

# IAM resource types for accessing data in Amazon Neptune
<a name="iam-data-resources"></a>

Data resources, like data actions, have a `neptune-db:` prefix.

In a Neptune data-access policy, you specify the DB cluster that you are giving access to in an ARN with the following format:

```
arn:aws:neptune-db:region:account-id:cluster-resource-id/*
```

Such a resource ARN contains the following parts:
+ `region` is the AWS Region for the Amazon Neptune DB cluster.
+ `account-id` is the AWS account number for the DB cluster.
+ `cluster-resource-id` is a resource id for the DB cluster.
**Important**  
The `cluster-resource-id` is different from the cluster identifier. To find a cluster resource ID in the Neptune AWS Management Console, look in the **Configuration** section for the DB cluster in question.