# Viewing resource details
<a name="viewing-resource-details"></a>

In the Resource Explorer console, you can view the details of a selected resource, including information about the resource provided by other Amazon services. To view a resource's details, open the **Resources** page, and select the checkbox of the desired resource. Review each of the tabs to learn more about the resource. 

**Topics**
+ [Overview](#res-details-overview)
+ [Relationships](#res-details-relationships)
+ [Timeline](#res-details-timeline)
+ [Compliance](#res-details-compliance)
+ [Resource shares](#res-details-shares)
+ [Tags](#res-details-tags)
+ [Additional properties](#res-details-addproperties)

## Overview
<a name="res-details-overview"></a>

The Overview tab displays basic information about the selected resource, including the **Resource type**, **Amazon Resource Name (ARN)**, the **Amazon Web Services Region** where the resource resides, the **Owner account**, and the **Last indexed** date and time stamp. For some resource types, this tab also displays resource properties sourced from the Amazon Cloud Control API, like public access settings for Amazon S3 buckets or instance state for Amazon EC2 instances. This tab also includes a link to the resource's native console. 

If additional Amazon Web Services services are enabled in your Amazon Web Services account, the Overview tab also displays the following information: 
+ **[Amazon Security Hub CSPM](https://docs.amazonaws.cn/securityhub/latest/userguide/what-is-securityhub.html)** — This integration displays a total number of [Security findings](https://docs.amazonaws.cn/securityhub/latest/userguide/securityhub-control-manage-findings.html) and a total number of Critical and High ranked findings. If available, choosing the **Total findings** link directs you to the Security Hub CSPM console. 
+ **[Amazon Cost Explorer](https://docs.amazonaws.cn/cost-management/latest/userguide/ce-what-is.html)** — This integration displays the resource's **Cost** over the past 14 days. Choosing the **cost value** link directs you to the resource's cost details page in the Amazon Cost Explorer console. 
+ **[Amazon Config](https://docs.amazonaws.cn/config/latest/developerguide/WhatIsConfig.html)** — This integration displays the resource's **Compliance** status with rules from Amazon Config. Choosing the compliance status link directs you to the resource details **Compliance** tab. 

**Minimum permissions**

To view all of the available resource details in this tab, which includes details from other Amazon Web Services services, you must have the following permissions: 
+ **Action**: `ce:GetCostAndUsageWithResources` 
+ **Action**: `cloudformation:GetResource` 
+ **Action**: `config:DescribeComplianceByResource` 
+ **Action**: `config:DescribeConfigurationRecorders` 
+ **Action**: `config:DescribeConfigurationRecorderStatus` 
+ **Action**: `config:GetComplianceDetailsByResource` 
+ **Action**: `securityhub:GetAdhocInsightResults` 

## Relationships
<a name="res-details-relationships"></a>

The Relationships tab displays the selected resource's single-level relationships to other resources. This tab only displays relationships for supported resource types. 

**Minimum permissions**

To view resource relationships in this tab, you must have at least read-only permissions for all resource types and underlying Amazon Web Services services you want to visualize. Resource Explorer recommends using the [`ReadOnlyAccess` general Amazon managed policy](https://docs.amazonaws.cn/aws-managed-policy/latest/reference/ReadOnlyAccess.html). You can attach this policy to your users, groups, and roles to provide read-only access to Amazon Web Services services and resources. 

## Timeline
<a name="res-details-timeline"></a>

If you have Amazon Config enabled in your account, the Timeline tab displays a resource's history of events over the past 60 days. You can filter by Configuration events, Compliance events, or CloudTrail Events. 

You can learn more about [Viewing compliance history timeline for resources and rules](https://docs.amazonaws.cn/config/latest/developerguide/view-manage-resource-console.html) in the *Amazon Config developer guide*. 

For accounts without Amazon Config enabled, the Timeline tab displays Amazon CloudTrail events. You can learn more about [Understanding CloudTrail events](https://docs.amazonaws.cn/awscloudtrail/latest/userguide/cloudtrail-events.html) in the *Amazon CloudTrail User Guide*. 

**Minimum permissions**

To view a resource's event history in this tab, you must have the following permissions: 
+ **Action**: `config:DescribeConfigurationRecorderStatus` 
+ **Action**: `cloudtrail:LookupEvents` 
+ **Action**: `config:GetResourceConfigHistory` 

## Compliance
<a name="res-details-compliance"></a>

If your account already has Amazon Config enabled, but does not include any rules, you can choose **Add rule** to create new rules in the Amazon Config console. 

If the selected resource does include rules, this tab displays the resource's **Compliant** and **Non-compliant** rules, including any known fixes for non-compliant rules. Choosing an individual rule directs you to the rule in the Amazon Config console. 

You can learn more about [Evaluating resources with Amazon Config rules](https://docs.amazonaws.cn/config/latest/developerguide/evaluate-config.html) in the *Amazon Config developer guide*. 

**Minimum permissions**

To view resource details in this tab, you must have Amazon Config enabled in your Amazon Web Services account and have the following permissions: 
+ **Action**: `config:DescribeComplianceByResource` 
+ **Action**: `config:DescribeConfigurationRecorders` 
+ **Action**: `config:DescribeConfigurationRecorderStatus` 
+ **Action**: `config:DescribeRemediationConfigurations` 
+ **Action**: `config:GetComplianceDetailsByResource` 

## Resource shares
<a name="res-details-shares"></a>

The Resource shares tab displays any resource shares that include this resource. Use Amazon Resource Access Manager to create resource shares that make the resource available to other individual Amazon accounts, or to the accounts in an organization or an organizational unit. Review [Sharing your Amazon resources](https://docs.amazonaws.cn/ram/latest/userguide/getting-started-sharing.html) in the Amazon Resource Access Manager user guide for more information. 

**Minimum permissions**

To view resource shares in this tab, you must have the following permissions: 
+ **Action**: `ram:ListResources` 
+ **Action**: `ram:GetResourceShares` 

## Tags
<a name="res-details-tags"></a>

The Tags tab displays a list of tags attached to the selected resource. Each tag contains a key name and an associated value that you can use to categorize your resources. 

**Minimum permissions**

To view a resource's tags in this tab, you must have the following permissions: 
+ **Action**: `tag:GetResources` 

## Additional properties
<a name="res-details-addproperties"></a>

The Additional properties tab displays resource details obtained by Amazon Cloud Control API, including the availability zone, block device mappings, and more. 

**Minimum permissions**

To view a resource's additional properties in this tab, you must have the following permissions: 
+ **Action**: `cloudformation:GetResource`