Viewing resource details
In the Resource Explorer console, you can view the details of a selected resource, including information about the resource provided by other Amazon services. To view a resource's details, open the Resources page, and select the checkbox of the desired resource. Review each of the tabs to learn more about the resource.
Overview
The Overview tab displays basic information about the selected resource, including the Resource type, Amazon Resource Name (ARN), the Amazon Web Services Region where the resource resides, the Owner account, and the Last indexed date and time stamp. For some resource types, this tab also displays resource properties sourced from the Amazon Cloud Control API, like public access settings for Amazon S3 buckets or instance state for Amazon EC2 instances. This tab also includes a link to the resource's native console.
If additional Amazon Web Services services are enabled in your Amazon Web Services account, the Overview tab also displays the following information:
-
Amazon Security Hub CSPM — This integration displays a total number of Security findings and a total number of Critical and High ranked findings. If available, choosing the Total findings link directs you to the Security Hub CSPM console.
-
Amazon Cost Explorer — This integration displays the resource's Cost over the past 14 days. Choosing the cost value link directs you to the resource's cost details page in the Amazon Cost Explorer console.
-
Amazon Config — This integration displays the resource's Compliance status with rules from Amazon Config. Choosing the compliance status link directs you to the resource details Compliance tab.
Minimum permissions
To view all of the available resource details in this tab, which includes details from other Amazon Web Services services, you must have the following permissions:
-
Action:
ce:GetCostAndUsageWithResources -
Action:
cloudformation:GetResource -
Action:
config:DescribeComplianceByResource -
Action:
config:DescribeConfigurationRecorders -
Action:
config:DescribeConfigurationRecorderStatus -
Action:
config:GetComplianceDetailsByResource -
Action:
securityhub:GetAdhocInsightResults
Relationships
The Relationships tab displays the selected resource's single-level relationships to other resources. This tab only displays relationships for supported resource types.
Minimum permissions
To view resource relationships in this tab, you must have at least read-only permissions for all
resource types and underlying Amazon Web Services services you want to visualize. Resource Explorer recommends using
the ReadOnlyAccess general Amazon managed policy.
You can attach this policy to your users, groups, and roles to provide read-only access to
Amazon Web Services services and resources.
Timeline
If you have Amazon Config enabled in your account, the Timeline tab displays a resource's history of events over the past 60 days. You can filter by Configuration events, Compliance events, or CloudTrail Events.
You can learn more about Viewing compliance history timeline for resources and rules in the Amazon Config developer guide.
For accounts without Amazon Config enabled, the Timeline tab displays Amazon CloudTrail events. You can learn more about Understanding CloudTrail events in the Amazon CloudTrail User Guide.
Minimum permissions
To view a resource's event history in this tab, you must have the following permissions:
-
Action:
config:DescribeConfigurationRecorderStatus -
Action:
cloudtrail:LookupEvents -
Action:
config:GetResourceConfigHistory
Compliance
If your account already has Amazon Config enabled, but does not include any rules, you can choose Add rule to create new rules in the Amazon Config console.
If the selected resource does include rules, this tab displays the resource's Compliant and Non-compliant rules, including any known fixes for non-compliant rules. Choosing an individual rule directs you to the rule in the Amazon Config console.
You can learn more about Evaluating resources with Amazon Config rules in the Amazon Config developer guide.
Minimum permissions
To view resource details in this tab, you must have Amazon Config enabled in your Amazon Web Services account and have the following permissions:
-
Action:
config:DescribeComplianceByResource -
Action:
config:DescribeConfigurationRecorders -
Action:
config:DescribeConfigurationRecorderStatus -
Action:
config:DescribeRemediationConfigurations -
Action:
config:GetComplianceDetailsByResource
Resource shares
The Resource shares tab displays any resource shares that include this resource. Use Amazon Resource Access Manager to create resource shares that make the resource available to other individual Amazon accounts, or to the accounts in an organization or an organizational unit. Review Sharing your Amazon resources in the Amazon Resource Access Manager user guide for more information.
Minimum permissions
To view resource shares in this tab, you must have the following permissions:
-
Action:
ram:ListResources -
Action:
ram:GetResourceShares
Tags
The Tags tab displays a list of tags attached to the selected resource. Each tag contains a key name and an associated value that you can use to categorize your resources.
Minimum permissions
To view a resource's tags in this tab, you must have the following permissions:
-
Action:
tag:GetResources
Additional properties
The Additional properties tab displays resource details obtained by Amazon Cloud Control API, including the availability zone, block device mappings, and more.
Minimum permissions
To view a resource's additional properties in this tab, you must have the following permissions:
-
Action:
cloudformation:GetResource