Services and resource types that support enforcement - AWS Organizations

Services and resource types that support enforcement

The following services and resource types support enforcement with tag policies:

Basic Compliance Rules Required Tag Keys
Service Tag Policies JSON syntax CloudFormation Alias Reporting Mode Enforcement Mode Reporting Mode Enforce for IaC
AWS Amplify UI Builder [amplifyuibuilder] amplifyuibuilder:theme
  • AWS::AmplifyUIBuilder::Theme

Yes No No No
amplifyuibuilder:app/environment/components
  • AWS::AmplifyUIBuilder::Component

Yes Yes No No
amplifyuibuilder:component
  • AWS::AmplifyUIBuilder::Component

Yes No No No
amplifyuibuilder:ALL_SUPPORTED
  • N/A

No Yes No No
AWS Amplify [amplify] amplify:apps
  • AWS::Amplify::App

Yes No Yes Yes
AWS App Mesh [appmesh] appmesh:mesh
  • AWS::AppMesh::Mesh

Yes Yes Yes Yes
appmesh:mesh/virtualgateway/gatewayroute
  • AWS::AppMesh::GatewayRoute

Yes Yes Yes Yes
appmesh:mesh/virtualgateway
  • AWS::AppMesh::VirtualGateway

Yes Yes Yes Yes
appmesh:mesh/virtualnode
  • AWS::AppMesh::VirtualNode

Yes Yes Yes Yes
appmesh:mesh/virtualrouter/route
  • AWS::AppMesh::Route

Yes Yes Yes Yes
appmesh:mesh/virtualservice
  • AWS::AppMesh::VirtualService

Yes Yes Yes Yes
appmesh:mesh/virtualrouter
  • AWS::AppMesh::VirtualRouter

Yes Yes Yes Yes
appmesh:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS App Runner [apprunner] apprunner:autoscalingconfiguration
  • AWS::AppRunner::AutoScalingConfiguration

Yes No Yes Yes
apprunner:service
  • AWS::AppRunner::Service

Yes No Yes Yes
apprunner:connection
  • N/A

Yes No No No
apprunner:vpcingressconnection
  • AWS::AppRunner::VpcIngressConnection

Yes No Yes Yes
apprunner:observabilityconfiguration
  • AWS::AppRunner::ObservabilityConfiguration

Yes No Yes Yes
apprunner:vpcconnector
  • AWS::AppRunner::VpcConnector

Yes No Yes Yes
AWS AppConfig [appconfig] appconfig:application/environment
  • AWS::AppConfig::Environment

Yes Yes Yes Yes
appconfig:environment
  • AWS::AppConfig::Environment

Yes No No No
appconfig:configuration
  • N/A

Yes No No No
appconfig:extension
  • AWS::AppConfig::Extension

Yes No Yes Yes
appconfig:application
  • AWS::AppConfig::Application

Yes Yes Yes Yes
appconfig:extensionassociation
  • AWS::AppConfig::ExtensionAssociation

Yes No Yes Yes
appconfig:application/configurationprofile
  • AWS::AppConfig::ConfigurationProfile

Yes Yes Yes Yes
appconfig:application/environment/deployment
  • AWS::AppConfig::Deployment

Yes Yes No No
appconfig:deploymentstrategy
  • AWS::AppConfig::DeploymentStrategy

Yes Yes Yes Yes
AWS AppFabric [appfabric] appfabric:appbundle/ingestion
  • N/A

Yes No No No
appfabric:appbundle
  • N/A

Yes No No No
appfabric:appbundle/appauthorization
  • N/A

Yes No No No
AWS AppSync [appsync] appsync:domainnames
  • AWS::AppSync::DomainName

Yes No No No
appsync:apis
  • AWS::AppSync::GraphQLApi

Yes No No No
appsync:apis
  • AWS::AppSync::Api

Yes No No No
AWS Application Auto Scaling [application-autoscaling] application-autoscaling:scalable-target
  • AWS::ApplicationAutoScaling::ScalableTarget

Yes No No No
AWS Application Migration Service [mgn] mgn:source-server
  • N/A

Yes No No No
mgn:connector
  • N/A

Yes No No No
mgn:application
  • N/A

Yes No No No
mgn:wave
  • N/A

Yes No No No
mgn:launch-configuration-template
  • N/A

Yes No No No
mgn:replication-configuration-template
  • N/A

Yes No No No
mgn:job
  • N/A

Yes No No No
mgn:import
  • N/A

Yes No No No
mgn:vcenter-client
  • N/A

Yes No No No
mgn:export
  • N/A

Yes No No No
AWS Audit Manager [auditmanager] auditmanager:assessment
  • AWS::AuditManager::Assessment

Yes Yes Yes Yes
auditmanager:control
  • N/A

Yes Yes No No
auditmanager:assessmentframework
  • N/A

Yes Yes No No
auditmanager:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS B2B Data Interchange [b2bi] b2bi:profile
  • AWS::B2BI::Profile

Yes No Yes Yes
b2bi:partnership
  • AWS::B2BI::Partnership

Yes No Yes Yes
b2bi:transformer
  • AWS::B2BI::Transformer

Yes No Yes Yes
b2bi:capability
  • AWS::B2BI::Capability

Yes No Yes Yes
AWS Backup Gateway [backup-gateway] backup-gateway:vm
  • N/A

Yes Yes No No
backup-gateway:hypervisor
  • AWS::BackupGateway::Hypervisor

Yes Yes Yes Yes
backup-gateway:gateway
  • N/A

Yes Yes No No
backup-gateway:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Backup [backup-search] backup-search:search-export-job
  • N/A

Yes No No No
backup-search:search-job
  • N/A

Yes No No No
AWS Backup [backup] backup:legal-hold
  • N/A

Yes No No No
backup:tiering-configuration
  • N/A

Yes No No No
backup:report-plan
  • AWS::Backup::ReportPlan

Yes No Yes Yes
backup:backup-vault
  • AWS::Backup::LogicallyAirGappedBackupVault

  • AWS::Backup::BackupVault

Yes Yes No No
backup:restore-testing-plan
  • AWS::Backup::RestoreTestingPlan

Yes No Yes Yes
backup:framework
  • AWS::Backup::Framework

Yes No Yes Yes
backup:backup-plan
  • AWS::Backup::BackupPlan

Yes Yes Yes Yes
backup:recovery-point
  • N/A

Yes No No No
backup:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Batch [batch] batch:service-environment
  • AWS::Batch::ServiceEnvironment

Yes No No No
batch:job-definition
  • AWS::Batch::JobDefinition

Yes Yes Yes Yes
batch:scheduling-policy
  • AWS::Batch::SchedulingPolicy

Yes No Yes Yes
batch:consumable-resource
  • AWS::Batch::ConsumableResource

Yes No Yes Yes
batch:service-job
  • N/A

Yes No No No
batch:compute-environment
  • AWS::Batch::ComputeEnvironment

Yes No Yes Yes
batch:job
  • N/A

Yes Yes No No
batch:job-queue
  • AWS::Batch::JobQueue

Yes Yes Yes Yes
batch:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Billing And Cost Management Data Exports [bcm-data-exports] bcm-data-exports:export
  • AWS::BCMDataExports::Export

Yes No Yes Yes
AWS Billing And Cost Management Pricing Calculator [bcm-pricing-calculator] bcm-pricing-calculator:workload-estimate
  • N/A

Yes No No No
bcm-pricing-calculator:bill-estimate
  • N/A

Yes No No No
bcm-pricing-calculator:bill-scenario
  • N/A

Yes No No No
AWS Billing Conductor [billingconductor] billingconductor:billinggroup
  • AWS::BillingConductor::BillingGroup

Yes No No No
billingconductor:pricingplan
  • AWS::BillingConductor::PricingPlan

Yes No No No
billingconductor:customlineitem
  • AWS::BillingConductor::CustomLineItem

Yes No No No
billingconductor:pricingrule
  • AWS::BillingConductor::PricingRule

Yes No No No
AWS Billing [billing] billing:billingview
  • AWS::Billing::BillingView

Yes No No No
AWS Budget Service [budgets] budgets:budget
  • AWS::Budgets::Budget

Yes No Yes Yes
budgets:budget/action
  • AWS::Budgets::BudgetsAction

Yes No Yes Yes
AWS BugBust [bugbust] bugbust:event
  • N/A

Yes Yes No No
bugbust:ALL_SUPPORTED
  • N/A

No Yes No No
AWS Certificate Manager [acm] acm:certificate
  • AWS::CertificateManager::Certificate

Yes Yes Yes Yes
acm:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Chatbot [chatbot] chatbot:custom-action
  • AWS::Chatbot::CustomAction

Yes No No No
chatbot:chat-configuration/microsoft-teams-channel
  • AWS::Chatbot::SlackChannelConfiguration

  • AWS::Chatbot::MicrosoftTeamsChannelConfiguration

Yes No No No
chatbot:chat-configuration/slack-channel
  • AWS::Chatbot::SlackChannelConfiguration

  • AWS::Chatbot::MicrosoftTeamsChannelConfiguration

Yes No No No
chatbot:chat-configuration/chime-webhook
  • AWS::Chatbot::SlackChannelConfiguration

  • AWS::Chatbot::MicrosoftTeamsChannelConfiguration

Yes No No No
AWS Clean Rooms ML [cleanrooms-ml] cleanrooms-ml:configured-model-algorithm
  • N/A

Yes No No No
cleanrooms-ml:trained-model
  • N/A

Yes No No No
cleanrooms-ml:membership/trained-model
  • N/A

Yes No No No
cleanrooms-ml:configured-model-algorithm-association
  • N/A

Yes No No No
cleanrooms-ml:membership/configured-model-algorithm-association
  • N/A

Yes No No No
cleanrooms-ml:membership/trained-model-inference-job
  • N/A

Yes No No No
cleanrooms-ml:trained-model-inference-job
  • N/A

Yes No No No
cleanrooms-ml:audience-model
  • N/A

Yes No No No
cleanrooms-ml:audience-generation-job
  • N/A

Yes No No No
cleanrooms-ml:training-dataset
  • AWS::CleanRoomsML::TrainingDataset

Yes No Yes Yes
cleanrooms-ml:configured-audience-model
  • N/A

Yes No No No
AWS Clean Rooms [cleanrooms] cleanrooms:collaboration
  • AWS::CleanRooms::Collaboration

Yes Yes No No
cleanrooms:membership/privacybudgettemplate
  • AWS::CleanRooms::PrivacyBudgetTemplate

Yes No No No
cleanrooms:membership/configuredtableassociation
  • AWS::CleanRooms::ConfiguredTableAssociation

Yes Yes No No
cleanrooms:configuredtable
  • AWS::CleanRooms::ConfiguredTable

Yes Yes Yes Yes
cleanrooms:membership/analysistemplate
  • AWS::CleanRooms::AnalysisTemplate

Yes No No No
cleanrooms:membership/configuredaudiencemodelassociation
  • N/A

Yes No No No
cleanrooms:membership
  • AWS::CleanRooms::Membership

Yes Yes No No
cleanrooms:membership/idmappingtable
  • AWS::CleanRooms::IdMappingTable

Yes No No No
cleanrooms:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Cloud Map [servicediscovery] servicediscovery:namespace
  • AWS::ServiceDiscovery::HttpNamespace

  • AWS::ServiceDiscovery::PrivateDnsNamespace

Yes No No No
servicediscovery:service
  • AWS::ServiceDiscovery::Service

Yes No Yes Yes
AWS Cloud9 [cloud9] cloud9:environment
  • AWS::Cloud9::EnvironmentEC2

Yes Yes No No
cloud9:ALL_SUPPORTED
  • N/A

No Yes No No
AWS CloudFormation [cloudformation] cloudformation:stack
  • AWS::CloudFormation::Stack

Yes No Yes Yes
cloudformation:stackset
  • AWS::CloudFormation::StackSet

Yes No Yes Yes
AWS CloudHSM [cloudhsm] cloudhsm:backup
  • N/A

Yes No No No
cloudhsm:cluster
  • N/A

Yes No No No
AWS CloudTrail [cloudtrail] cloudtrail:channel
  • AWS::CloudTrail::Channel

Yes No Yes Yes
cloudtrail:eventdatastore
  • AWS::CloudTrail::EventDataStore

Yes No Yes Yes
cloudtrail:trail
  • AWS::CloudTrail::Trail

Yes Yes Yes Yes
cloudtrail:dashboard
  • AWS::CloudTrail::Dashboard

Yes No Yes Yes
cloudtrail:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS CloudWatch RUM [rum] rum:appmonitor
  • AWS::RUM::AppMonitor

Yes No Yes Yes
AWS CodeArtifact [codeartifact] codeartifact:repository
  • AWS::CodeArtifact::Repository

Yes No Yes Yes
codeartifact:domain
  • AWS::CodeArtifact::Domain

Yes No Yes Yes
codeartifact:package-group
  • AWS::CodeArtifact::PackageGroup

Yes No No No
AWS CodeBuild [codebuild] codebuild:project
  • AWS::CodeBuild::Project

Yes Yes Yes Yes
codebuild:fleet
  • AWS::CodeBuild::Fleet

Yes No No No
codebuild:report-group
  • AWS::CodeBuild::ReportGroup

Yes No Yes Yes
codebuild:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS CodeCommit [codecommit] codecommit:repository
  • AWS::CodeCommit::Repository

Yes Yes Yes Yes
codecommit:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS CodeConnections [codeconnections] codeconnections:host
  • N/A

Yes No No No
codeconnections:connection
  • AWS::CodeConnections::Connection

Yes No Yes Yes
codeconnections:repository-link
  • N/A

Yes No No No
AWS CodeDeploy [codedeploy] codedeploy:deploymentconfig
  • AWS::CodeDeploy::DeploymentConfig

Yes No Yes Yes
codedeploy:application
  • AWS::CodeDeploy::Application

Yes No Yes Yes
codedeploy:deploymentgroup
  • AWS::CodeDeploy::DeploymentGroup

Yes No No No
codedeploy:instance
  • N/A

Yes No No No
AWS CodePipeline [codepipeline] codepipeline:webhook
  • AWS::CodePipeline::Webhook

Yes Yes Yes Yes
codepipeline:pipeline
  • AWS::CodePipeline::Pipeline

Yes Yes Yes Yes
codepipeline:actiontype
  • AWS::CodePipeline::CustomActionType

Yes Yes Yes Yes
codepipeline:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS CodeStar Connections [codestar-connections] codestar-connections:connection
  • AWS::CodeStarConnections::Connection

Yes Yes Yes Yes
codestar-connections:host
  • N/A

Yes Yes No No
codestar-connections:repository-link
  • AWS::CodeStarConnections::RepositoryLink

Yes No Yes Yes
codestar-connections:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS CodeStar Notifications [codestar-notifications] codestar-notifications:notificationrule
  • AWS::CodeStarNotifications::NotificationRule

Yes No Yes Yes
AWS CodeStar [codestar] codestar:project
  • AWS::CodeStar::GitHubRepository

Yes No No No
AWS Config [config] config:aggregation-authorization
  • AWS::Config::AggregationAuthorization

Yes Yes Yes Yes
config:organization-config-rule
  • AWS::Config::OrganizationConfigRule

Yes No No No
config:organization-conformance-pack
  • AWS::Config::OrganizationConformancePack

Yes No No No
config:config-rule
  • AWS::Config::ConfigRule

Yes Yes Yes Yes
config:configuration-recorder
  • AWS::Config::ConfigurationRecorder

Yes No No No
config:stored-query
  • AWS::Config::StoredQuery

Yes No Yes Yes
config:config-aggregator
  • AWS::Config::ConfigurationAggregator

Yes Yes Yes Yes
config:conformance-pack
  • AWS::Config::ConformancePack

Yes No Yes Yes
config:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Control Tower [controltower] controltower:landingzone
  • AWS::ControlTower::LandingZone

Yes No No No
controltower:enabledcontrol
  • AWS::ControlTower::EnabledControl

Yes No No No
controltower:enabledbaseline
  • AWS::ControlTower::EnabledBaseline

Yes No No No
AWS Cost Explorer Service [ce] ce:anomalysubscription
  • AWS::CE::AnomalySubscription

Yes No Yes Yes
ce:costcategory
  • AWS::CE::CostCategory

Yes No Yes Yes
ce:anomalymonitor
  • AWS::CE::AnomalyMonitor

Yes No Yes Yes
AWS Cost and Usage Report [cur] cur:definition
  • AWS::CUR::ReportDefinition

Yes No Yes Yes
AWS Data Exchange [dataexchange] dataexchange:entitled-revisions
  • N/A

Yes No No No
dataexchange:event-actions
  • N/A

Yes No No No
dataexchange:entitled-data-sets
  • N/A

Yes No No No
dataexchange:data-grants
  • N/A

Yes No No No
dataexchange:data-sets
  • N/A

Yes No No No
AWS Data Pipeline [datapipeline] datapipeline:pipeline
  • AWS::DataPipeline::Pipeline

Yes No No No
AWS DataSync [datasync] datasync:location
  • AWS::DataSync::LocationEFS

  • AWS::DataSync::LocationS3

  • AWS::DataSync::LocationFSxLustre

  • AWS::DataSync::LocationNFS

  • AWS::DataSync::LocationFSxONTAP

  • AWS::DataSync::LocationObjectStorage

  • AWS::DataSync::LocationFSxOpenZFS

  • AWS::DataSync::LocationSMB

  • AWS::DataSync::LocationFSxWindows

  • AWS::DataSync::LocationAzureBlob

  • AWS::DataSync::LocationHDFS

Yes No No No
datasync:task
  • AWS::DataSync::Task

Yes No Yes Yes
datasync:task/execution
  • N/A

Yes No No No
datasync:agent
  • AWS::DataSync::Agent

Yes No No No
datasync:system/job
  • N/A

Yes No No No
datasync:system
  • N/A

Yes No No No
AWS Database Migration Service [dms] dms:assessment-run
  • N/A

Yes No No No
dms:subgrp
  • AWS::DMS::ReplicationSubnetGroup

Yes Yes Yes Yes
dms:es
  • AWS::DMS::EventSubscription

Yes Yes Yes Yes
dms:replication-config
  • AWS::DMS::ReplicationConfig

Yes No Yes Yes
dms:cert
  • AWS::DMS::Certificate

Yes No Yes Yes
dms:rep
  • AWS::DMS::ReplicationInstance

Yes Yes Yes Yes
dms:instance-profile
  • AWS::DMS::InstanceProfile

Yes No Yes Yes
dms:task
  • AWS::DMS::ReplicationTask

Yes Yes Yes Yes
dms:endpoint
  • AWS::DMS::Endpoint

Yes Yes Yes Yes
dms:data-migration
  • AWS::DMS::DataMigration

Yes No No No
dms:data-provider
  • AWS::DMS::DataProvider

Yes No Yes Yes
dms:migration-project
  • AWS::DMS::MigrationProject

Yes No Yes Yes
dms:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Deadline Cloud [deadline] deadline:license-endpoint
  • AWS::Deadline::LicenseEndpoint

Yes No Yes Yes
deadline:farm
  • AWS::Deadline::Farm

Yes No Yes Yes
deadline:monitor
  • AWS::Deadline::Monitor

Yes No No No
AWS DeepComposer [deepcomposer] deepcomposer:composition
  • N/A

Yes No No No
deepcomposer:model
  • N/A

Yes No No No
AWS DeepRacer [deepracer] deepracer:leaderboard_evaluation_job
  • N/A

Yes No No No
deepracer:leaderboard
  • N/A

Yes No No No
deepracer:model
  • N/A

Yes No No No
deepracer:training_job
  • N/A

Yes No No No
deepracer:evaluation_job
  • N/A

Yes No No No
deepracer:car
  • N/A

Yes No No No
AWS Device Farm [devicefarm] devicefarm:device
  • N/A

Yes No No No
devicefarm:testgrid-project
  • AWS::DeviceFarm::TestGridProject

Yes No Yes Yes
devicefarm:deviceinstance
  • N/A

Yes No No No
devicefarm:devicepool
  • AWS::DeviceFarm::DevicePool

Yes No No No
devicefarm:project
  • AWS::DeviceFarm::Project

Yes No Yes Yes
devicefarm:testgrid-session
  • N/A

Yes No No No
devicefarm:session
  • N/A

Yes No No No
devicefarm:instanceprofile
  • AWS::DeviceFarm::InstanceProfile

Yes No Yes Yes
devicefarm:networkprofile
  • AWS::DeviceFarm::NetworkProfile

Yes No No No
devicefarm:vpceconfiguration
  • AWS::DeviceFarm::VPCEConfiguration

Yes No No No
devicefarm:run
  • N/A

Yes No No No
AWS Diode Messaging [diode-messaging] diode-messaging:responding-flow
  • N/A

Yes No No No
diode-messaging:mapping
  • N/A

Yes Yes No No
diode-messaging:requesting-flow
  • N/A

Yes No No No
AWS Diode [diode] diode:transfer
  • N/A

Yes No No No
diode:account-mapping
  • N/A

Yes No No No
AWS Direct Connect [directconnect] directconnect:dxvif
  • N/A

Yes Yes No No
directconnect:dxlag
  • N/A

Yes Yes No No
directconnect:dxcon
  • N/A

Yes Yes No No
directconnect:dx-gateway
  • N/A

Yes No No No
directconnect:ALL_SUPPORTED
  • N/A

No Yes No No
AWS Directory Service [ds] ds:directory
  • AWS::DirectoryService::MicrosoftAD

  • AWS::DirectoryService::SimpleAD

Yes No No No
AWS Elastic Beanstalk [elasticbeanstalk] elasticbeanstalk:platform
  • N/A

Yes Yes No No
elasticbeanstalk:configurationtemplate
  • AWS::ElasticBeanstalk::ConfigurationTemplate

Yes Yes Yes Yes
elasticbeanstalk:application
  • AWS::ElasticBeanstalk::Application

Yes Yes Yes Yes
elasticbeanstalk:environment
  • AWS::ElasticBeanstalk::Environment

Yes No Yes Yes
elasticbeanstalk:applicationversion
  • AWS::ElasticBeanstalk::ApplicationVersion

Yes Yes Yes Yes
elasticbeanstalk:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Elastic Disaster Recovery [drs] drs:job
  • N/A

Yes No No No
drs:source-network
  • N/A

Yes No No No
drs:replication-configuration-template
  • N/A

Yes No No No
drs:source-server
  • N/A

Yes No No No
drs:launch-configuration-template
  • N/A

Yes No No No
drs:recovery-instance
  • N/A

Yes No No No
AWS Elastic Load Balancing [elasticloadbalancing] elasticloadbalancing:loadbalancer
  • AWS::ElasticLoadBalancingV2::LoadBalancer

Yes Yes Yes Yes
elasticloadbalancing:targetgroup
  • AWS::ElasticLoadBalancingV2::TargetGroup

Yes Yes Yes Yes
elasticloadbalancing:loadbalancer
  • AWS::ElasticLoadBalancing::LoadBalancer

Yes Yes Yes Yes
elasticloadbalancing:listener
  • AWS::ElasticLoadBalancingV2::Listener

Yes Yes Yes Yes
elasticloadbalancing:truststore
  • AWS::ElasticLoadBalancingV2::TrustStore

Yes No Yes Yes
elasticloadbalancing:listener-rule
  • AWS::ElasticLoadBalancingV2::ListenerRule

Yes Yes Yes Yes
AWS Elemental Appliances and Software [elemental-appliances-software] elemental-appliances-software:quote
  • N/A

Yes No No No
AWS Elemental MediaConnect [mediaconnect] mediaconnect:routeroutput
  • AWS::MediaConnect::RouterOutput

Yes No No No
mediaconnect:source
  • AWS::MediaConnect::FlowSource

Yes No Yes Yes
mediaconnect:output
  • AWS::MediaConnect::FlowOutput

Yes No Yes Yes
mediaconnect:entitlement
  • AWS::MediaConnect::FlowEntitlement

Yes No Yes Yes
mediaconnect:flow
  • AWS::MediaConnect::Flow

Yes No Yes Yes
mediaconnect:routernetworkinterface
  • AWS::MediaConnect::RouterNetworkInterface

Yes No No No
mediaconnect:flow/vpcinterface
  • AWS::MediaConnect::FlowVpcInterface

Yes No No No
mediaconnect:routerinput
  • AWS::MediaConnect::RouterInput

Yes No No No
AWS Elemental MediaConvert [mediaconvert] mediaconvert:queues
  • AWS::MediaConvert::Queue

Yes No Yes Yes
mediaconvert:presets
  • AWS::MediaConvert::Preset

Yes No Yes Yes
mediaconvert:jobtemplates
  • AWS::MediaConvert::JobTemplate

Yes No No No
mediaconvert:jobs
  • N/A

Yes No No No
AWS Elemental MediaLive [medialive] medialive:node
  • N/A

Yes No No No
medialive:sdisource
  • AWS::MediaLive::SdiSource

Yes No Yes Yes
medialive:reservation
  • N/A

Yes No No No
medialive:signal-map
  • AWS::MediaLive::SignalMap

Yes No Yes Yes
medialive:network
  • AWS::MediaLive::Network

Yes No Yes Yes
medialive:cloudwatch-alarm-template
  • AWS::MediaLive::CloudWatchAlarmTemplate

Yes No Yes Yes
medialive:eventbridge-rule-template
  • AWS::MediaLive::EventBridgeRuleTemplate

Yes No Yes Yes
medialive:multiplex
  • AWS::MediaLive::Multiplex

Yes No Yes Yes
medialive:cloudwatch-alarm-template-group
  • AWS::MediaLive::CloudWatchAlarmTemplateGroup

Yes No Yes Yes
medialive:eventbridge-rule-template-group
  • AWS::MediaLive::EventBridgeRuleTemplateGroup

Yes No Yes Yes
medialive:channel
  • AWS::MediaLive::Channel

Yes No No No
medialive:channelplacementgroup
  • AWS::MediaLive::ChannelPlacementGroup

Yes No Yes Yes
medialive:inputsecuritygroup
  • AWS::MediaLive::InputSecurityGroup

Yes No Yes Yes
medialive:input
  • AWS::MediaLive::Input

Yes No No No
medialive:inputdevice
  • N/A

Yes No No No
AWS Elemental MediaPackage V2 [mediapackagev2] mediapackagev2:channelGroup/channel/originEndpoint
  • AWS::MediaPackageV2::OriginEndpoint

Yes No Yes Yes
mediapackagev2:channelgroup/channel/originendpoint
  • AWS::MediaPackageV2::OriginEndpoint

Yes No Yes Yes
mediapackagev2:channelgroup
  • AWS::MediaPackageV2::ChannelGroup

Yes No Yes Yes
mediapackagev2:channelGroup/channel
  • AWS::MediaPackageV2::Channel

Yes No Yes Yes
mediapackagev2:channelgroup/channel
  • AWS::MediaPackageV2::Channel

Yes No Yes Yes
AWS Elemental MediaPackage [mediapackage-vod] mediapackage-vod:packaging-configurations
  • AWS::MediaPackage::PackagingConfiguration

Yes No Yes Yes
mediapackage-vod:assets
  • AWS::MediaPackage::Asset

Yes No Yes Yes
mediapackage-vod:packaging-groups
  • AWS::MediaPackage::PackagingGroup

Yes No Yes Yes
AWS Elemental MediaPackage [mediapackage] mediapackage:channels
  • AWS::MediaPackage::Channel

Yes No Yes Yes
mediapackage:origin_endpoints
  • AWS::MediaPackage::OriginEndpoint

Yes No Yes Yes
AWS Elemental MediaStore [mediastore] mediastore:folder
  • N/A

Yes No No No
mediastore:container
  • AWS::MediaStore::Container

Yes Yes No No
mediastore:object
  • N/A

Yes No No No
mediastore:ALL_SUPPORTED
  • N/A

No Yes No No
AWS Elemental MediaTailor [mediatailor] mediatailor:playbackconfiguration
  • AWS::MediaTailor::PlaybackConfiguration

Yes No Yes Yes
mediatailor:sourcelocation
  • AWS::MediaTailor::SourceLocation

Yes No Yes Yes
mediatailor:livesource
  • AWS::MediaTailor::LiveSource

Yes No Yes Yes
mediatailor:vodsource
  • AWS::MediaTailor::VodSource

Yes No Yes Yes
mediatailor:channel
  • AWS::MediaTailor::Channel

Yes No Yes Yes
AWS Elemental Support Cases [elemental-support-cases] elemental-support-cases:case
  • N/A

Yes No No No
AWS End User Messaging Social [social-messaging] social-messaging:waba
  • N/A

Yes No No No
social-messaging:phone-number-id
  • N/A

Yes No No No
AWS Entity Resolution [entityresolution] entityresolution:schemamapping
  • AWS::EntityResolution::SchemaMapping

Yes Yes Yes Yes
entityresolution:matchingworkflow
  • AWS::EntityResolution::MatchingWorkflow

Yes Yes Yes Yes
entityresolution:idnamespace
  • AWS::EntityResolution::IdNamespace

Yes No Yes Yes
entityresolution:idmappingworkflow
  • AWS::EntityResolution::IdMappingWorkflow

Yes No Yes Yes
entityresolution:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Fault Injection Service [fis] fis:action
  • N/A

Yes No No No
fis:experiment-template
  • AWS::FIS::ExperimentTemplate

Yes No Yes Yes
fis:experiment
  • N/A

Yes No No No
AWS Firewall Manager [fms] fms:applications-list
  • N/A

Yes No No No
fms:protocols-list
  • N/A

Yes No No No
fms:policy
  • AWS::FMS::Policy

Yes No No No
fms:resource-set
  • AWS::FMS::ResourceSet

Yes No No No
AWS Global Accelerator [globalaccelerator] globalaccelerator:accelerator
  • AWS::GlobalAccelerator::Accelerator

Yes Yes Yes Yes
globalaccelerator:attachment
  • AWS::GlobalAccelerator::CrossAccountAttachment

Yes No Yes Yes
AWS Glue DataBrew [databrew] databrew:job
  • AWS::DataBrew::Job

Yes No Yes Yes
databrew:recipe
  • AWS::DataBrew::Recipe

Yes No Yes Yes
databrew:schedule
  • AWS::DataBrew::Schedule

Yes No Yes Yes
databrew:project
  • AWS::DataBrew::Project

Yes No Yes Yes
databrew:ruleset
  • AWS::DataBrew::Ruleset

Yes No Yes Yes
databrew:dataset
  • AWS::DataBrew::Dataset

Yes No Yes Yes
AWS Glue [glue] glue:workflow
  • AWS::Glue::Workflow

Yes No No No
glue:integrationresourceproperty
  • AWS::Glue::IntegrationResourceProperty

Yes No No No
glue:integration
  • AWS::Glue::Integration

Yes No No No
glue:blueprint
  • N/A

Yes No No No
glue:completion
  • N/A

Yes No No No
glue:usageprofile
  • AWS::Glue::UsageProfile

Yes No Yes Yes
glue:job
  • AWS::Glue::Job

Yes No Yes Yes
glue:session
  • N/A

Yes No No No
glue:trigger
  • AWS::Glue::Trigger

Yes No Yes Yes
glue:catalog
  • N/A

Yes No No No
glue:devendpoint
  • AWS::Glue::DevEndpoint

Yes No No No
glue:dataqualityruleset
  • AWS::Glue::DataQualityRuleset

Yes No Yes Yes
glue:mltransform
  • AWS::Glue::MLTransform

Yes No Yes Yes
glue:connection
  • AWS::Glue::Connection

Yes No Yes Yes
glue:crawler
  • AWS::Glue::Crawler

Yes No Yes Yes
glue:registry
  • AWS::Glue::Registry

Yes No Yes Yes
glue:schema
  • AWS::Glue::Schema

Yes No Yes Yes
glue:customentitytype
  • AWS::Glue::CustomEntityType

Yes No Yes Yes
glue:database
  • AWS::Glue::Database

Yes No Yes Yes
AWS Ground Station [groundstation] groundstation:contact
  • N/A

Yes No No No
groundstation:mission-profile
  • AWS::GroundStation::MissionProfile

Yes No Yes Yes
groundstation:ephemeris
  • N/A

Yes No No No
groundstation:satellite
  • N/A

Yes No No No
groundstation:config
  • AWS::GroundStation::Config

Yes No Yes Yes
groundstation:dataflow-endpoint-group
  • AWS::GroundStation::DataflowEndpointGroup

Yes No Yes Yes
AWS HealthImaging [medical-imaging] medical-imaging:datastore
  • AWS::HealthImaging::Datastore

Yes No Yes Yes
medical-imaging:datastore/imageset
  • N/A

Yes No No No
AWS HealthLake [healthlake] healthlake:datastore
  • AWS::HealthLake::FHIRDatastore

Yes Yes Yes Yes
healthlake:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS HealthOmics [omics] omics:annotationstore
  • AWS::Omics::AnnotationStore

Yes Yes No No
omics:sequencestore/readset
  • N/A

Yes Yes No No
omics:referencestore/reference
  • N/A

Yes Yes No No
omics:run
  • N/A

Yes Yes No No
omics:runcache
  • N/A

Yes No No No
omics:sequencestore
  • AWS::Omics::SequenceStore

Yes Yes Yes Yes
omics:variantstore
  • AWS::Omics::VariantStore

Yes Yes No No
omics:rungroup
  • AWS::Omics::RunGroup

Yes Yes Yes Yes
omics:workflow
  • AWS::Omics::Workflow

Yes Yes Yes Yes
omics:referencestore
  • AWS::Omics::ReferenceStore

Yes Yes Yes Yes
omics:annotationstore/version
  • N/A

Yes Yes No No
omics:workflow/version
  • AWS::Omics::WorkflowVersion

Yes No No No
omics:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS IAM Access Analyzer [access-analyzer] access-analyzer:analyzer
  • AWS::AccessAnalyzer::Analyzer

Yes No Yes Yes
AWS IAM Identity Center [sso] sso:permissionset
  • AWS::SSO::PermissionSet

Yes No No No
sso:application
  • AWS::SSO::Application

Yes No No No
sso:instance
  • AWS::SSO::Instance

Yes No No No
sso:trustedtokenissuer
  • N/A

Yes No No No
AWS Identity and Access Management (IAM) [iam] iam:mfa
  • AWS::IAM::VirtualMFADevice

Yes Yes Yes Yes
iam:server-certificate
  • AWS::IAM::ServerCertificate

Yes Yes Yes Yes
iam:saml-provider
  • AWS::IAM::SAMLProvider

Yes Yes Yes Yes
iam:oidc-provider
  • AWS::IAM::OIDCProvider

Yes Yes Yes Yes
iam:policy
  • AWS::IAM::ManagedPolicy

  • AWS::IAM::Policy

Yes Yes No No
iam:role
  • AWS::IAM::Role

Yes No Yes Yes
iam:user
  • AWS::IAM::User

Yes No Yes Yes
iam:instance-profile
  • AWS::IAM::InstanceProfile

Yes Yes Yes Yes
iam:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Identity and Access Management Roles Anywhere [nile] nile:trust-anchor
  • AWS::RolesAnywhere::TrustAnchor

Yes No No No
nile:crl
  • AWS::RolesAnywhere::CRL

Yes No No No
nile:subject
  • N/A

Yes No No No
nile:profile
  • AWS::RolesAnywhere::Profile

Yes No No No
AWS Invoicing Service [invoicing] invoicing:procurement-portal-preference
  • N/A

Yes No No No
invoicing:invoice-unit
  • AWS::Invoicing::InvoiceUnit

Yes No Yes Yes
AWS IoT Analytics [iotanalytics] iotanalytics:channel
  • AWS::IoTAnalytics::Channel

Yes Yes No No
iotanalytics:dataset
  • AWS::IoTAnalytics::Dataset

Yes Yes No No
iotanalytics:datastore
  • AWS::IoTAnalytics::Datastore

Yes Yes No No
iotanalytics:pipeline
  • AWS::IoTAnalytics::Pipeline

Yes Yes No No
iotanalytics:ALL_SUPPORTED
  • N/A

No Yes No No
AWS IoT Core Device Advisor [iotdeviceadvisor] iotdeviceadvisor:suiterun
  • N/A

Yes No No No
iotdeviceadvisor:suitedefinition
  • AWS::IoTCoreDeviceAdvisor::SuiteDefinition

Yes No Yes Yes
AWS IoT Events [iotevents] iotevents:detectormodel
  • AWS::IoTEvents::DetectorModel

Yes Yes No No
iotevents:input
  • AWS::IoTEvents::Input

Yes Yes No No
iotevents:alarmmodel
  • AWS::IoTEvents::AlarmModel

Yes No No No
iotevents:ALL_SUPPORTED
  • N/A

No Yes No No
AWS IoT Fleet Hub for Device Management [iotfleethub] iotfleethub:application
  • AWS::IoTFleetHub::Application

Yes Yes Yes Yes
iotfleethub:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS IoT FleetWise [iotfleetwise] iotfleetwise:model-manifest
  • AWS::IoTFleetWise::ModelManifest

Yes No Yes Yes
iotfleetwise:vehicle
  • AWS::IoTFleetWise::Vehicle

Yes No Yes Yes
iotfleetwise:decoder-manifest
  • AWS::IoTFleetWise::DecoderManifest

Yes No Yes Yes
iotfleetwise:state-template
  • AWS::IoTFleetWise::StateTemplate

Yes No No No
iotfleetwise:fleet
  • AWS::IoTFleetWise::Fleet

Yes No Yes Yes
iotfleetwise:signal-catalog
  • AWS::IoTFleetWise::SignalCatalog

Yes No Yes Yes
iotfleetwise:campaign
  • AWS::IoTFleetWise::Campaign

Yes No Yes Yes
AWS IoT Greengrass [greengrass] greengrass:coresdefinition
  • AWS::Greengrass::CoreDefinition

Yes Yes Yes Yes
greengrass:components:versions
  • AWS::GreengrassV2::ComponentVersion

Yes No No No
greengrass:devicesdefinition
  • AWS::Greengrass::DeviceDefinition

Yes Yes Yes Yes
greengrass:connectorsdefinition
  • AWS::Greengrass::ConnectorDefinition

Yes Yes Yes Yes
greengrass:deployments
  • N/A

Yes No No No
greengrass:functionsdefinition
  • AWS::Greengrass::FunctionDefinition

Yes Yes Yes Yes
greengrass:bulk
  • N/A

Yes Yes No No
greengrass:resourcesdefinition
  • AWS::Greengrass::ResourceDefinition

Yes Yes Yes Yes
greengrass:components
  • N/A

Yes No No No
greengrass:groups
  • AWS::Greengrass::Group

Yes No Yes Yes
greengrass:loggersdefinition
  • AWS::Greengrass::LoggerDefinition

Yes Yes Yes Yes
greengrass:coredevices
  • N/A

Yes No No No
greengrass:subscriptionsdefinition
  • AWS::Greengrass::SubscriptionDefinition

Yes Yes Yes Yes
greengrass:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS IoT Managed Integrations [iotmanagedintegrations] iotmanagedintegrations:ota-task
  • N/A

Yes No No No
iotmanagedintegrations:managed-thing
  • AWS::IoTManagedIntegrations::ManagedThing

Yes No No No
iotmanagedintegrations:cloud-connector
  • N/A

Yes No No No
iotmanagedintegrations:account-association
  • N/A

Yes No No No
iotmanagedintegrations:provisioning-profile
  • AWS::IoTManagedIntegrations::ProvisioningProfile

Yes No No No
iotmanagedintegrations:credential-locker
  • AWS::IoTManagedIntegrations::CredentialLocker

Yes No No No
AWS IoT SiteWise [iotsitewise] iotsitewise:portal
  • AWS::IoTSiteWise::Portal

Yes No Yes Yes
iotsitewise:dashboard
  • AWS::IoTSiteWise::Dashboard

Yes No Yes Yes
iotsitewise:project
  • AWS::IoTSiteWise::Project

Yes No Yes Yes
iotsitewise:asset
  • AWS::IoTSiteWise::Asset

Yes Yes Yes Yes
iotsitewise:dataset
  • AWS::IoTSiteWise::Dataset

Yes No Yes Yes
iotsitewise:time-series
  • N/A

Yes No No No
iotsitewise:computation-model
  • AWS::IoTSiteWise::ComputationModel

Yes No No No
iotsitewise:asset-model
  • AWS::IoTSiteWise::AssetModel

Yes Yes Yes Yes
iotsitewise:gateway
  • AWS::IoTSiteWise::Gateway

Yes No Yes Yes
iotsitewise:access-policy
  • AWS::IoTSiteWise::AccessPolicy

Yes No Yes Yes
iotsitewise:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS IoT TwinMaker [iotdigitaltwin] iotdigitaltwin:workspace
  • AWS::IoTTwinMaker::Workspace

Yes No No No
iotdigitaltwin:workspace/component-type
  • AWS::IoTTwinMaker::ComponentType

Yes No No No
iotdigitaltwin:workspace/scene
  • AWS::IoTTwinMaker::Scene

Yes No No No
iotdigitaltwin:workspace/sync-job
  • AWS::IoTTwinMaker::SyncJob

Yes No No No
iotdigitaltwin:entity
  • AWS::IoTTwinMaker::Entity

Yes No No No
AWS IoT Wireless [iotwireless] iotwireless:sidewalkaccount
  • AWS::IoTWireless::PartnerAccount

Yes No Yes Yes
iotwireless:networkanalyzerconfiguration
  • AWS::IoTWireless::NetworkAnalyzerConfiguration

Yes No Yes Yes
iotwireless:serviceprofile
  • AWS::IoTWireless::ServiceProfile

Yes No Yes Yes
iotwireless:multicastgroup
  • AWS::IoTWireless::MulticastGroup

Yes No Yes Yes
iotwireless:wirelessgateway
  • AWS::IoTWireless::WirelessGateway

Yes No Yes Yes
iotwireless:wirelessdevice
  • AWS::IoTWireless::WirelessDevice

Yes No Yes Yes
iotwireless:destination
  • AWS::IoTWireless::Destination

Yes No Yes Yes
iotwireless:fuotatask
  • AWS::IoTWireless::FuotaTask

Yes No Yes Yes
iotwireless:importtask
  • AWS::IoTWireless::WirelessDeviceImportTask

Yes No Yes Yes
iotwireless:wirelessgatewaytaskdefinition
  • AWS::IoTWireless::TaskDefinition

Yes No Yes Yes
iotwireless:deviceprofile
  • AWS::IoTWireless::DeviceProfile

Yes No Yes Yes
AWS IoT [iot] iot:package
  • AWS::IoT::SoftwarePackage

Yes No Yes Yes
iot:authorizer
  • AWS::IoT::Authorizer

Yes No Yes Yes
iot:package/version
  • AWS::IoT::SoftwarePackageVersion

Yes No No No
iot:fleetmetric
  • AWS::IoT::FleetMetric

Yes No Yes Yes
iot:jobtemplate
  • AWS::IoT::JobTemplate

Yes No Yes Yes
iot:billinggroup
  • AWS::IoT::BillingGroup

Yes No Yes Yes
iot:provisioningtemplate
  • AWS::IoT::ProvisioningTemplate

Yes No Yes Yes
iot:thingtype
  • AWS::IoT::ThingType

Yes No Yes Yes
iot:thinggroup
  • AWS::IoT::ThingGroup

Yes No Yes Yes
iot:certificateprovider
  • AWS::IoT::CertificateProvider

Yes No Yes Yes
iot:rolealias
  • AWS::IoT::RoleAlias

Yes No Yes Yes
iot:cacert
  • AWS::IoT::CACertificate

Yes No Yes Yes
iot:custommetric
  • AWS::IoT::CustomMetric

Yes No Yes Yes
iot:domainconfiguration
  • AWS::IoT::DomainConfiguration

Yes No No No
iot:policy
  • AWS::IoT::Policy

Yes No Yes Yes
iot:mitigationaction
  • AWS::IoT::MitigationAction

Yes No Yes Yes
iot:securityprofile
  • AWS::IoT::SecurityProfile

Yes No Yes Yes
iot:rule
  • AWS::IoT::TopicRule

Yes No Yes Yes
iot:scheduledaudit
  • AWS::IoT::ScheduledAudit

Yes No Yes Yes
iot:tunnel
  • N/A

Yes No No No
iot:stream
  • N/A

Yes No No No
iot:job
  • N/A

Yes No No No
iot:otaupdate
  • N/A

Yes No No No
iot:command
  • AWS::IoT::Command

Yes No No No
iot:dimension
  • AWS::IoT::Dimension

Yes No Yes Yes
AWS Key Management Service [kms] kms:key
  • AWS::KMS::Key

Yes Yes Yes Yes
kms:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Lambda [lambda] lambda:layer/version
  • AWS::Lambda::LayerVersion

Yes No No No
lambda:layerversion
  • AWS::Lambda::LayerVersion

Yes No No No
lambda:layer
  • N/A

Yes No No No
lambda:function
  • AWS::Lambda::Function

Yes Yes Yes Yes
lambda:event-source-mapping
  • AWS::Lambda::EventSourceMapping

Yes No Yes Yes
lambda:code-signing-config
  • AWS::Lambda::CodeSigningConfig

Yes No Yes Yes
lambda:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Launch Wizard [launchwizard] launchwizard:deployment
  • AWS::LaunchWizard::Deployment

Yes No No No
AWS License Manager Linux Subscriptions Manager [license-manager-linux-subscriptions] license-manager-linux-subscriptions:subscription-provider
  • N/A

Yes No No No
AWS License Manager User Subscriptions [license-manager-user-subscriptions] license-manager-user-subscriptions:product-subscription
  • N/A

Yes No No No
license-manager-user-subscriptions:identity-provider
  • N/A

Yes No No No
license-manager-user-subscriptions:instance-user
  • N/A

Yes No No No
license-manager-user-subscriptions:license-server-endpoint
  • N/A

Yes No No No
AWS License Manager [license-manager] license-manager:license-asset-group
  • N/A

Yes No No No
license-manager:license
  • AWS::LicenseManager::License

Yes No Yes Yes
license-manager:license-asset-ruleset
  • N/A

Yes No No No
license-manager:license-configuration
  • N/A

Yes No No No
license-manager:report-generator
  • N/A

Yes No No No
license-manager:grant
  • AWS::LicenseManager::Grant

Yes No Yes Yes
AWS MWAA Serverless [airflow-serverless] airflow-serverless:workflow
  • N/A

Yes No No No
AWS Mainframe Modernization Application Testing [apptest] apptest:testsuite
  • N/A

Yes No No No
apptest:testconfiguration
  • N/A

Yes No No No
apptest:testcase
  • AWS::AppTest::TestCase

Yes No Yes Yes
apptest:testrun
  • N/A

Yes No No No
AWS Mainframe Modernization Service [m2] m2:app
  • AWS::M2::Application

Yes No No No
m2:env
  • AWS::M2::Environment

Yes No Yes Yes
AWS Marketplace Vendor Insights [vendor-insights] vendor-insights:security-profile
  • N/A

Yes No No No
vendor-insights:data-source
  • N/A

Yes No No No
AWS Marketplace [aws-marketplace] aws-marketplace:deploymentparameter
  • N/A

Yes No No No
aws-marketplace:changeset
  • N/A

Yes No No No
AWS Migration Hub Orchestrator [migrationhub-orchestrator] migrationhub-orchestrator:workflow
  • N/A

Yes No No No
migrationhub-orchestrator:template
  • N/A

Yes No No No
AWS Migration Hub Refactor Spaces [refactor-spaces] refactor-spaces:environment/application
  • AWS::RefactorSpaces::Application

Yes No Yes Yes
refactor-spaces:environment/application/service
  • AWS::RefactorSpaces::Service

Yes No Yes Yes
refactor-spaces:environment
  • AWS::RefactorSpaces::Environment

Yes No Yes Yes
refactor-spaces:environment/application/route
  • AWS::RefactorSpaces::Route

Yes No Yes Yes
AWS Network Firewall [network-firewall] network-firewall:stateless-rulegroup
  • AWS::NetworkFirewall::RuleGroup

Yes Yes Yes Yes
network-firewall:vpc-endpoint-association
  • AWS::NetworkFirewall::VpcEndpointAssociation

Yes No No No
network-firewall:firewall
  • AWS::NetworkFirewall::Firewall

Yes Yes Yes Yes
network-firewall:stateful-rulegroup
  • AWS::NetworkFirewall::RuleGroup

Yes Yes No No
network-firewall:firewall-policy
  • AWS::NetworkFirewall::FirewallPolicy

Yes Yes Yes Yes
network-firewall:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Network Manager [networkmanager] networkmanager:peering
  • AWS::NetworkManager::TransitGatewayPeering

Yes No No No
networkmanager:global-network
  • AWS::NetworkManager::GlobalNetwork

Yes No Yes Yes
networkmanager:link
  • AWS::NetworkManager::Link

Yes No Yes Yes
networkmanager:core-network
  • AWS::NetworkManager::CoreNetwork

Yes No Yes Yes
networkmanager:device
  • AWS::NetworkManager::Device

Yes No Yes Yes
networkmanager:connect-peer
  • AWS::NetworkManager::ConnectPeer

Yes No Yes Yes
networkmanager:attachment
  • AWS::NetworkManager::VpcAttachment

  • AWS::NetworkManager::ConnectAttachment

Yes No No No
networkmanager:site
  • AWS::NetworkManager::Site

Yes No Yes Yes
networkmanager:connection
  • N/A

Yes No No No
AWS OpsWorks Configuration Management [opsworks-cm] opsworks-cm:server
  • N/A

Yes No No No
opsworks-cm:backup
  • N/A

Yes No No No
AWS OpsWorks [opsworks] opsworks:instance
  • AWS::OpsWorks::Instance

Yes No No No
opsworks:stack
  • AWS::OpsWorks::Stack

Yes No No No
opsworks:layer
  • AWS::OpsWorks::Layer

Yes No No No
AWS Organizations [organizations] organizations:account
  • AWS::Organizations::Account

Yes Yes Yes Yes
organizations:ou
  • AWS::Organizations::OrganizationalUnit

Yes Yes Yes Yes
organizations:resourcepolicy
  • AWS::Organizations::ResourcePolicy

Yes No Yes Yes
organizations:root
  • N/A

Yes Yes No No
organizations:policy
  • AWS::Organizations::Policy

Yes Yes No No
organizations:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Outposts [outposts] outposts:site
  • N/A

Yes No No No
outposts:outpost
  • N/A

Yes No No No
AWS Panorama [panorama] panorama:package
  • AWS::Panorama::Package

Yes No Yes Yes
panorama:applicationinstance
  • AWS::Panorama::ApplicationInstance

Yes No No No
panorama:device
  • N/A

Yes No No No
AWS Parallel Computing Service [pcs] pcs:cluster
  • AWS::PCS::Cluster

Yes No No No
pcs:queue
  • AWS::PCS::Queue

Yes No No No
pcs:computenodegroup
  • AWS::PCS::ComputeNodeGroup

Yes No No No
AWS Partner Central Selling [partnercentral] partnercentral:opportunity
  • N/A

Yes No No No
partnercentral:engagement-by-accepting-invitation-task
  • N/A

Yes No No No
partnercentral:engagement-from-opportunity-task
  • N/A

Yes No No No
AWS Payment Cryptography [payment-cryptography] payment-cryptography:key
  • AWS::PaymentCryptography::Key

Yes No Yes Yes
AWS Payments [payments] payments:payment-instrument
  • N/A

Yes No No No
AWS Performance Insights [pi] pi:perf-reports
  • N/A

Yes No No No
AWS Private CA Connector for Active Directory [pca-connector-ad] pca-connector-ad:connector
  • AWS::PCAConnectorAD::Connector

Yes No No No
pca-connector-ad:connector/template
  • AWS::PCAConnectorAD::Template

Yes No No No
pca-connector-ad:directory-registration
  • AWS::PCAConnectorAD::DirectoryRegistration

Yes No No No
AWS Private CA Connector for SCEP [pca-connector-scep] pca-connector-scep:connector
  • AWS::PCAConnectorSCEP::Connector

Yes No No No
AWS Private Certificate Authority [acm-pca] acm-pca:certificate-authority
  • AWS::ACMPCA::CertificateAuthority

Yes Yes Yes Yes
acm-pca:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Proton [proton] proton:environment-template
  • AWS::Proton::EnvironmentTemplate

Yes No Yes Yes
proton:environment
  • N/A

Yes No No No
proton:service/service-instance
  • N/A

Yes No No No
proton:repository
  • N/A

Yes No No No
proton:component
  • N/A

Yes No No No
proton:environment-account-connection
  • AWS::Proton::EnvironmentAccountConnection

Yes No Yes Yes
proton:service
  • N/A

Yes No No No
proton:deployment
  • N/A

Yes No No No
proton:service-template
  • AWS::Proton::ServiceTemplate

Yes No Yes Yes
AWS Purchase Orders Console [purchase-orders] purchase-orders:purchase-order
  • N/A

Yes No No No
AWS RTB Fabric [rtbfabric] rtbfabric:requestergateway
  • AWS::RTBFabric::RequesterGateway

Yes No No No
rtbfabric:respondergateway
  • AWS::RTBFabric::ResponderGateway

Yes No No No
AWS Recycle Bin [rbin] rbin:rule
  • AWS::Rbin::Rule

Yes Yes Yes Yes
rbin:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Resilience Hub [resiliencehub] resiliencehub:app-assessment
  • N/A

Yes No No No
resiliencehub:resiliency-policy
  • AWS::ResilienceHub::ResiliencyPolicy

Yes No Yes Yes
resiliencehub:recommendation-template
  • N/A

Yes No No No
resiliencehub:app
  • AWS::ResilienceHub::App

Yes No Yes Yes
AWS Resource Access Manager (RAM) [ram] ram:resource-share
  • AWS::RAM::ResourceShare

Yes Yes Yes Yes
ram:resourceshareinvitation
  • N/A

Yes No No No
ram:permission
  • N/A

Yes No No No
ram:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Resource Groups [resource-groups] resource-groups:group
  • AWS::ResourceGroups::Group

Yes Yes Yes Yes
resource-groups:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS RoboMaker [robomaker] robomaker:world-generation-job
  • N/A

Yes No No No
robomaker:world-generation-jobs
  • N/A

Yes No No No
robomaker:simulation-job-batch
  • N/A

Yes No No No
robomaker:simulation-job
  • N/A

Yes No No No
robomaker:world-template
  • N/A

Yes No No No
robomaker:robot
  • AWS::RoboMaker::Robot

Yes No No No
robomaker:world-export-job
  • N/A

Yes No No No
robomaker:simulation-application
  • AWS::RoboMaker::SimulationApplication

Yes No No No
robomaker:deployment-job
  • N/A

Yes No No No
robomaker:robot-application
  • AWS::RoboMaker::RobotApplication

Yes No Yes Yes
robomaker:deployment-fleet
  • AWS::RoboMaker::Fleet

Yes No No No
robomaker:world
  • N/A

Yes No No No
AWS SQL Workbench [sqlworkbench] sqlworkbench:query
  • N/A

Yes No No No
sqlworkbench:notebook
  • N/A

Yes No No No
sqlworkbench:chart
  • N/A

Yes No No No
sqlworkbench:connection
  • N/A

Yes No No No
AWS Savings Plans [savingsplans] savingsplans:savingsplan
  • N/A

Yes No No No
AWS Secrets Manager [secretsmanager] secretsmanager:secret
  • AWS::SecretsManager::Secret

Yes Yes Yes Yes
secretsmanager:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Security Hub [securityhub] securityhub:connectorv2
  • N/A

Yes No No No
securityhub:automation-rulev2
  • AWS::SecurityHub::AutomationRuleV2

Yes No No No
securityhub:automation-rule
  • AWS::SecurityHub::AutomationRule

Yes No No No
securityhub:aggregatorv2
  • AWS::SecurityHub::AggregatorV2

Yes No No No
securityhub:hubv2
  • AWS::SecurityHub::HubV2

Yes No Yes Yes
securityhub:product-subscription
  • AWS::SecurityHub::ProductSubscription

Yes No No No
securityhub:hub
  • AWS::SecurityHub::Hub

Yes No No No
securityhub:configuration-policy
  • AWS::SecurityHub::ConfigurationPolicy

Yes No No No
AWS Service - Oracle Database@AWS [odb] odb:cloud-vm-cluster
  • AWS::ODB::CloudVmCluster

Yes No No No
odb:cloud-exadata-infrastructure
  • AWS::ODB::CloudExadataInfrastructure

Yes No No No
odb:db-node
  • N/A

Yes No No No
odb:cloud-autonomous-vm-cluster
  • AWS::ODB::CloudAutonomousVmCluster

Yes No No No
odb:odb-peering-connection
  • AWS::ODB::OdbPeeringConnection

Yes No No No
odb:odb-network
  • AWS::ODB::OdbNetwork

Yes No No No
AWS Service Catalog [catalog] catalog:portfolio
  • AWS::ServiceCatalog::Portfolio

Yes Yes Yes Yes
catalog:product
  • AWS::ServiceCatalog::CloudFormationProvisionedProduct

Yes Yes No No
catalog:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Service Catalog [servicecatalog] servicecatalog:attribute-groups
  • AWS::ServiceCatalogAppRegistry::AttributeGroup

Yes Yes Yes Yes
servicecatalog:applications
  • AWS::ServiceCatalogAppRegistry::Application

Yes Yes Yes Yes
servicecatalog:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Shield [shield] shield:protection
  • AWS::Shield::Protection

Yes No No No
shield:protection-group
  • AWS::Shield::ProtectionGroup

Yes No No No
AWS Signer [signer] signer:signing-profiles
  • AWS::Signer::SigningProfile

Yes No Yes Yes
AWS SimSpace Weaver [simspaceweaver] simspaceweaver:simulation
  • AWS::SimSpaceWeaver::Simulation

Yes No No No
AWS Snow Device Management [snow-device-management] snow-device-management:task
  • N/A

Yes No No No
snow-device-management:managed-device
  • N/A

Yes No No No
AWS Step Functions [states] states:execution
  • N/A

Yes No No No
states:activity
  • AWS::StepFunctions::Activity

Yes Yes Yes Yes
states:statemachine
  • AWS::StepFunctions::StateMachine

Yes Yes Yes Yes
states:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Storage Gateway [storagegateway] storagegateway:tapepool
  • N/A

Yes No No No
storagegateway:fs-association
  • N/A

Yes No No No
storagegateway:tape
  • N/A

Yes Yes No No
storagegateway:gateway
  • N/A

Yes Yes No No
storagegateway:gateway/volume
  • N/A

Yes Yes No No
storagegateway:share
  • N/A

Yes Yes No No
AWS Supply Chain [scn] scn:instance
  • N/A

Yes No No No
scn:billofmaterialsimportjob
  • N/A

Yes No No No
AWS Systems Manager Incident Manager Contacts [ssm-contacts] ssm-contacts:contact
  • AWS::SSMContacts::Contact

Yes Yes No No
ssm-contacts:rotation
  • AWS::SSMContacts::Rotation

Yes No No No
ssm-contacts:ALL_SUPPORTED
  • N/A

No Yes No No
AWS Systems Manager Incident Manager [ssm-incidents] ssm-incidents:incident-record
  • N/A

Yes No No No
ssm-incidents:replication-set
  • AWS::SSMIncidents::ReplicationSet

Yes No Yes Yes
ssm-incidents:response-plan
  • AWS::SSMIncidents::ResponsePlan

Yes No Yes Yes
AWS Systems Manager Quick Setup [ssm-quicksetup] ssm-quicksetup:configuration-manager
  • AWS::SSMQuickSetup::ConfigurationManager

Yes No No No
AWS Systems Manager [ssm] ssm:managed-instance
  • N/A

Yes Yes No No
ssm:document
  • AWS::SSM::Document

Yes Yes Yes Yes
ssm:automation-definition
  • N/A

Yes No No No
ssm:parameter
  • AWS::SSM::Parameter

Yes No Yes Yes
ssm:automation-execution
  • N/A

Yes Yes No No
ssm:opsitem
  • N/A

Yes Yes No No
ssm:patchbaseline
  • AWS::SSM::PatchBaseline

Yes Yes Yes Yes
ssm:session
  • N/A

Yes Yes No No
ssm:association
  • AWS::SSM::Association

Yes Yes Yes Yes
ssm:maintenancewindow
  • AWS::SSM::MaintenanceWindow

Yes Yes Yes Yes
ssm:opsmetadata
  • N/A

Yes No No No
ssm:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Systems Manager for SAP [ssm-sap] ssm-sap:hana/db
  • N/A

Yes No No No
ssm-sap:hana
  • AWS::SystemsManagerSAP::Application

Yes No No No
AWS Telco Network Builder [tnb] tnb:network-instance
  • N/A

Yes No No No
tnb:function-instance
  • N/A

Yes No No No
tnb:function-package
  • N/A

Yes No No No
tnb:network-package
  • N/A

Yes No No No
tnb:network-operation
  • N/A

Yes No No No
AWS Transfer Family [transfer] transfer:connector
  • AWS::Transfer::Connector

Yes No Yes Yes
transfer:user
  • AWS::Transfer::User

Yes Yes Yes Yes
transfer:workflow
  • AWS::Transfer::Workflow

Yes Yes Yes Yes
transfer:webapp
  • AWS::Transfer::WebApp

Yes No No No
transfer:agreement
  • AWS::Transfer::Agreement

Yes No Yes Yes
transfer:host-key
  • N/A

Yes No No No
transfer:server
  • AWS::Transfer::Server

Yes Yes Yes Yes
transfer:certificate
  • AWS::Transfer::Certificate

Yes No Yes Yes
transfer:profile
  • AWS::Transfer::Profile

Yes No Yes Yes
transfer:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
AWS Transform [transform] transform:connector
  • N/A

Yes No No No
AWS User Notifications Contacts [notifications-contacts] notifications-contacts:emailcontact
  • AWS::NotificationsContacts::EmailContact

Yes No Yes Yes
AWS User Notifications [notifications] notifications:configuration
  • AWS::Notifications::NotificationConfiguration

Yes No No No
AWS WAF Regional [waf-regional] waf-regional:rule
  • AWS::WAFRegional::Rule

Yes No No No
waf-regional:rulegroup
  • N/A

Yes No No No
waf-regional:ratebasedrule
  • AWS::WAFRegional::RateBasedRule

Yes No No No
waf-regional:webacl
  • AWS::WAFRegional::WebACL

Yes No No No
AWS WAF [waf] waf:rulegroup
  • N/A

Yes No No No
waf:webacl
  • AWS::WAF::WebACL

Yes No No No
waf:ratebasedrule
  • N/A

Yes No No No
waf:rule
  • AWS::WAF::Rule

Yes No No No
AWS Well-Architected Tool [wellarchitected] wellarchitected:lens
  • N/A

Yes No No No
wellarchitected:review-template
  • N/A

Yes No No No
wellarchitected:workload
  • N/A

Yes Yes No No
wellarchitected:profile
  • N/A

Yes No No No
wellarchitected:ALL_SUPPORTED
  • N/A

No Yes No No
AWS Wickr [wickr] wickr:network
  • N/A

Yes Yes No No
wickr:ALL_SUPPORTED
  • N/A

No Yes No No
AWS WorkSpaces Managed Instances [workspaces-instances] workspaces-instances:workspaceinstance
  • AWS::WorkspacesInstances::WorkspaceInstance

Yes No No No
AWS X-Ray [xray] xray:sampling-rule
  • AWS::XRay::SamplingRule

Yes No Yes Yes
xray:group
  • AWS::XRay::Group

Yes No Yes Yes
AWS rePost Private [repostspace] repostspace:space
  • N/A

Yes No No No
AWS service providing managed private networks [private-networks] private-networks:network-site
  • N/A

Yes No No No
private-networks:order
  • N/A

Yes No No No
private-networks:network
  • N/A

Yes No No No
private-networks:network-resource
  • N/A

Yes No No No
private-networks:device-identifier
  • N/A

Yes No No No
Alexa for Business [a4b] a4b:profile
  • N/A

Yes No No No
a4b:address-book
  • N/A

Yes No No No
a4b:network-profile
  • N/A

Yes No No No
a4b:user
  • N/A

Yes No No No
a4b:conference-provider
  • N/A

Yes No No No
a4b:skill-group
  • N/A

Yes No No No
a4b:room
  • N/A

Yes No No No
a4b:gateway-group
  • N/A

Yes No No No
a4b:schedule
  • N/A

Yes No No No
a4b:contact
  • N/A

Yes No No No
a4b:device
  • N/A

Yes No No No
Amazon AI Operations [aiops] aiops:investigation-group
  • AWS::AIOps::InvestigationGroup

Yes No No No
Amazon API Gateway Management [apigateway] apigateway:usageplans
  • N/A

Yes No No No
apigateway:apikeys
  • N/A

Yes Yes No No
apigateway:clientcertificates
  • N/A

Yes No No No
apigateway:restapis
  • N/A

Yes Yes No No
apigateway:domainnames
  • AWS::ApiGateway::DomainNameV2

Yes Yes No No
apigateway:domainnameaccessassociations
  • AWS::ApiGateway::DomainNameAccessAssociation

Yes No No No
apigateway:vpclinks
  • N/A

Yes No No No
apigateway:ALL_SUPPORTED
  • N/A

No Yes No No
Amazon ARC Region switch [arc-region-switch] arc-region-switch:plan
  • AWS::ARCRegionSwitch::Plan

Yes No No No
Amazon AppFlow [appflow] appflow:connector
  • AWS::AppFlow::Connector

Yes No No No
appflow:flow
  • AWS::AppFlow::Flow

Yes No Yes Yes
Amazon AppIntegrations [app-integrations] app-integrations:application-association
  • N/A

Yes No No No
app-integrations:data-integration
  • AWS::AppIntegrations::DataIntegration

Yes No Yes Yes
app-integrations:event-integration
  • AWS::AppIntegrations::EventIntegration

Yes No Yes Yes
app-integrations:data-integration-association
  • N/A

Yes No No No
app-integrations:application
  • AWS::AppIntegrations::Application

Yes No Yes Yes
app-integrations:event-integration-association
  • N/A

Yes No No No
Amazon AppStream 2.0 [appstream] appstream:image
  • N/A

Yes No No No
appstream:app-block
  • AWS::AppStream::AppBlock

Yes No Yes Yes
appstream:stack
  • AWS::AppStream::Stack

Yes No Yes Yes
appstream:app-block-builder
  • AWS::AppStream::AppBlockBuilder

Yes No No No
appstream:fleet
  • AWS::AppStream::Fleet

Yes No Yes Yes
appstream:image-builder
  • AWS::AppStream::ImageBuilder

Yes No Yes Yes
appstream:application
  • AWS::AppStream::Application

Yes No Yes Yes
Amazon Athena [athena] athena:datacatalog
  • AWS::Athena::DataCatalog

Yes No Yes Yes
athena:capacity-reservation
  • AWS::Athena::CapacityReservation

Yes No Yes Yes
athena:workgroup
  • AWS::Athena::WorkGroup

Yes Yes Yes Yes
athena:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Aurora DSQL [dsql] dsql:cluster
  • AWS::DSQL::Cluster

Yes No Yes Yes
Amazon Bedrock [bedrock-agentcore] bedrock-agentcore:workload-identity
  • AWS::BedrockAgentCore::WorkloadIdentity

Yes No No No
bedrock-agentcore:code-interpreter-custom
  • AWS::BedrockAgentCore::CodeInterpreterCustom

Yes No No No
bedrock-agentcore:gateway
  • AWS::BedrockAgentCore::Gateway

Yes No No No
bedrock-agentcore:token-vault
  • N/A

Yes No No No
bedrock-agentcore:memory
  • AWS::BedrockAgentCore::Memory

Yes No No No
bedrock-agentcore:workload-identity-directory
  • N/A

Yes No No No
bedrock-agentcore:runtime
  • AWS::BedrockAgentCore::Runtime

Yes No No No
bedrock-agentcore:browser-custom
  • AWS::BedrockAgentCore::BrowserCustom

Yes No No No
bedrock-agentcore:runtime-endpoint
  • AWS::BedrockAgentCore::RuntimeEndpoint

Yes No No No
Amazon Bedrock [bedrock] bedrock:model-copy-job
  • N/A

Yes No No No
bedrock:custom-model-deployment
  • N/A

Yes No No No
bedrock:prompt-router
  • N/A

Yes No No No
bedrock:agent-alias
  • AWS::Bedrock::AgentAlias

Yes No Yes Yes
bedrock:blueprint
  • AWS::Bedrock::Blueprint

Yes No Yes Yes
bedrock:model-customization-job
  • N/A

Yes No No No
bedrock:model-import-job
  • N/A

Yes No No No
bedrock:data-automation-invocation
  • N/A

Yes No No No
bedrock:data-automation-invocation-job
  • N/A

Yes No No No
bedrock:automated-reasoning-policy
  • AWS::Bedrock::AutomatedReasoningPolicy

Yes No No No
bedrock:model-evaluation-job
  • N/A

Yes No No No
bedrock:session
  • N/A

Yes No No No
bedrock:prompt
  • AWS::Bedrock::Prompt

Yes No Yes Yes
bedrock:guardrail
  • AWS::Bedrock::Guardrail

Yes No Yes Yes
bedrock:async-invoke
  • N/A

Yes No No No
bedrock:flow/alias
  • N/A

Yes No No No
bedrock:prompt-version
  • AWS::Bedrock::PromptVersion

Yes No No No
bedrock:data-automation-project
  • AWS::Bedrock::DataAutomationProject

Yes No Yes Yes
bedrock:provisioned-model
  • N/A

Yes No No No
bedrock:provisioned-model-v2
  • N/A

Yes No No No
bedrock:application-inference-profile
  • AWS::Bedrock::ApplicationInferenceProfile

Yes No Yes Yes
bedrock:imported-model
  • N/A

Yes No No No
bedrock:flow
  • AWS::Bedrock::Flow

Yes No Yes Yes
bedrock:flow/alias
  • AWS::Bedrock::FlowAlias

Yes No No No
bedrock:flow-alias
  • AWS::Bedrock::FlowAlias

Yes No No No
bedrock:knowledge-base
  • AWS::Bedrock::KnowledgeBase

Yes No Yes Yes
bedrock:agent
  • AWS::Bedrock::Agent

Yes No Yes Yes
bedrock:model-invocation-job
  • N/A

Yes No No No
bedrock:custom-model
  • N/A

Yes No No No
bedrock:evaluation-job
  • N/A

Yes No No No
Amazon Braket [braket] braket:quantum-task
  • N/A

Yes No No No
braket:job
  • N/A

Yes No No No
braket:spending-limit
  • N/A

Yes No No No
Amazon Chime [chime] chime:meeting
  • N/A

Yes Yes No No
chime:sip-media-application
  • N/A

Yes No No No
chime:sma
  • N/A

Yes Yes No No
chime:app-instance/bot
  • N/A

Yes No No No
chime:voice-profile-domain
  • N/A

Yes No No No
chime:app-instance/channel
  • N/A

Yes Yes No No
chime:app-instance/user
  • N/A

Yes Yes No No
chime:media-pipeline-kinesis-video-stream-pool
  • N/A

Yes No No No
chime:app-instance
  • N/A

Yes Yes No No
chime:media-pipeline
  • N/A

Yes Yes No No
chime:voice-connector
  • N/A

Yes No No No
chime:vc
  • N/A

Yes Yes No No
chime:media-insights-pipeline-configuration
  • N/A

Yes No No No
chime:ALL_SUPPORTED
  • N/A

No Yes No No
Amazon Cloud Directory [clouddirectory] clouddirectory:directory
  • N/A

Yes No No No
Amazon CloudFront [cloudfront] cloudfront:vpcorigin
  • AWS::CloudFront::VpcOrigin

Yes No No No
cloudfront:connection-function
  • AWS::CloudFront::ConnectionFunction

Yes No No No
cloudfront:distribution-tenant
  • AWS::CloudFront::DistributionTenant

Yes No No No
cloudfront:distribution
  • AWS::CloudFront::Distribution

Yes Yes Yes Yes
cloudfront:anycast-ip-list
  • AWS::CloudFront::AnycastIpList

Yes No No No
cloudfront:key-value-store
  • AWS::CloudFront::KeyValueStore

Yes No No No
cloudfront:keyvaluestore
  • AWS::CloudFront::KeyValueStore

Yes No No No
cloudfront:streaming-distribution
  • AWS::CloudFront::StreamingDistribution

Yes Yes No No
cloudfront:trust-store
  • N/A

Yes No No No
cloudfront:connection-group
  • AWS::CloudFront::ConnectionGroup

Yes No Yes Yes
cloudfront:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon CloudSearch [cloudsearch] cloudsearch:domain
  • N/A

Yes No No No
Amazon CloudWatch Application Insights [applicationinsights] applicationinsights:application
  • AWS::ApplicationInsights::Application

Yes No Yes Yes
Amazon CloudWatch Application Signals [application-signals] application-signals:slo
  • AWS::ApplicationSignals::ServiceLevelObjective

Yes No Yes Yes
Amazon CloudWatch Evidently [evidently] evidently:segment
  • AWS::Evidently::Segment

Yes No No No
evidently:project/launch
  • AWS::Evidently::Launch

Yes No No No
evidently:project
  • AWS::Evidently::Project

Yes No No No
evidently:project/feature
  • AWS::Evidently::Feature

Yes No No No
evidently:experiment
  • AWS::Evidently::Experiment

Yes No No No
evidently:project/experiment
  • AWS::Evidently::Experiment

Yes No No No
Amazon CloudWatch Internet Monitor [internetmonitor] internetmonitor:monitor
  • AWS::InternetMonitor::Monitor

Yes Yes Yes Yes
internetmonitor:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon CloudWatch Logs [logs] logs:log-group
  • AWS::Logs::LogGroup

Yes Yes Yes Yes
logs:delivery-destination
  • AWS::Logs::DeliveryDestination

Yes No Yes Yes
logs:scheduled-query
  • N/A

Yes No No No
logs:destination
  • AWS::Logs::Destination

Yes Yes Yes Yes
logs:delivery-source
  • AWS::Logs::DeliverySource

Yes No Yes Yes
logs:anomaly-detector
  • AWS::Logs::LogAnomalyDetector

Yes No Yes Yes
logs:delivery
  • AWS::Logs::Delivery

Yes No Yes Yes
Amazon CloudWatch Network Synthetic Monitor [networkmonitor] networkmonitor:monitor
  • N/A

Yes No No No
networkmonitor:probe
  • N/A

Yes No No No
Amazon CloudWatch Observability Access Manager [oam] oam:link
  • AWS::Oam::Link

Yes Yes No No
oam:sink
  • AWS::Oam::Sink

Yes Yes Yes Yes
oam:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon CloudWatch Observability Admin Service [observabilityadmin] observabilityadmin:organization-telemetry-rule
  • AWS::ObservabilityAdmin::OrganizationTelemetryRule

Yes No No No
observabilityadmin:s3tableintegration
  • N/A

Yes No No No
observabilityadmin:telemetry-rule
  • AWS::ObservabilityAdmin::TelemetryRule

Yes No No No
observabilityadmin:telemetry-pipeline
  • N/A

Yes No No No
observabilityadmin:organization-centralization-rule
  • AWS::ObservabilityAdmin::OrganizationCentralizationRule

Yes No No No
Amazon CloudWatch Synthetics [synthetics] synthetics:group
  • AWS::Synthetics::Group

Yes No Yes Yes
synthetics:canary
  • AWS::Synthetics::Canary

Yes No Yes Yes
Amazon CloudWatch [cloudwatch] cloudwatch:metric-stream
  • AWS::CloudWatch::MetricStream

Yes Yes Yes Yes
cloudwatch:slo
  • N/A

Yes No No No
cloudwatch:insight-rule
  • AWS::CloudWatch::InsightRule

Yes Yes Yes Yes
cloudwatch:alarm
  • AWS::CloudWatch::Alarm

Yes Yes Yes Yes
cloudwatch:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon CodeCatalyst [codecatalyst] codecatalyst:identity-center-applications
  • N/A

Yes No No No
codecatalyst:space
  • N/A

Yes No No No
codecatalyst:connections
  • N/A

Yes Yes No No
codecatalyst:ALL_SUPPORTED
  • N/A

No Yes No No
Amazon CodeGuru Profiler [codeguru-profiler] codeguru-profiler:profilinggroup
  • AWS::CodeGuruProfiler::ProfilingGroup

Yes No Yes Yes
Amazon CodeGuru Reviewer [codeguru-reviewer] codeguru-reviewer:association
  • AWS::CodeGuruReviewer::RepositoryAssociation

Yes Yes Yes Yes
codeguru-reviewer:codereview
  • N/A

Yes No No No
codeguru-reviewer:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon CodeGuru Security [codeguru-security] codeguru-security:scans
  • N/A

Yes Yes No No
codeguru-security:ALL_SUPPORTED
  • N/A

No Yes No No
Amazon CodeWhisperer [codewhisperer] codewhisperer:profile
  • N/A

Yes No No No
codewhisperer:customization
  • N/A

Yes No No No
Amazon Cognito Identity [cognito-identity] cognito-identity:identitypool
  • AWS::Cognito::IdentityPool

Yes Yes Yes Yes
cognito-identity:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Cognito Identity [cognito-idp] cognito-idp:userpool
  • AWS::Cognito::UserPool

Yes Yes Yes Yes
cognito-idp:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Comprehend [comprehend] comprehend:targeted-sentiment-detection-job
  • N/A

Yes No No No
comprehend:entity-recognizer-endpoint
  • N/A

Yes No No No
comprehend:sentiment-detection-job
  • N/A

Yes No No No
comprehend:flywheel
  • AWS::Comprehend::Flywheel

Yes No Yes Yes
comprehend:document-classifier-endpoint
  • N/A

Yes No No No
comprehend:entity-recognizer
  • N/A

Yes Yes No No
comprehend:topics-detection-job
  • N/A

Yes No No No
comprehend:events-detection-job
  • N/A

Yes No No No
comprehend:document-classifier
  • AWS::Comprehend::DocumentClassifier

Yes Yes Yes Yes
comprehend:key-phrases-detection-job
  • N/A

Yes No No No
comprehend:document-classification-job
  • N/A

Yes No No No
comprehend:entities-detection-job
  • N/A

Yes No No No
comprehend:dominant-language-detection-job
  • N/A

Yes No No No
comprehend:flywheel/dataset
  • N/A

Yes No No No
comprehend:pii-entities-detection-job
  • N/A

Yes No No No
comprehend:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Connect Cases [cases] cases:related-item
  • N/A

Yes No No No
cases:domain/case/related-item
  • N/A

Yes No No No
cases:layout
  • N/A

Yes No No No
cases:field
  • N/A

Yes No No No
cases:template
  • N/A

Yes No No No
cases:domain/case
  • N/A

Yes No No No
cases:domain
  • N/A

Yes No No No
Amazon Connect Customer Profiles [profile] profile:domains/object-types
  • AWS::CustomerProfiles::ObjectType

Yes No Yes Yes
profile:domains/domain-object-types
  • N/A

Yes No No No
profile:domains
  • AWS::CustomerProfiles::Domain

Yes No Yes Yes
profile:domains/integrations
  • AWS::CustomerProfiles::Integration

Yes No Yes Yes
Amazon Connect Outbound Campaigns [connect-campaigns] connect-campaigns:campaign
  • AWS::ConnectCampaigns::Campaign

Yes No Yes Yes
Amazon Connect Voice ID [voiceid] voiceid:domain
  • AWS::VoiceID::Domain

Yes No No No
Amazon Connect [connect] connect:instance/evaluation-form
  • AWS::Connect::EvaluationForm

Yes No Yes Yes
connect:instance/agent-state
  • AWS::Connect::AgentStatus

Yes No No No
connect:wildcardagentstatus
  • N/A

Yes No No No
connect:instance/transfer-destination
  • AWS::Connect::QuickConnect

Yes Yes Yes Yes
connect:instance/use-case
  • N/A

Yes No No No
connect:wildcardquickconnect
  • N/A

Yes No No No
connect:instance/task-template
  • AWS::Connect::TaskTemplate

Yes No Yes Yes
connect:instance/agent
  • AWS::Connect::User

Yes Yes Yes Yes
connect:traffic-distribution-group
  • AWS::Connect::TrafficDistributionGroup

Yes No No No
connect:instance/flow-module
  • AWS::Connect::ContactFlowModule

Yes No Yes Yes
connect:phone-number
  • AWS::Connect::PhoneNumber

Yes No Yes Yes
connect:instance/agent-group
  • AWS::Connect::UserHierarchyGroup

Yes No No No
connect:instance/operating-hours
  • AWS::Connect::HoursOfOperation

Yes No Yes Yes
connect:instance/security-profile
  • AWS::Connect::SecurityProfile

Yes No Yes Yes
connect:wildcardcontactflow
  • N/A

Yes No No No
connect:instance/queue
  • AWS::Connect::Queue

Yes Yes Yes Yes
connect:instance/contact-evaluation
  • N/A

Yes No No No
connect:instance/rule
  • AWS::Connect::Rule

Yes No Yes Yes
connect:instance/integration-association
  • AWS::Connect::IntegrationAssociation

Yes Yes Yes Yes
connect:instance/contact-flow
  • AWS::Connect::ContactFlow

Yes Yes Yes Yes
connect:instance/vocabulary
  • N/A

Yes No No No
connect:instance
  • AWS::Connect::Instance

Yes No Yes Yes
connect:instance/routing-profile
  • AWS::Connect::RoutingProfile

Yes Yes Yes Yes
connect:wildcardqueue
  • N/A

Yes No No No
connect:contact
  • N/A

Yes No No No
connect:instance/prompt
  • AWS::Connect::Prompt

Yes No Yes Yes
connect:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Data Lifecycle Manager [dlm] dlm:policy
  • AWS::DLM::LifecyclePolicy

Yes Yes Yes Yes
dlm:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon DataZone [datazone] datazone:domain
  • AWS::DataZone::Domain

Yes No Yes Yes
Amazon Detective [detective] detective:graph
  • AWS::Detective::Graph

Yes No Yes Yes
Amazon DocumentDB Elastic Clusters [docdb-elastic] docdb-elastic:cluster
  • AWS::DocDBElastic::Cluster

Yes No No No
docdb-elastic:cluster-pg
  • AWS::DocDBElastic::Cluster

Yes No No No
docdb-elastic:cluster-snapshot
  • N/A

Yes No No No
Amazon DynamoDB Accelerator (DAX) [dax] dax:cache
  • AWS::DAX::Cluster

Yes No Yes Yes
Amazon DynamoDB [dynamodb] dynamodb:globaltable
  • AWS::DynamoDB::GlobalTable

Yes No No No
dynamodb:table
  • AWS::DynamoDB::Table

Yes Yes Yes Yes
dynamodb:index
  • N/A

Yes No No No
dynamodb:table/stream
  • N/A

Yes No No No
dynamodb:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon EC2 Auto Scaling [autoscaling] autoscaling:autoscalinggroup
  • AWS::AutoScaling::AutoScalingGroup

Yes No No No
Amazon EC2 Image Builder [imagebuilder] imagebuilder:infrastructure-configuration
  • AWS::ImageBuilder::InfrastructureConfiguration

Yes No Yes Yes
imagebuilder:image-recipe
  • AWS::ImageBuilder::ImageRecipe

Yes No Yes Yes
imagebuilder:container-recipe
  • AWS::ImageBuilder::ContainerRecipe

Yes No Yes Yes
imagebuilder:image
  • AWS::ImageBuilder::Image

Yes No Yes Yes
imagebuilder:workflow
  • AWS::ImageBuilder::Workflow

Yes No Yes Yes
imagebuilder:component
  • AWS::ImageBuilder::Component

Yes No Yes Yes
imagebuilder:lifecycle-policy
  • AWS::ImageBuilder::LifecyclePolicy

Yes No Yes Yes
imagebuilder:distribution-configuration
  • AWS::ImageBuilder::DistributionConfiguration

Yes No Yes Yes
imagebuilder:image-pipeline
  • AWS::ImageBuilder::ImagePipeline

Yes No Yes Yes
Amazon EC2 [ec2] ec2:image-usage-report
  • N/A

Yes No No No
ec2:ipam-external-resource-verification-token
  • N/A

Yes Yes No No
ec2:security-group
  • AWS::EC2::SecurityGroup

Yes Yes Yes Yes
ec2:traffic-mirror-session
  • AWS::EC2::TrafficMirrorSession

Yes Yes Yes Yes
ec2:ipam-pool
  • AWS::EC2::IPAMPool

Yes Yes Yes Yes
ec2:security-group-rule
  • AWS::EC2::SecurityGroupIngress

  • AWS::EC2::SecurityGroupEgress

Yes No No No
ec2:local-gateway-virtual-interface-group
  • AWS::EC2::LocalGatewayVirtualInterfaceGroup

Yes No No No
ec2:natgateway
  • AWS::EC2::NatGateway

Yes Yes Yes Yes
ec2:import-snapshot-task
  • N/A

Yes Yes No No
ec2:internet-gateway
  • AWS::EC2::InternetGateway

Yes Yes Yes Yes
ec2:transit-gateway
  • AWS::EC2::TransitGateway

Yes Yes Yes Yes
ec2:dhcp-options
  • AWS::EC2::DHCPOptions

Yes Yes Yes Yes
ec2:image
  • N/A

Yes Yes No No
ec2:network-insights-access-scope-analysis
  • AWS::EC2::NetworkInsightsAccessScopeAnalysis

Yes Yes Yes Yes
ec2:ipv4pool-ec2
  • N/A

Yes Yes No No
ec2:transit-gateway-policy-table
  • N/A

Yes Yes No No
ec2:transit-gateway-attachment
  • AWS::EC2::TransitGatewayVpcAttachment

  • AWS::EC2::TransitGatewayAttachment

  • AWS::EC2::TransitGatewayPeeringAttachment

Yes Yes Yes Yes
ec2:volume
  • AWS::EC2::Volume

Yes Yes Yes Yes
ec2:import-image-task
  • N/A

Yes Yes No No
ec2:subnet
  • AWS::EC2::Subnet

Yes Yes Yes Yes
ec2:vpc
  • AWS::EC2::VPC

Yes Yes Yes Yes
ec2:vpc-endpoint-service-permission
  • AWS::EC2::VPCEndpointServicePermissions

Yes No Yes Yes
ec2:capacity-reservation
  • AWS::EC2::CapacityReservation

Yes Yes Yes Yes
ec2:network-acl
  • AWS::EC2::NetworkAcl

Yes Yes Yes Yes
ec2:verified-access-trust-provider
  • AWS::EC2::VerifiedAccessTrustProvider

Yes Yes Yes Yes
ec2:vpn-gateway
  • AWS::EC2::VPNGateway

Yes Yes Yes Yes
ec2:carrier-gateway
  • AWS::EC2::CarrierGateway

Yes Yes Yes Yes
ec2:elastic-gpu
  • N/A

Yes No No No
ec2:elasticgpu
  • N/A

Yes No No No
ec2:local-gateway-route-table
  • AWS::EC2::LocalGatewayRouteTable

Yes Yes Yes Yes
ec2:network-insights-access-scope
  • AWS::EC2::NetworkInsightsAccessScope

Yes Yes Yes Yes
ec2:transit-gateway-connect-peer
  • AWS::EC2::TransitGatewayConnectPeer

Yes Yes Yes Yes
ec2:verified-access-group
  • AWS::EC2::VerifiedAccessGroup

Yes Yes Yes Yes
ec2:traffic-mirror-target
  • AWS::EC2::TrafficMirrorTarget

Yes Yes Yes Yes
ec2:coip-pool
  • N/A

Yes Yes No No
ec2:fleet
  • AWS::EC2::EC2Fleet

Yes Yes Yes Yes
ec2:local-gateway-route-table-virtual-interface-group-association
  • AWS::EC2::LocalGatewayRouteTableVirtualInterfaceGroupAssociation

Yes Yes Yes Yes
ec2:transit-gateway-multicast-domain
  • AWS::EC2::TransitGatewayMulticastDomain

Yes Yes Yes Yes
ec2:network-interface
  • AWS::EC2::NetworkInterface

Yes Yes Yes Yes
ec2:capacity-manager-data-export
  • AWS::EC2::CapacityManagerDataExport

Yes No No No
ec2:client-vpn-endpoint
  • AWS::EC2::ClientVpnEndpoint

Yes Yes Yes Yes
ec2:spot-instances-request
  • N/A

Yes Yes No No
ec2:network-insights-path
  • AWS::EC2::NetworkInsightsPath

Yes Yes Yes Yes
ec2:instance-connect-endpoint
  • AWS::EC2::InstanceConnectEndpoint

Yes Yes Yes Yes
ec2:traffic-mirror-filter-rule
  • AWS::EC2::TrafficMirrorFilterRule

Yes No Yes Yes
ec2:local-gateway-virtual-interface
  • AWS::EC2::LocalGatewayVirtualInterface

Yes No No No
ec2:vpc-peering-connection
  • AWS::EC2::VPCPeeringConnection

Yes Yes Yes Yes
ec2:snapshot
  • N/A

Yes Yes No No
ec2:customer-gateway
  • AWS::EC2::CustomerGateway

Yes Yes Yes Yes
ec2:capacity-block
  • N/A

Yes No No No
ec2:verified-access-endpoint
  • AWS::EC2::VerifiedAccessEndpoint

Yes Yes Yes Yes
ec2:vpn-connection
  • AWS::EC2::VPNConnection

Yes Yes Yes Yes
ec2:ipam-scope
  • AWS::EC2::IPAMScope

Yes Yes Yes Yes
ec2:host-reservation
  • N/A

Yes Yes No No
ec2:replace-root-volume-task
  • N/A

Yes Yes No No
ec2:instance
  • AWS::EC2::Instance

Yes Yes Yes Yes
ec2:fpga-image
  • N/A

Yes Yes No No
ec2:route-server-endpoint
  • AWS::EC2::RouteServerEndpoint

Yes No No No
ec2:key-pair
  • AWS::EC2::KeyPair

Yes Yes Yes Yes
ec2:vpc-endpoint-connection
  • N/A

Yes No No No
ec2:dedicated-host
  • AWS::EC2::Host

Yes Yes Yes Yes
ec2:local-gateway-route-table-vpc-association
  • AWS::EC2::LocalGatewayRouteTableVPCAssociation

Yes Yes Yes Yes
ec2:vpc-endpoint-service
  • AWS::EC2::VPCEndpointService

Yes Yes Yes Yes
ec2:egress-only-internet-gateway
  • AWS::EC2::EgressOnlyInternetGateway

Yes Yes Yes Yes
ec2:ipam-resource-discovery
  • AWS::EC2::IPAMResourceDiscovery

Yes Yes Yes Yes
ec2:mac-modification-task
  • N/A

Yes No No No
ec2:network-insights-analysis
  • AWS::EC2::NetworkInsightsAnalysis

Yes Yes Yes Yes
ec2:placement-group
  • AWS::EC2::PlacementGroup

Yes Yes Yes Yes
ec2:instance-event-window
  • N/A

Yes Yes No No
ec2:ipv6pool-ec2
  • N/A

Yes No No No
ec2:prefix-list
  • AWS::EC2::PrefixList

Yes Yes Yes Yes
ec2:vpc-endpoint
  • AWS::EC2::VPCEndpoint

Yes Yes Yes Yes
ec2:elastic-ip
  • AWS::EC2::EIP

Yes Yes Yes Yes
ec2:export-instance-task
  • N/A

Yes Yes No No
ec2:reserved-instances
  • N/A

Yes Yes No No
ec2:export-image-task
  • N/A

Yes Yes No No
ec2:subnet-cidr-reservation
  • N/A

Yes Yes No No
ec2:vpc-flow-log
  • AWS::EC2::FlowLog

Yes Yes Yes Yes
ec2:capacity-reservation-fleet
  • AWS::EC2::CapacityReservationFleet

Yes Yes Yes Yes
ec2:ipam-resource-discovery-association
  • AWS::EC2::IPAMResourceDiscoveryAssociation

Yes Yes Yes Yes
ec2:transit-gateway-route-table-announcement
  • N/A

Yes Yes No No
ec2:traffic-mirror-filter
  • AWS::EC2::TrafficMirrorFilter

Yes Yes Yes Yes
ec2:outpost-lag
  • N/A

Yes No No No
ec2:local-gateway
  • N/A

Yes No No No
ec2:launch-template
  • AWS::EC2::LaunchTemplate

Yes Yes Yes Yes
ec2:vpc-block-public-access-exclusion
  • AWS::EC2::VPCBlockPublicAccessExclusion

Yes No Yes Yes
ec2:route-table
  • AWS::EC2::RouteTable

Yes Yes Yes Yes
ec2:ipam
  • AWS::EC2::IPAM

Yes Yes Yes Yes
ec2:declarative-policies-report
  • N/A

Yes No No No
ec2:verified-access-instance
  • AWS::EC2::VerifiedAccessInstance

Yes Yes Yes Yes
ec2:transit-gateway-route-table
  • AWS::EC2::TransitGatewayRouteTable

Yes Yes Yes Yes
ec2:spot-fleet-request
  • AWS::EC2::SpotFleet

Yes Yes Yes Yes
ec2:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon EMR Serverless [emr-serverless] emr-serverless:jobruns
  • N/A

Yes No No No
emr-serverless:applications
  • AWS::EMRServerless::Application

Yes Yes Yes Yes
Amazon EMR on EKS (EMR Containers) [emr-containers] emr-containers:virtualclusters/jobruns
  • N/A

Yes No No No
emr-containers:virtualclusters/endpoints
  • N/A

Yes No No No
emr-containers:securityconfigurations
  • N/A

Yes No No No
emr-containers:jobtemplates
  • N/A

Yes No No No
emr-containers:virtualclusters
  • AWS::EMRContainers::VirtualCluster

Yes No Yes Yes
Amazon ElastiCache [elasticache] elasticache:securitygroup
  • AWS::ElastiCache::SecurityGroup

Yes No Yes Yes
elasticache:parametergroup
  • AWS::ElastiCache::ParameterGroup

Yes No Yes Yes
elasticache:usergroup
  • AWS::ElastiCache::UserGroup

Yes No Yes Yes
elasticache:snapshot
  • N/A

Yes No No No
elasticache:subnetgroup
  • AWS::ElastiCache::SubnetGroup

Yes No Yes Yes
elasticache:cluster
  • AWS::ElastiCache::CacheCluster

Yes Yes Yes Yes
elasticache:reserved-instance
  • N/A

Yes No No No
elasticache:serverlesscache
  • AWS::ElastiCache::ServerlessCache

Yes No No No
elasticache:replicationgroup
  • AWS::ElastiCache::ReplicationGroup

Yes No Yes Yes
elasticache:serverlesscachesnapshot
  • N/A

Yes No No No
elasticache:user
  • AWS::ElastiCache::User

Yes No Yes Yes
elasticache:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Elastic Container Registry [ecr-public] ecr-public:repository
  • AWS::ECR::PublicRepository

Yes No Yes Yes
Amazon Elastic Container Registry [ecr] ecr:repository
  • AWS::ECR::Repository

Yes Yes Yes Yes
ecr:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Elastic Container Service [ecs] ecs:task
  • N/A

Yes No No No
ecs:capacity-provider
  • AWS::ECS::CapacityProvider

Yes Yes Yes Yes
ecs:service-revision
  • N/A

Yes No No No
ecs:service
  • AWS::ECS::Service

Yes Yes Yes Yes
ecs:cluster
  • AWS::ECS::Cluster

Yes Yes Yes Yes
ecs:service-deployment
  • N/A

Yes No No No
ecs:task-definition
  • AWS::ECS::TaskDefinition

Yes Yes Yes Yes
ecs:container-instance
  • N/A

Yes No No No
ecs:task-set
  • AWS::ECS::TaskSet

Yes Yes Yes Yes
ecs:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Elastic File System [elasticfilesystem] elasticfilesystem:file-system
  • AWS::EFS::FileSystem

Yes Yes Yes Yes
elasticfilesystem:access-point
  • AWS::EFS::AccessPoint

Yes No Yes Yes
elasticfilesystem:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Elastic Inference [amazonelasticinference] amazonelasticinference:accelerator
  • N/A

Yes No No No
Amazon Elastic Kubernetes Service [eks] eks:cluster
  • AWS::EKS::Cluster

Yes Yes Yes Yes
eks:access-entry
  • AWS::EKS::AccessEntry

Yes No Yes Yes
eks:addon
  • AWS::EKS::Addon

Yes No Yes Yes
eks:podidentityassociation
  • AWS::EKS::PodIdentityAssociation

Yes No Yes Yes
eks:dashboard
  • N/A

Yes No No No
eks:eks-anywhere-subscription
  • N/A

Yes No No No
eks:identityproviderconfig
  • AWS::EKS::IdentityProviderConfig

Yes No Yes Yes
eks:nodegroup
  • AWS::EKS::Nodegroup

Yes No Yes Yes
eks:fargateprofile
  • AWS::EKS::FargateProfile

Yes No Yes Yes
eks:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Elastic MapReduce [elasticmapreduce] elasticmapreduce:cluster
  • AWS::EMR::Cluster

Yes Yes Yes Yes
elasticmapreduce:editor
  • N/A

Yes Yes No No
elasticmapreduce:notebook-execution
  • N/A

Yes No No No
elasticmapreduce:studio
  • AWS::EMR::Studio

Yes No No No
elasticmapreduce:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Elastic VMware Service [evs] evs:environment
  • AWS::EVS::Environment

Yes No No No
Amazon EventBridge Pipes [pipes] pipes:pipe
  • AWS::Pipes::Pipe

Yes Yes Yes Yes
pipes:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon EventBridge Scheduler [scheduler] scheduler:schedule-group
  • AWS::Scheduler::ScheduleGroup

Yes Yes Yes Yes
scheduler:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon EventBridge Schemas [schemas] schemas:discoverer
  • AWS::EventSchemas::Discoverer

Yes No Yes Yes
schemas:registry
  • AWS::EventSchemas::Registry

Yes No Yes Yes
schemas:schema
  • AWS::EventSchemas::Schema

Yes No Yes Yes
Amazon EventBridge [events] events:event-bus
  • AWS::Events::EventBus

Yes Yes Yes Yes
events:rule
  • AWS::Events::Rule

Yes Yes Yes Yes
events:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon FSx [fsx] fsx:backup
  • N/A

Yes Yes No No
fsx:storage-virtual-machine
  • AWS::FSx::StorageVirtualMachine

Yes No Yes Yes
fsx:snapshot
  • AWS::FSx::Snapshot

Yes No Yes Yes
fsx:file-system
  • AWS::FSx::FileSystem

Yes Yes Yes Yes
fsx:association
  • AWS::FSx::DataRepositoryAssociation

Yes No Yes Yes
fsx:file-cache
  • N/A

Yes No No No
fsx:volume
  • AWS::FSx::Volume

Yes No Yes Yes
fsx:task
  • N/A

Yes No No No
fsx:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon FinSpace [finspace] finspace:kxenvironment/kxdatabase/kxdataview
  • N/A

Yes No No No
finspace:kxenvironment/kxuser
  • N/A

Yes No No No
finspace:environment
  • AWS::FinSpace::Environment

Yes No No No
finspace:kxenvironment/kxdatabase
  • N/A

Yes No No No
finspace:kxenvironment/kxvolume
  • N/A

Yes No No No
finspace:kxenvironment
  • N/A

Yes No No No
finspace:kxenvironment/kxscalinggroup
  • N/A

Yes No No No
finspace:kxenvironment/kxcluster
  • N/A

Yes No No No
Amazon Forecast [forecast] forecast:dataset-import-job
  • N/A

Yes No No No
forecast:predictor-backtest-export-job
  • N/A

Yes No No No
forecast:forecast-endpoint
  • N/A

Yes No No No
forecast:dataset-group
  • AWS::Forecast::DatasetGroup

Yes No Yes Yes
forecast:what-if-forecast-export
  • N/A

Yes No No No
forecast:monitor
  • N/A

Yes No No No
forecast:forecast-export-job
  • N/A

Yes No No No
forecast:dataset
  • AWS::Forecast::Dataset

Yes No Yes Yes
forecast:what-if-forecast
  • N/A

Yes No No No
forecast:predictor
  • N/A

Yes No No No
forecast:what-if-analysis
  • N/A

Yes No No No
forecast:explainability
  • N/A

Yes No No No
forecast:explainability-export
  • N/A

Yes No No No
forecast:forecast
  • N/A

Yes No No No
Amazon Fraud Detector [frauddetector] frauddetector:detector
  • AWS::FraudDetector::Detector

Yes Yes Yes Yes
frauddetector:detector-version
  • N/A

Yes Yes No No
frauddetector:batch-prediction
  • N/A

Yes No No No
frauddetector:label
  • AWS::FraudDetector::Label

Yes No Yes Yes
frauddetector:event-type
  • AWS::FraudDetector::EventType

Yes No Yes Yes
frauddetector:external-model
  • N/A

Yes No No No
frauddetector:batch-import
  • N/A

Yes No No No
frauddetector:entity-type
  • AWS::FraudDetector::EntityType

Yes No Yes Yes
frauddetector:outcome
  • AWS::FraudDetector::Outcome

Yes No Yes Yes
frauddetector:model-version
  • N/A

Yes No No No
frauddetector:list
  • AWS::FraudDetector::List

Yes No Yes Yes
frauddetector:rule
  • N/A

Yes Yes No No
frauddetector:variable
  • AWS::FraudDetector::Variable

Yes Yes Yes Yes
frauddetector:model
  • N/A

Yes Yes No No
frauddetector:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon FreeRTOS [freertos] freertos:subscription
  • N/A

Yes No No No
freertos:configuration
  • N/A

Yes No No No
Amazon GameLift Servers [gamelift] gamelift:script
  • AWS::GameLift::Script

Yes No Yes Yes
gamelift:build
  • AWS::GameLift::Build

Yes No Yes Yes
gamelift:containergroupdefinition
  • AWS::GameLift::ContainerGroupDefinition

Yes No No No
gamelift:gamesessionqueue
  • AWS::GameLift::GameSessionQueue

Yes No Yes Yes
gamelift:fleet
  • AWS::GameLift::Fleet

Yes No Yes Yes
gamelift:matchmakingruleset
  • AWS::GameLift::MatchmakingRuleSet

Yes No Yes Yes
gamelift:location
  • AWS::GameLift::Location

Yes No Yes Yes
gamelift:alias
  • AWS::GameLift::Alias

Yes No Yes Yes
gamelift:gameservergroup
  • AWS::GameLift::GameServerGroup

Yes No Yes Yes
gamelift:containerfleet
  • AWS::GameLift::ContainerFleet

Yes No No No
gamelift:matchmakingconfiguration
  • AWS::GameLift::MatchmakingConfiguration

Yes No Yes Yes
Amazon GameLift Streams [gameliftstreams] gameliftstreams:application
  • AWS::GameLiftStreams::Application

Yes No No No
gameliftstreams:streamgroup
  • AWS::GameLiftStreams::StreamGroup

Yes No No No
Amazon GuardDuty [AWS] AWS::GuardDuty::PublishingDestination
  • AWS::GuardDuty::PublishingDestination

Yes No No No
Amazon GuardDuty [guardduty] guardduty:malware-protection-plan
  • AWS::GuardDuty::MalwareProtectionPlan

Yes No Yes Yes
guardduty:detector
  • AWS::GuardDuty::Detector

Yes Yes Yes Yes
guardduty:detector/ipset
  • AWS::GuardDuty::IPSet

Yes Yes Yes Yes
guardduty:detector/threatintelset
  • AWS::GuardDuty::ThreatIntelSet

Yes Yes Yes Yes
guardduty:detector/filter
  • AWS::GuardDuty::Filter

Yes Yes Yes Yes
Amazon Honeycode [honeycode] honeycode:screen-automation
  • N/A

Yes No No No
honeycode:workbook
  • N/A

Yes No No No
honeycode:table
  • N/A

Yes No No No
honeycode:screen
  • N/A

Yes No No No
Amazon Inspector [inspector2] inspector2:codescan-configuration
  • AWS::InspectorV2::CisScanConfiguration

Yes No No No
inspector2:cis-configuration
  • AWS::InspectorV2::CisScanConfiguration

Yes No No No
inspector2:filter
  • AWS::InspectorV2::Filter

Yes Yes Yes Yes
inspector2:codesecurity-integration
  • N/A

Yes No No No
inspector2:codesecurity-configuration
  • N/A

Yes No No No
inspector2:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Interactive Video Service [ivs] ivs:public-key
  • AWS::IVS::PublicKey

Yes No Yes Yes
ivs:ingest-configuration
  • AWS::IVS::IngestConfiguration

Yes No Yes Yes
ivs:recording-configuration
  • AWS::IVS::RecordingConfiguration

Yes No Yes Yes
ivs:transcode-configuration
  • N/A

Yes No No No
ivs:chat-room
  • AWS::IVSChat::Room

Yes No No No
ivs:playback-restriction-policy
  • AWS::IVS::PlaybackRestrictionPolicy

Yes No Yes Yes
ivs:channel
  • AWS::IVS::Channel

Yes No Yes Yes
ivs:playback-key
  • AWS::IVS::PlaybackKeyPair

Yes No Yes Yes
ivs:stream-key
  • AWS::IVS::StreamKey

Yes No Yes Yes
ivs:composition
  • N/A

Yes No No No
ivs:stage
  • AWS::IVS::Stage

Yes No Yes Yes
ivs:storage-configuration
  • AWS::IVS::StorageConfiguration

Yes No Yes Yes
ivs:encoder-configuration
  • AWS::IVS::EncoderConfiguration

Yes No Yes Yes
Amazon Kendra Intelligent Ranking [kendra-ranking] kendra-ranking:rescore-execution-plan
  • AWS::KendraRanking::ExecutionPlan

Yes No Yes Yes
Amazon Kendra [kendra] kendra:index
  • AWS::Kendra::Index

Yes No Yes Yes
kendra:index/thesaurus
  • N/A

Yes No No No
kendra:index/query-suggestions-block-list
  • N/A

Yes No No No
kendra:index/data-source
  • AWS::Kendra::DataSource

Yes No Yes Yes
kendra:index/featured-results-set
  • N/A

Yes No No No
Amazon Keyspaces (for Apache Cassandra) [cassandra] cassandra:keyspace
  • AWS::Cassandra::Keyspace

Yes No Yes Yes
cassandra:table
  • AWS::Cassandra::Table

Yes No No No
Amazon Kinesis Analytics [kinesisanalytics] kinesisanalytics:application
  • AWS::KinesisAnalytics::Application

Yes Yes Yes Yes
kinesisanalytics:application
  • AWS::KinesisAnalyticsV2::Application

Yes Yes Yes Yes
kinesisanalytics:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Kinesis Data Streams [kinesis] kinesis:stream
  • AWS::Kinesis::Stream

Yes No Yes Yes
kinesis:stream/consumer
  • AWS::Kinesis::StreamConsumer

Yes No Yes Yes
Amazon Kinesis Firehose [firehose] firehose:deliverystream
  • AWS::KinesisFirehose::DeliveryStream

Yes Yes Yes Yes
firehose:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Kinesis Video Streams [kinesisvideo] kinesisvideo:stream
  • AWS::KinesisVideo::Stream

Yes No Yes Yes
kinesisvideo:channel
  • AWS::KinesisVideo::SignalingChannel

Yes No Yes Yes
Amazon Lex [lex] lex:bot-channel
  • N/A

Yes No No No
lex:test-set
  • N/A

Yes No No No
lex:bot-alias
  • AWS::Lex::BotAlias

Yes No Yes Yes
lex:bot
  • AWS::Lex::Bot

Yes No Yes Yes
Amazon Lightsail [lightsail] lightsail:keypair
  • N/A

Yes No No No
lightsail:distribution
  • AWS::Lightsail::Distribution

Yes No Yes Yes
lightsail:containerservice
  • AWS::Lightsail::Container

Yes No Yes Yes
lightsail:disksnapshot
  • AWS::Lightsail::DiskSnapshot

Yes No No No
lightsail:relationaldatabase
  • AWS::Lightsail::Database

Yes No No No
lightsail:certificate
  • AWS::Lightsail::Certificate

Yes No Yes Yes
lightsail:bucket
  • AWS::Lightsail::Bucket

Yes No Yes Yes
lightsail:instance
  • AWS::Lightsail::Instance

Yes No Yes Yes
lightsail:disk
  • AWS::Lightsail::Disk

Yes No Yes Yes
lightsail:loadbalancer
  • AWS::Lightsail::LoadBalancer

Yes No Yes Yes
lightsail:domain
  • AWS::Lightsail::Domain

Yes No Yes Yes
lightsail:instancesnapshot
  • AWS::Lightsail::InstanceSnapshot

Yes No No No
lightsail:relationaldatabasesnapshot
  • N/A

Yes No No No
lightsail:staticip
  • AWS::Lightsail::StaticIp

Yes No Yes Yes
Amazon Location [geo] geo:geofence-collection
  • AWS::Location::GeofenceCollection

Yes No Yes Yes
geo:tracker
  • AWS::Location::Tracker

Yes No Yes Yes
geo:api-key
  • AWS::Location::APIKey

Yes No Yes Yes
geo:place-index
  • AWS::Location::PlaceIndex

Yes No Yes Yes
geo:route-calculator
  • AWS::Location::RouteCalculator

Yes No Yes Yes
geo:map
  • AWS::Location::Map

Yes No Yes Yes
Amazon Lookout for Equipment [lookoutequipment] lookoutequipment:dataset
  • N/A

Yes No No No
lookoutequipment:label-group
  • N/A

Yes No No No
lookoutequipment:inference-scheduler
  • AWS::LookoutEquipment::InferenceScheduler

Yes No No No
lookoutequipment:model
  • N/A

Yes No No No
Amazon Lookout for Metrics [lookoutmetrics] lookoutmetrics:metricset
  • N/A

Yes No No No
lookoutmetrics:anomalydetector
  • AWS::LookoutMetrics::AnomalyDetector

Yes No Yes Yes
lookoutmetrics:alert
  • AWS::LookoutMetrics::Alert

Yes No Yes Yes
Amazon Lookout for Vision [lookoutvision] lookoutvision:model
  • N/A

Yes No No No
Amazon MQ [mq] mq:configuration
  • AWS::AmazonMQ::Configuration

Yes Yes Yes Yes
mq:broker
  • AWS::AmazonMQ::Broker

Yes Yes Yes Yes
mq:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Machine Learning [machinelearning] machinelearning:evaluation
  • N/A

Yes No No No
machinelearning:mlmodel
  • N/A

Yes No No No
machinelearning:batchprediction
  • N/A

Yes No No No
machinelearning:datasource
  • N/A

Yes No No No
Amazon Macie [macie2] macie2:classification-job
  • N/A

Yes No No No
macie2:ALL_SUPPORTED
  • N/A

No Yes No No
Amazon Macie [macie] macie:allow-list
  • AWS::Macie::AllowList

Yes No No No
macie:member
  • N/A

Yes No No No
macie:findings-filter
  • AWS::Macie::FindingsFilter

Yes No No No
macie:classification-job
  • N/A

Yes No No No
macie:custom-data-identifier
  • AWS::Macie::CustomDataIdentifier

Yes No No No
Amazon Managed Blockchain [managedblockchain] managedblockchain:proposals
  • N/A

Yes No No No
managedblockchain:members
  • AWS::ManagedBlockchain::Member

Yes No No No
managedblockchain:accessors
  • AWS::ManagedBlockchain::Accessor

Yes No Yes Yes
managedblockchain:networks
  • N/A

Yes No No No
managedblockchain:nodes
  • AWS::ManagedBlockchain::Node

Yes No No No
managedblockchain:invitations
  • N/A

Yes No No No
Amazon Managed Grafana [grafana] grafana:workspaces
  • AWS::Grafana::Workspace

Yes No Yes Yes
Amazon Managed Service for Prometheus [aps] aps:scraper
  • AWS::APS::Scraper

Yes No No No
aps:anomalydetector
  • AWS::APS::AnomalyDetector

Yes No No No
aps:workspace
  • AWS::APS::Workspace

Yes No Yes Yes
aps:rulegroupsnamespace
  • AWS::APS::RuleGroupsNamespace

Yes No Yes Yes
Amazon Managed Streaming for Apache Kafka [kafka] kafka:vpc-connection
  • AWS::MSK::VpcConnection

Yes No No No
kafka:cluster
  • AWS::MSK::Cluster

Yes No No No
kafka:replicator
  • AWS::MSK::Replicator

Yes No Yes Yes
Amazon Managed Streaming for Kafka Connect [kafkaconnect] kafkaconnect:worker-configuration
  • AWS::KafkaConnect::WorkerConfiguration

Yes No Yes Yes
kafkaconnect:connector
  • AWS::KafkaConnect::Connector

Yes No No No
kafkaconnect:custom-plugin
  • AWS::KafkaConnect::CustomPlugin

Yes No Yes Yes
Amazon Managed Workflows for Apache Airflow [airflow] airflow:environment
  • AWS::MWAA::Environment

Yes No Yes Yes
Amazon MemoryDB [memorydb] memorydb:cluster
  • AWS::MemoryDB::Cluster

Yes No Yes Yes
memorydb:acl
  • AWS::MemoryDB::ACL

Yes No Yes Yes
memorydb:subnetgroup
  • AWS::MemoryDB::SubnetGroup

Yes No Yes Yes
memorydb:reservednode
  • N/A

Yes No No No
memorydb:multiregioncluster
  • AWS::MemoryDB::MultiRegionCluster

Yes No No No
memorydb:user
  • AWS::MemoryDB::User

Yes No Yes Yes
memorydb:parametergroup
  • AWS::MemoryDB::ParameterGroup

Yes No Yes Yes
memorydb:snapshot
  • N/A

Yes No No No
Amazon Nimble Studio [nimble] nimble:studio
  • AWS::NimbleStudio::Studio

Yes No No No
nimble:launch-profile
  • N/A

Yes No No No
nimble:streaming-session
  • N/A

Yes No No No
nimble:streaming-session-backup
  • N/A

Yes No No No
nimble:streaming-image
  • N/A

Yes No No No
nimble:studio-component
  • N/A

Yes No No No
Amazon One Enterprise [one] one:site
  • N/A

Yes No No No
one:device-instance
  • N/A

Yes No No No
one:device-configuration-template
  • N/A

Yes No No No
Amazon OpenSearch Ingestion [osis] osis:pipeline
  • AWS::OSIS::Pipeline

Yes No Yes Yes
Amazon OpenSearch Serverless [aoss] aoss:collection
  • AWS::OpenSearchServerless::Collection

Yes Yes Yes Yes
aoss:collection-group
  • N/A

Yes No No No
aoss:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon OpenSearch [es] es:domain
  • AWS::Elasticsearch::Domain

  • AWS::OpenSearchService::Domain

Yes Yes No No
es:ALL_SUPPORTED
  • N/A

No Yes No No
Amazon OpenSearch [opensearch] opensearch:datasource
  • N/A

Yes No No No
Amazon Personalize [personalize] personalize:data-deletion-job
  • N/A

Yes No No No
personalize:dataset-group
  • AWS::Personalize::DatasetGroup

Yes No Yes Yes
personalize:batch-segment-job
  • N/A

Yes No No No
personalize:campaign
  • N/A

Yes No No No
personalize:recommender
  • N/A

Yes No No No
personalize:batch-inference-job
  • N/A

Yes No No No
personalize:event-tracker
  • N/A

Yes No No No
personalize:dataset-import-job
  • N/A

Yes No No No
personalize:dataset
  • AWS::Personalize::Dataset

Yes No Yes Yes
personalize:solution
  • AWS::Personalize::Solution

Yes No Yes Yes
personalize:filter
  • N/A

Yes No No No
personalize:dataset-export-job
  • N/A

Yes No No No
Amazon Pinpoint SMS and Voice Service [sms-voice] sms-voice:sender-id
  • AWS::SMSVOICE::SenderId

Yes Yes No No
sms-voice:protect-configuration
  • AWS::SMSVOICE::ProtectConfiguration

Yes No No No
sms-voice:opt-out-list
  • AWS::SMSVOICE::OptOutList

Yes Yes No No
sms-voice:phone-number
  • AWS::SMSVOICE::PhoneNumber

Yes Yes No No
sms-voice:pool
  • AWS::SMSVOICE::Pool

Yes Yes No No
sms-voice:configuration-set
  • AWS::SMSVOICE::ConfigurationSet

Yes Yes No No
sms-voice:ALL_SUPPORTED
  • N/A

No Yes No No
Amazon Pinpoint [mobiletargeting] mobiletargeting:templates
  • AWS::Pinpoint::SmsTemplate

  • AWS::Pinpoint::PushTemplate

  • AWS::Pinpoint::InAppTemplate

  • AWS::Pinpoint::EmailTemplate

Yes No No No
mobiletargeting:apps
  • AWS::Pinpoint::App

Yes No Yes Yes
Amazon Q Business Q Apps [qapps] qapps:application/qapp/session
  • N/A

Yes No No No
qapps:application/qapp
  • N/A

Yes No No No
Amazon Q Business [qbusiness] qbusiness:application/plugin
  • AWS::QBusiness::Plugin

Yes No No No
qbusiness:application/retriever
  • AWS::QBusiness::Retriever

Yes No No No
qbusiness:application/index/data-source
  • AWS::QBusiness::DataSource

Yes No No No
qbusiness:application
  • AWS::QBusiness::Application

Yes No No No
qbusiness:application/web-experience
  • AWS::QBusiness::WebExperience

Yes No No No
qbusiness:application/index
  • AWS::QBusiness::Index

Yes No No No
Amazon Q in Connect [wisdom] wisdom:content-association
  • N/A

Yes No No No
wisdom:content
  • N/A

Yes Yes No No
wisdom:assistant
  • AWS::Wisdom::Assistant

Yes Yes Yes Yes
wisdom:quick-response
  • AWS::Wisdom::QuickResponse

Yes No No No
wisdom:ai-agent
  • AWS::Wisdom::AIAgent

Yes No Yes Yes
wisdom:message-template
  • AWS::Wisdom::MessageTemplate

Yes No No No
wisdom:knowledge-base
  • AWS::Wisdom::KnowledgeBase

Yes Yes Yes Yes
wisdom:session
  • N/A

Yes Yes No No
wisdom:ai-prompt
  • AWS::Wisdom::AIPrompt

Yes No No No
wisdom:ai-guardrail
  • AWS::Wisdom::AIGuardrail

Yes No No No
wisdom:association
  • AWS::Wisdom::AssistantAssociation

Yes Yes Yes Yes
wisdom:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon QLDB [qldb] qldb:ledger
  • AWS::QLDB::Ledger

Yes No No No
qldb:stream
  • AWS::QLDB::Stream

Yes No No No
qldb:ledger/table
  • N/A

Yes No No No
Amazon QuickSight [quicksight] quicksight:vpcconnection
  • AWS::QuickSight::VPCConnection

Yes No No No
quicksight:analysis
  • AWS::QuickSight::Analysis

Yes No No No
quicksight:folder
  • AWS::QuickSight::Folder

Yes No No No
quicksight:custompermissions
  • AWS::QuickSight::CustomPermissions

Yes No No No
quicksight:brand
  • N/A

Yes No No No
quicksight:user
  • N/A

Yes No No No
quicksight:datasource
  • AWS::QuickSight::DataSource

Yes No No No
quicksight:template
  • AWS::QuickSight::Template

Yes No No No
quicksight:topic
  • AWS::QuickSight::Topic

Yes No No No
quicksight:email-customization-template
  • N/A

Yes No No No
quicksight:theme
  • AWS::QuickSight::Theme

Yes No No No
quicksight:customization
  • N/A

Yes No No No
quicksight:flow
  • N/A

Yes No No No
quicksight:action-connector
  • N/A

Yes No No No
quicksight:namespace
  • N/A

Yes No No No
quicksight:dataset
  • AWS::QuickSight::DataSet

Yes No No No
quicksight:dashboard
  • AWS::QuickSight::Dashboard

Yes No No No
Amazon RDS [neptune-graph] neptune-graph:export-task
  • N/A

Yes No No No
neptune-graph:graph
  • AWS::NeptuneGraph::Graph

Yes No No No
neptune-graph:graph-snapshot
  • N/A

Yes No No No
Amazon RDS [rds] rds:cluster-snapshot
  • N/A

Yes No No No
rds:db
  • AWS::DocDB::DBInstance

  • AWS::RDS::DBInstance

Yes No Yes Yes
rds:globalcluster
  • AWS::RDS::GlobalCluster

Yes No No No
rds:global-cluster
  • AWS::RDS::GlobalCluster

Yes No Yes Yes
rds:subgrp
  • AWS::RDS::DBSubnetGroup

Yes Yes Yes Yes
rds:cluster-auto-backup
  • N/A

Yes No No No
rds:deployment
  • N/A

Yes No No No
rds:pg
  • AWS::Neptune::DBParameterGroup

Yes Yes Yes Yes
rds:cluster-pg
  • AWS::Neptune::DBClusterParameterGroup

Yes Yes Yes Yes
rds:snapshot-tenant-database
  • N/A

Yes No No No
rds:es
  • AWS::DocDB::EventSubscription

Yes Yes Yes Yes
rds:pg
  • AWS::RDS::DBParameterGroup

Yes Yes Yes Yes
rds:target-group
  • AWS::RDS::DBProxyTargetGroup

Yes Yes Yes Yes
rds:cluster
  • AWS::DocDB::DBCluster

Yes No Yes Yes
rds:snapshot
  • N/A

Yes No No No
rds:db-proxy
  • AWS::RDS::DBProxy

Yes Yes Yes Yes
rds:es
  • AWS::RDS::EventSubscription

Yes Yes Yes Yes
rds:cluster-endpoint
  • N/A

Yes Yes No No
rds:integration
  • AWS::RDS::Integration

Yes No No No
rds:ri
  • N/A

Yes Yes No No
rds:auto-backup
  • N/A

Yes No No No
rds:secgrp
  • AWS::RDS::DBSecurityGroup

Yes Yes Yes Yes
rds:cev
  • AWS::RDS::CustomDBEngineVersion

Yes No Yes Yes
rds:db-proxy-endpoint
  • AWS::RDS::DBProxyEndpoint

Yes Yes Yes Yes
rds:cluster-pg
  • AWS::RDS::DBClusterParameterGroup

Yes Yes Yes Yes
rds:optgrp
  • AWS::RDS::OptionGroup

Yes No No No
rds:og
  • AWS::RDS::OptionGroup

Yes Yes Yes Yes
rds:db
  • AWS::Neptune::DBInstance

Yes No Yes Yes
rds:subgrp
  • AWS::DocDB::DBSubnetGroup

Yes Yes Yes Yes
rds:tenant-database
  • N/A

Yes No No No
rds:subgrp
  • AWS::Neptune::DBSubnetGroup

Yes Yes Yes Yes
rds:cluster-pg
  • AWS::DocDB::DBClusterParameterGroup

Yes Yes Yes Yes
rds:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Redshift Serverless [redshift-serverless] redshift-serverless:recoverypoint
  • N/A

Yes No No No
redshift-serverless:workgroup
  • AWS::RedshiftServerless::Workgroup

Yes Yes Yes Yes
redshift-serverless:namespace
  • AWS::RedshiftServerless::Namespace

Yes Yes Yes Yes
redshift-serverless:snapshot
  • AWS::RedshiftServerless::Snapshot

Yes No No No
redshift-serverless:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Redshift [redshift] redshift:eventsubscription
  • AWS::Redshift::EventSubscription

Yes Yes Yes Yes
redshift:hsmconfiguration
  • N/A

Yes Yes No No
redshift:subnetgroup
  • AWS::Redshift::ClusterSubnetGroup

Yes Yes Yes Yes
redshift:snapshotcopygrant
  • N/A

Yes Yes No No
redshift:qev2idcapplication
  • N/A

Yes No No No
redshift:securitygroupingress
  • AWS::Redshift::ClusterSecurityGroupIngress

Yes No No No
redshift:namespace
  • N/A

Yes No No No
redshift:snapshotschedule
  • N/A

Yes Yes No No
redshift:securitygroup
  • AWS::Redshift::ClusterSecurityGroup

Yes No No No
redshift:hsmclientcertificate
  • N/A

Yes Yes No No
redshift:redshiftidcapplication
  • N/A

Yes No No No
redshift:cluster
  • AWS::Redshift::Cluster

Yes Yes Yes Yes
redshift:snapshot
  • N/A

Yes Yes No No
redshift:usagelimit
  • N/A

Yes No No No
redshift:integration
  • AWS::Redshift::Integration

Yes No Yes Yes
redshift:parametergroup
  • AWS::Redshift::ClusterParameterGroup

Yes Yes Yes Yes
redshift:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Rekognition [rekognition] rekognition:project/version
  • N/A

Yes No No No
rekognition:project
  • AWS::Rekognition::Project

Yes No No No
rekognition:collection
  • AWS::Rekognition::Collection

Yes No Yes Yes
rekognition:streamprocessor
  • AWS::Rekognition::StreamProcessor

Yes No No No
Amazon Route 53 Profiles [route53profiles] route53profiles:profile-association
  • AWS::Route53Profiles::ProfileAssociation

Yes No Yes Yes
route53profiles:profile
  • AWS::Route53Profiles::Profile

Yes No Yes Yes
Amazon Route 53 Recovery Controls [route53-recovery-control] route53-recovery-control:controlpanel/safetyrule
  • AWS::Route53RecoveryControl::SafetyRule

Yes No Yes Yes
route53-recovery-control:cluster
  • AWS::Route53RecoveryControl::Cluster

Yes No Yes Yes
route53-recovery-control:controlpanel
  • AWS::Route53RecoveryControl::ControlPanel

Yes No Yes Yes
Amazon Route 53 Recovery Readiness [route53-recovery-readiness] route53-recovery-readiness:recovery-group
  • AWS::Route53RecoveryReadiness::RecoveryGroup

Yes No Yes Yes
route53-recovery-readiness:readiness-check
  • AWS::Route53RecoveryReadiness::ReadinessCheck

Yes No Yes Yes
route53-recovery-readiness:cell
  • AWS::Route53RecoveryReadiness::Cell

Yes No Yes Yes
route53-recovery-readiness:resource-set
  • AWS::Route53RecoveryReadiness::ResourceSet

Yes No Yes Yes
Amazon Route 53 Resolver [route53resolver] route53resolver:resolver-rule
  • AWS::Route53Resolver::ResolverRule

Yes Yes Yes Yes
route53resolver:firewall-domain-list
  • AWS::Route53Resolver::FirewallDomainList

Yes No Yes Yes
route53resolver:resolver-endpoint
  • AWS::Route53Resolver::ResolverEndpoint

Yes Yes Yes Yes
route53resolver:resolver-query-log-config
  • AWS::Route53Resolver::ResolverQueryLoggingConfig

Yes No Yes Yes
route53resolver:firewall-rule-group
  • AWS::Route53Resolver::FirewallRuleGroup

Yes No Yes Yes
route53resolver:firewall-rule-group-association
  • AWS::Route53Resolver::FirewallRuleGroupAssociation

Yes No Yes Yes
route53resolver:outpost-resolver
  • AWS::Route53Resolver::OutpostResolver

Yes No No No
route53resolver:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon Route 53 [route53] route53:healthcheck
  • AWS::Route53::HealthCheck

Yes No Yes Yes
route53:domain
  • N/A

Yes No No No
route53:hostedzone
  • AWS::Route53::HostedZone

Yes Yes Yes Yes
route53:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon S3 Express [s3express] s3express:accesspoint
  • AWS::S3Express::AccessPoint

Yes No No No
s3express:bucket
  • AWS::S3Express::DirectoryBucket

Yes No Yes Yes
Amazon S3 Glacier [glacier] glacier:vaults
  • N/A

Yes No No No
Amazon S3 Tables [s3tables] s3tables:TableBucket
  • AWS::S3Tables::TableBucket

Yes No No No
s3tables:table
  • AWS::S3Tables::Table

Yes No No No
Amazon S3 Vectors [s3vectors] s3vectors:index
  • AWS::S3Vectors::Index

Yes No No No
s3vectors:vectorbucket
  • AWS::S3Vectors::VectorBucket

Yes No No No
Amazon S3 [s3] s3:accessgrantsinstance
  • AWS::S3::AccessGrantsInstance

Yes No No No
s3:bucket
  • AWS::S3::Bucket

Yes Yes Yes Yes
s3:job
  • N/A

Yes No No No
s3:access-grants
  • AWS::S3::AccessGrant

Yes No No No
s3:storage-lens
  • AWS::S3::StorageLens

Yes Yes Yes Yes
s3:access-grants/location
  • AWS::S3::AccessGrantsLocation

Yes No No No
s3:accessgrantslocation
  • AWS::S3::AccessGrantsLocation

Yes No No No
s3:storage-lens-group
  • AWS::S3::StorageLensGroup

Yes Yes Yes Yes
s3:accesspoint
  • AWS::S3::AccessPoint

Yes No Yes Yes
s3:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon SES [ses] ses:identity
  • AWS::SES::EmailIdentity

  • AWS::PinpointEmail::Identity

Yes No Yes Yes
ses:dedicated-ip-pool
  • AWS::SES::DedicatedIpPool

  • AWS::PinpointEmail::DedicatedIpPool

Yes No Yes Yes
ses:contact-list
  • AWS::SES::ContactList

Yes No Yes Yes
ses:mailmanager-ingress-point
  • AWS::SES::MailManagerIngressPoint

Yes No Yes Yes
ses:configuration-set
  • AWS::SES::ConfigurationSet

  • AWS::PinpointEmail::ConfigurationSet

Yes No Yes Yes
ses:mailmanager-address-list
  • AWS::SES::MailManagerAddressList

Yes No No No
ses:multi-region-endpoint
  • AWS::SES::MultiRegionEndpoint

Yes No No No
ses:mailmanager-archive
  • AWS::SES::MailManagerArchive

Yes No Yes Yes
ses:mailmanager-traffic-policy
  • AWS::SES::MailManagerTrafficPolicy

Yes No Yes Yes
ses:mailmanager-rule-set
  • AWS::SES::MailManagerRuleSet

Yes No Yes Yes
Amazon SNS [sns] sns:topic
  • AWS::SNS::Topic

Yes Yes Yes Yes
sns:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon SQS [sqs] sqs:queue
  • AWS::SQS::Queue

Yes Yes Yes Yes
sqs:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Amazon SageMaker [sagemaker] sagemaker:image
  • AWS::SageMaker::Image

Yes No Yes Yes
sagemaker:model-quality-job-definition
  • AWS::SageMaker::ModelQualityJobDefinition

Yes No Yes Yes
sagemaker:monitoring-schedule
  • AWS::SageMaker::MonitoringSchedule

Yes No Yes Yes
sagemaker:transform-job
  • N/A

Yes No No No
sagemaker:code-repository
  • AWS::SageMaker::CodeRepository

Yes No Yes Yes
sagemaker:imageversion
  • AWS::SageMaker::ImageVersion

Yes No No No
sagemaker:experiment
  • N/A

Yes Yes No No
sagemaker:action
  • N/A

Yes Yes No No
sagemaker:hyper-parameter-tuning-job
  • N/A

Yes No No No
sagemaker:model-bias-job-definition
  • AWS::SageMaker::ModelBiasJobDefinition

Yes No Yes Yes
sagemaker:app-image-config
  • AWS::SageMaker::AppImageConfig

Yes Yes Yes Yes
sagemaker:model
  • AWS::SageMaker::Model

Yes No Yes Yes
sagemaker:training-plan
  • N/A

Yes No No No
sagemaker:workforce
  • N/A

Yes No No No
sagemaker:model-explainability-job-definition
  • AWS::SageMaker::ModelExplainabilityJobDefinition

Yes No Yes Yes
sagemaker:model-card
  • AWS::SageMaker::ModelCard

Yes No Yes Yes
sagemaker:model-card-export-job
  • N/A

Yes No No No
sagemaker:notebook-instance-lifecycle-config
  • AWS::SageMaker::NotebookInstanceLifecycleConfig

Yes No Yes Yes
sagemaker:notebook-instance
  • AWS::SageMaker::NotebookInstance

Yes No Yes Yes
sagemaker:compilation-job
  • N/A

Yes No No No
sagemaker:model-package
  • AWS::SageMaker::ModelPackage

Yes Yes Yes Yes
sagemaker:data-quality-job-definition
  • AWS::SageMaker::DataQualityJobDefinition

Yes No Yes Yes
sagemaker:user-profile
  • AWS::SageMaker::UserProfile

Yes No Yes Yes
sagemaker:domain
  • AWS::SageMaker::Domain

Yes No Yes Yes
sagemaker:mlflow-tracking-server
  • AWS::SageMaker::MlflowTrackingServer

Yes No Yes Yes
sagemaker:edge-packaging-job
  • N/A

Yes No No No
sagemaker:cluster
  • AWS::SageMaker::Cluster

Yes No Yes Yes
sagemaker:device
  • AWS::SageMaker::Device

Yes No No No
sagemaker:feature-group
  • AWS::SageMaker::FeatureGroup

Yes No Yes Yes
sagemaker:artifact
  • N/A

Yes Yes No No
sagemaker:studio-lifecycle-config
  • AWS::SageMaker::StudioLifecycleConfig

Yes No Yes Yes
sagemaker:cluster-scheduler-config
  • N/A

Yes No No No
sagemaker:automl-job
  • N/A

Yes No No No
sagemaker:app
  • AWS::SageMaker::App

Yes No Yes Yes
sagemaker:space
  • AWS::SageMaker::Space

Yes No Yes Yes
sagemaker:inference-component
  • AWS::SageMaker::InferenceComponent

Yes No Yes Yes
sagemaker:endpoint
  • AWS::SageMaker::Endpoint

Yes No Yes Yes
sagemaker:workteam
  • AWS::SageMaker::Workteam

Yes No Yes Yes
sagemaker:inference-experiment
  • AWS::SageMaker::InferenceExperiment

Yes No Yes Yes
sagemaker:optimization-job
  • N/A

Yes No No No
sagemaker:algorithm
  • N/A

Yes No No No
sagemaker:pipeline/execution
  • N/A

Yes No No No
sagemaker:pipeline-execution
  • N/A

Yes No No No
sagemaker:project
  • AWS::SageMaker::Project

Yes Yes Yes Yes
sagemaker:model-package-group
  • AWS::SageMaker::ModelPackageGroup

Yes Yes Yes Yes
sagemaker:labeling-job
  • N/A

Yes No No No
sagemaker:edge-deployment
  • N/A

Yes No No No
sagemaker:training-job
  • N/A

Yes Yes No No
sagemaker:compute-quota
  • N/A

Yes No No No
sagemaker:reserved-capacity
  • N/A

Yes No No No
sagemaker:context
  • N/A

Yes Yes No No
sagemaker:partner-app
  • AWS::SageMaker::PartnerApp

Yes No No No
sagemaker:experiment-trial
  • N/A

Yes No No No
sagemaker:hub
  • N/A

Yes No No No
sagemaker:flow-definition
  • N/A

Yes Yes No No
sagemaker:pipeline
  • AWS::SageMaker::Pipeline

Yes Yes Yes Yes
sagemaker:lineage-group
  • N/A

Yes No No No
sagemaker:inference-recommendations-job
  • N/A

Yes No No No
sagemaker:device-fleet
  • AWS::SageMaker::DeviceFleet

Yes No No No
sagemaker:hub-content
  • N/A

Yes No No No
sagemaker:experiment-trial-component
  • N/A

Yes No No No
sagemaker:endpoint-config
  • AWS::SageMaker::EndpointConfig

Yes No Yes Yes
sagemaker:processing-job
  • AWS::SageMaker::ProcessingJob

Yes Yes Yes Yes
sagemaker:human-task-ui
  • N/A

Yes Yes No No
Amazon SageMaker geospatial capabilities [sagemaker-geospatial] sagemaker-geospatial:raster-data-collection
  • N/A

Yes No No No
sagemaker-geospatial:earth-observation-job
  • N/A

Yes No No No
sagemaker-geospatial:vector-enrichment-job
  • N/A

Yes No No No
Amazon Security Lake [securitylake] securitylake:data-lake
  • AWS::SecurityLake::DataLake

Yes Yes No No
securitylake:subscriber
  • AWS::SecurityLake::Subscriber

Yes Yes No No
securitylake:ALL_SUPPORTED
  • N/A

No Yes No No
Amazon Simple Workflow Service [swf] swf:domain
  • N/A

Yes No No No
Amazon Textract [textract] textract:adapters
  • N/A

Yes Yes No No
textract:ALL_SUPPORTED
  • N/A

No Yes No No
Amazon Timestream InfluxDB [timestream-influxdb] timestream-influxdb:db-instance
  • N/A

Yes No No No
Amazon Timestream [timestream] timestream:database
  • AWS::Timestream::Database

Yes No Yes Yes
timestream:database/table
  • AWS::Timestream::Table

Yes No Yes Yes
timestream:scheduled-query
  • AWS::Timestream::ScheduledQuery

Yes No Yes Yes
Amazon Transcribe [transcribe] transcribe:vocabulary-filter
  • N/A

Yes No No No
transcribe:vocabulary
  • N/A

Yes No No No
transcribe:transcription-job
  • N/A

Yes No No No
transcribe:medical-transcription-job
  • N/A

Yes No No No
transcribe:medical-vocabulary
  • N/A

Yes No No No
transcribe:medical-scribe-job
  • N/A

Yes No No No
transcribe:language-model
  • N/A

Yes No No No
Amazon Translate [translate] translate:parallel-data
  • N/A

Yes No No No
translate:terminology
  • N/A

Yes No No No
Amazon VPC Lattice [vpc-lattice] vpc-lattice:service/listener/rule
  • AWS::VpcLattice::Rule

Yes No Yes Yes
vpc-lattice:servicenetworkserviceassociation
  • AWS::VpcLattice::ServiceNetworkServiceAssociation

Yes No Yes Yes
vpc-lattice:service/listener
  • AWS::VpcLattice::Listener

Yes No Yes Yes
vpc-lattice:accesslogsubscription
  • AWS::VpcLattice::AccessLogSubscription

Yes No Yes Yes
vpc-lattice:servicenetworkresourceassociation
  • AWS::VpcLattice::ServiceNetworkResourceAssociation

Yes No No No
vpc-lattice:domainverification
  • N/A

Yes No No No
vpc-lattice:resourceendpointassociation
  • N/A

Yes No No No
vpc-lattice:servicenetworkvpcassociation
  • AWS::VpcLattice::ServiceNetworkVpcAssociation

Yes No Yes Yes
vpc-lattice:service
  • AWS::VpcLattice::Service

Yes No Yes Yes
vpc-lattice:servicenetwork
  • AWS::VpcLattice::ServiceNetwork

Yes No Yes Yes
vpc-lattice:resourceconfiguration
  • AWS::VpcLattice::ResourceConfiguration

Yes No No No
vpc-lattice:targetgroup
  • AWS::VpcLattice::TargetGroup

Yes No Yes Yes
vpc-lattice:resourcegateway
  • AWS::VpcLattice::ResourceGateway

Yes No No No
Amazon Verified Permissions [verifiedpermissions] verifiedpermissions:policy-store
  • AWS::VerifiedPermissions::PolicyStore

Yes No Yes Yes
Amazon WorkLink [worklink] worklink:fleet
  • N/A

Yes Yes No No
Amazon WorkMail [workmail] workmail:organization
  • N/A

Yes No No No
Amazon WorkSpaces Secure Browser [workspaces-web] workspaces-web:portal
  • AWS::WorkSpacesWeb::Portal

Yes No Yes Yes
workspaces-web:ipaccesssettings
  • AWS::WorkSpacesWeb::IpAccessSettings

Yes No Yes Yes
workspaces-web:useraccessloggingsettings
  • AWS::WorkSpacesWeb::UserAccessLoggingSettings

Yes No Yes Yes
workspaces-web:dataprotectionsettings
  • AWS::WorkSpacesWeb::DataProtectionSettings

Yes No No No
workspaces-web:sessionlogger
  • AWS::WorkSpacesWeb::SessionLogger

Yes No No No
workspaces-web:usersettings
  • AWS::WorkSpacesWeb::UserSettings

Yes No Yes Yes
workspaces-web:browsersettings
  • AWS::WorkSpacesWeb::BrowserSettings

Yes No Yes Yes
workspaces-web:identityprovider
  • AWS::WorkSpacesWeb::IdentityProvider

Yes No No No
workspaces-web:networksettings
  • AWS::WorkSpacesWeb::NetworkSettings

Yes No Yes Yes
workspaces-web:truststore
  • AWS::WorkSpacesWeb::TrustStore

Yes No Yes Yes
Amazon WorkSpaces Secure Browser [workspacesweb] workspacesweb:identityprovider
  • AWS::WorkSpacesWeb::IdentityProvider

Yes No No No
Amazon WorkSpaces Thin Client [thinclient] thinclient:environment
  • AWS::WorkSpacesThinClient::Environment

Yes No No No
thinclient:environments
  • AWS::WorkSpacesThinClient::Environment

Yes No No No
thinclient:device
  • N/A

Yes No No No
thinclient:devices
  • N/A

Yes No No No
thinclient:softwareset
  • N/A

Yes No No No
Amazon WorkSpaces [workspaces] workspaces:directory
  • N/A

Yes Yes No No
workspaces:workspace
  • AWS::WorkSpaces::Workspace

Yes Yes No No
workspaces:workspacebundle
  • N/A

Yes Yes No No
workspaces:workspaceimage
  • N/A

Yes Yes No No
workspaces:connectionalias
  • AWS::WorkSpaces::ConnectionAlias

Yes Yes Yes Yes
workspaces:workspacespool
  • AWS::WorkSpaces::WorkspacesPool

Yes No Yes Yes
workspaces:workspaceipgroup
  • N/A

Yes Yes No No
workspaces:ALL_SUPPORTED
  • N/A

No Yes Yes Yes
Deprecated - AWS IoT 1-Click [iot1click] iot1click:devices
  • N/A

Yes No No No
iot1click:projects
  • N/A

Yes No No No
Deprecated AWS IoT RoboRunner [iotroborunner] iotroborunner:site
  • N/A

Yes No No No
iotroborunner:site/worker-fleet
  • N/A

Yes No No No
Multi-party approval [mpa] mpa:approval-team
  • AWS::MPA::ApprovalTeam

Yes No No No
mpa:identity-source
  • AWS::MPA::IdentitySource

Yes No No No
Service Quotas [servicequotas] servicequotas:quota
  • N/A

Yes No No No
route53globalresolver [route53globalresolver] route53globalresolver:firewall-domain-list
  • N/A

Yes No No No