorer

  • resource-explorer-2:index

  • resource-explorer-2:view

Amazon Service Catalog

  • servicecatalog:applications

  • servicecatalog:attribute-groups

Amazon Simple Notification Service

  • sns:topic

Amazon Simple Queue Service

  • sqs:queue

Amazon Simple Storage Service (Amazon S3)

  • s3:accesspoint

  • s3:bucket

  • s3:storage-lens

Amazon Systems Manager

  • ssm:association

  • ssm:automation-execution

  • ssm:document

  • ssm:maintenancewindow

  • ssm:managed-instance

  • ssm:parameter

  • ssm:patchbaseline

  • ssm:windowtarget

  • ssm:windowtask

Programmatically accessing the list of supported resource types

To access the list of supported resource types from code, you can invoke the ListSupportedResourceTypes operation from any Amazon SDK.

For example, you can run the list-supported-resource-types Amazon Command Line Interface (Amazon CLI) command, as shown in the following example.

$ aws resource-explorer-2 list-supported-resource-types
{
    "ResourceTypes": [
        {
            "ResourceType": "acm-pca:certificate-authority",
            "Service": "acm-pca"
        },
        {
            "ResourceType": "airflow:environment",
            "Service": "airflow"
        },
        {
            "ResourceType": "amplify:branches",
            "Service": "amplify"
        },
... truncated for brevity ...

Resource types that appear as other types

Some resource types are identified by Amazon resource name (ARN) strings that share a common format with another resource type. When this happens, Resource Explorer can report such resources as that other resource type. This affects the resource types in the following table.

Actual resource type Reported as resource type

ec2:securitygroupegress

ec2:securitygroupingress

ec2:security-group-rule

elasticloadbalancingv2:loadbalancer

elasticloadbalancing:loadbalancer

docdb:dbcluster

neptune:dbcluster

rds:dbcluster

rds:cluster

docdb:dbclusterparametergroup

neptune:dbclusterparametergroup

rds:dbclusterparametergroup

rds:cluster-pg

docdb:clustersnapshot

neptune:dbclustersnapshot

rds:clustersnapshot

rds:cluster-snapshot

docdb:dbinstance

neptune:dbinstance

rds:dbinstance

rds:db

docdb:eventsubscription

neptune:eventsubscription

rds:eventsubscription

rds:es

docdb:globalcluster

rds:globalcluster

rds:global-cluster

neptune:dbparametergroup

rds:dbparametergroup

rds:pg

docdb:dbsubnetgroup

neptune:dbsubnetgroup

rds:dbsubnetgroup

rds:subgrp