# Supported Resource Types for AWS Config
<a name="resource-config-reference"></a>

**Important**  
This page is updated on a monthly cadence at the beginning of each month.

AWS Config supports the following AWS resources types and resource relationships. 
+ For more detailed information about a resource type, see its reference information (such as syntax, properties and return values) in the [AWS resource and property types reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html) in the AWS CloudFormation User Guide.
+ For AWS Config recording, some AWS Regions support a subset of these resource types. For information on which resource types are supported in which Regions, see [Resource Coverage by Region Availability](https://docs.aws.amazon.com/config/latest/developerguide/what-is-resource-config-coverage.html).
+ Advanced queries for AWS Config supports a subset of these resource types. For a list of those supported resource types, see [Supported Resource Types for Advanced Queries](https://github.com/awslabs/aws-config-resource-schema/tree/master/config/properties/resource-types).
+ Proactive evaluation for AWS Config supports a subset of these resource types. For a list of those supported resource types, see [Supported Resource Types for Proactive Evaluation](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_components.html#evaluate-config_use-managed-rules-proactive-detective).
+ Periodic rules run without the configuration recorder being enabled since periodic rules do not depend on configuration items (CIs). For more information on the difference between change–triggered rules and periodic rules, see [Evaluation Mode and Trigger Types for AWS Config Rules](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html).

  This means that if you view the rule page, there is no listed CI or supported resource. If you select the resource ID, you will see the following error: `The provided resource ID and resource type cannot be found`. This is expected behavior.

**Note**  
**Region availability for resource types**  
Before specifying a resource type for AWS Config to track, check [Resource Coverage by Region Availability](https://docs.aws.amazon.com/config/latest/developerguide/what-is-resource-config-coverage.html) to see if the resource type is supported in the AWS Region where you set up AWS Config. If a resource type is supported by AWS Config in at least one Region, you can enable the recording of that resource type in all Regions supported by AWS Config, even if the specified resource type is not supported in the AWS Region where you set up AWS Config.  
**Tagging support for resource types**  
If a resource type does not support tagging or does not include tag information in its describe API response, AWS Config won't capture tag data in the configuration items (CIs) for that resource type. AWS Config will still record these resources. However, any functionality that relies on tag data won't work. This affects tag-based filtering, grouping, or compliance evaluation that relies on tag data.

## Amazon AppStream
<a name="amazonappstream"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon AppFlow
<a name="amazonappflow"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon AppFlow | AWS::AppFlow::Flow | NA | NA |  | 

## Amazon AppIntegrations
<a name="amazonappintegrations"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon API Gateway
<a name="amazonapigateway"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

To learn more about how AWS Config integrates with Amazon API Gateway, see [Monitoring API Gateway API Configuration with AWS Config](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-config.html).

## Amazon Athena
<a name="amazonathena"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Bedrock
<a name="amazonbedrock"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon CloudFront
<a name="amazoncloudfront"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon CloudWatch
<a name="amazoncloudwatch"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon CodeGuru
<a name="amazoncodeguru"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon CodeGuru Reviewer | AWS::CodeGuruReviewer::RepositoryAssociation | NA | NA |  | 
| Amazon CodeGuru Profiler | AWS::CodeGuruProfiler::ProfilingGroup | NA | NA |  | 

## Amazon Cognito
<a name="amazoncognito"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Comprehend
<a name="amazoncomprehend"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Comprehend | AWS::Comprehend::Flywheel | NA | NA |  | 

## Amazon Connect
<a name="amazonconnect"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Detective
<a name="amazondetective"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon DynamoDB
<a name="amazondynamodb"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon DynamoDB | AWS::DynamoDB::Table | NA | NA |  | 

## Amazon Elastic Compute Cloud
<a name="amazonelasticcomputecloud"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

\$1AWS Config records the configuration details of Dedicated hosts and the instances that you launch on them. As a result, you can use AWS Config as a data source when you report compliance with your server-bound software licenses. For example, you can view the configuration history of an instance and determine which Amazon Machine Image (AMI) it is based on. Then, you can look up the configuration history of the host, which includes details such as the numbers of sockets and cores, to check that the host complies with the license requirements of the AMI. For more information, see [Tracking Configuration Changes with AWS Config](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-hosts-aws-config.html) in the *Amazon EC2 User Guide*. 

\$1The EC2 SecurityGroup Properties definition contains IP CIDR blocks, which are converted to IP ranges internally, and may return unexpected results when trying to find a specific IP range. For workarounds to search for specific IP ranges, see [Limitations for Advanced Queries](https://docs.aws.amazon.com/config/latest/developerguide/querying-AWS-resources.html#query-limitations).

## Amazon Elastic Container Registry
<a name="amazonelasticcontainerregistry"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Elastic Container Service
<a name="amazonelasticcontainerservice"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

\$1This service currently only support the new Amazon Resource Name (ARN) format. For more information, see [Amazon Resource Names (ARNs) and IDs](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#ecs-resource-ids) in the ECS developer guide.

Old (not supported): `arn:aws:ecs:region:aws_account_id:service/service-name`

New (supported): `arn:aws:ecs:region:aws_account_id:service/cluster-name/service-name`

## Amazon Elastic File System
<a name="amazonelasticfilesystem"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Elastic Kubernetes Service
<a name="amazonelastickubernetesservice"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon EMR
<a name="amazonemr"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon EMR Serverless
<a name="amazonemrserverless"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon EMR Serverless | AWS::EMRServerless::Application | NA | NA |  | 

## Amazon EventBridge
<a name="amazoneventbridge"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Forecast
<a name="amazonforecast"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Fraud Detector
<a name="amazonfrauddetector"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon GameLift
<a name="amazongamelift"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon GuardDuty
<a name="amazonguardduty"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Inspector
<a name="amazoninspector"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Interactive Video Service
<a name="amazoninteractivevideoservice"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Keyspaces (for Apache Cassandra)
<a name="amazonkeyspaces"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Keyspaces (for Apache Cassandra) | AWS::Cassandra::Keyspace | NA | NA |  | 

## Amazon Location Service
<a name="amazonlocation"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Location Service | AWS::Location::APIKey | NA | NA |  | 

## Amazon OpenSearch Service
<a name="amazonopensearchservice"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

**Amazon OpenSearch Service rename**  
On September 8, 2021, Amazon Elasticsearch Service was renamed to Amazon OpenSearch Service. OpenSearch Service supports OpenSearch as well as legacy Elasticsearch OSS. For more information, see [Amazon OpenSearch Service - Summary of changes](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html).  
You might continue to see your data for `AWS::OpenSearch::Domain` under the existing `AWS::Elasticsearch::Domain` resource type for several weeks, even if you upgrade one or more domains to OpenSearch.

## Amazon Personalize
<a name="amazonpersonalize"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Pinpoint
<a name="amazonpinpoint"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Quantum Ledger Database (Amazon QLDB)
<a name="amazonqldb"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon QLDB | AWS::QLDB::Ledger | NA | NA |  | 

## Amazon Kendra
<a name="amazonkendra"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Kendra | AWS::Kendra::Index  | NA | NA |  | 

## Amazon Kinesis
<a name="amazonkinesis"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Lex
<a name="amazonlex"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Lightsail
<a name="amazonlightsail"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Lookout for Metrics
<a name="amazonlookoutmetrics"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Lookout for Metrics | AWS::LookoutMetrics::Alert | NA | NA |  | 

## Amazon Lookout for Vision
<a name="amazonlookoutvision"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Lookout for Vision | AWS::LookoutVision::Project | NA | NA |  | 

## Amazon Macie
<a name="amazonmacie"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Macie | AWS::Macie::Session | NA | NA |  | 

## Amazon Managed Grafana
<a name="amazonmanagedgrafana"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Managed Grafana | AWS::Grafana::Workspace | NA | NA |  | 

## Amazon Managed Service for Prometheus
<a name="amazonmanagedserviceforprometheus"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Managed Service for Prometheus | AWS::APS::RuleGroupsNamespace | NA | NA |  | 

## Amazon MemoryDB
<a name="amazonmemorydbforredis"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon MemoryDB | AWS::MemoryDB::SubnetGroup | NA | NA |  | 

## Amazon MQ
<a name="amazonmq"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon MQ | AWS::AmazonMQ::Broker | NA | NA |  | 

## Amazon Managed Streaming for Apache Kafka
<a name="amazonmsk"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Lex
<a name="amazonqbusiness"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Quick
<a name="amazonquicksight"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Redshift
<a name="amazonredshift"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Relational Database Service
<a name="amazonrds"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Route 53
<a name="amazonroute53"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon SageMaker AI
<a name="amazonsagemaker"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Simple Email Service
<a name="amazonsimpleemailservice"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon Simple Notification Service
<a name="amazonsimplenotificationservice"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Simple Notification Service | AWS::SNS::Topic | NA | NA |  | 

## Amazon Simple Queue Service
<a name="amazonsimplequeueservice"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Simple Queue Service | AWS::SQS::Queue | NA | NA |  | 

## Amazon Simple Storage Service
<a name="amazonsimplestorageservice"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

\$1If you configured AWS Config to record your S3 buckets, and are not receiving configuration change notifications, check that your S3 bucket policies have the required permissions. For more information, see [Managing Permissions for S3 Bucket Recording](iamrole-permissions.md#troubleshooting-recording-s3-bucket-policy). 

**Amazon S3 Bucket Attributes**

AWS Config also records the following attributes for the Amazon S3 bucket resource type.


****  

| Attributes | Description | 
| --- | --- | 
| AccelerateConfiguration | Transfer acceleration for data over long distances between your client and a bucket. | 
| BucketAcl | Access control list used to manage access to buckets and objects.  | 
| BucketPolicy | Policy that defines the permissions to the bucket.  | 
| CrossOriginConfiguration | Allow cross-origin requests to the bucket.  | 
| LifecycleConfiguration | Rules that define the lifecycle for objects in your bucket.  | 
| LoggingConfiguration | Logging used to track requests for access to the bucket.  | 
| NotificationConfiguration | Event notifications used to send alerts or trigger workflows for specified bucket events.  | 
| ReplicationConfiguration | Automatic, asynchronous copying of objects across buckets in different AWS Regions.  | 
| RequestPaymentConfiguration | Requester pays is enabled.  | 
| TaggingConfiguration | Tags added to the bucket to categorize. You can also use tagging to track billing.  | 
| WebsiteConfiguration | Static website hosting is enabled for the bucket. | 
| VersioningConfiguration | Versioning is enabled for objects in the bucket.  | 

For more information about the attributes, see [Bucket Configuration Options](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingBucket.html#bucket-config-options-intro) in the *Amazon Simple Storage Service User Guide*.

## Amazon Verified Permissions
<a name="amazonverifiedpermissions"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon Verified Permissions | AWS::VerifiedPermissions::IdentitySource | NA | NA | Recording CIs for resource deletion events may take up to 92 hours to reflect in AWS Config | 

## Amazon WorkSpaces
<a name="amazonworkspaces"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Amplify
<a name="awsamplify"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS AppConfig
<a name="awsappconfig"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS App Runner
<a name="awsapprunner"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS App Mesh
<a name="awsappmesh"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS AppSync
<a name="awsappsync"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Audit Manager
<a name="aws-audit-manager"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Auto Scaling
<a name="awsautoscaling"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS B2B Data Interchange
<a name="awsb2bi"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Backup
<a name="awsbackup"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

Due to how AWS Backup works, some of these resource types relate to the other AWS Backup resource types in this table.

`AWS::Backup::BackupPlan` is related to `AWS::Backup::BackupSelection` where a Backup Plan has many selections, and `AWS::Backup::BackupVault` is related to `AWS::Backup::RecoveryPoint` where an AWS Backup Vault has multiple recovery points.

For more information, see [Managing backups using backup plans](https://docs.aws.amazon.com/aws-backup/latest/devguide/about-backup-plans.html) and [Working with backup vaults](https://docs.aws.amazon.com/aws-backup/latest/devguide/vaults.html).

## AWS Batch
<a name="awsbatch"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Billing and Cost Management
<a name="awsbillingandcostmanagement"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS Billing and Cost Management | AWS::BCMDataExports::Export | NA | NA |  | 

## AWS Budgets
<a name="awsbudgets"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS Budgets | AWS::Budgets::BudgetsAction | NA | NA |  | 

## AWS Certificate Manager
<a name="awscertificatemanager"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS Certificate Manager | AWS::ACM::Certificate | NA | NA |  | 

## AWS Clean Rooms
<a name="awscleanrooms"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS CloudFormation
<a name="awscloudformation"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

\$1AWS Config records configuration changes to CloudFormation stacks and supported resource types in the stacks. AWS Config does not record configuration changes for resource types in the stack that are not yet supported. Unsupported resource types appear in the supplementary configuration section of the configuration item for the stack. 

## AWS CloudTrail
<a name="awscloudtrail"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Cloud9
<a name="awscloud9"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS Cloud9 | AWS::Cloud9::EnvironmentEC2 | NA | NA |  | 

**AWS Cloud9 access no longer available to new users**  
After careful consideration, we have made the decision to close new customer access to AWS Cloud9, effective July 25, 2024. AWS Cloud9 existing customers can continue to use the service as normal. AWS continues to invest in security, availability, and performance improvements for AWS Cloud9, but we do not plan to introduce new features. For more information, see [How to migrate from AWS Cloud9 to AWS IDE Toolkits or AWS CloudShell](https://aws.amazon.com/blogs/devops/how-to-migrate-from-aws-cloud9-to-aws-ide-toolkits-or-aws-cloudshell/).

## AWS Cloud Map
<a name="awscloudmap"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS CodeArtifact
<a name="awscodeartifact"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS CodeBuild
<a name="awscodebuild"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

\$1To learn more about how AWS Config integrates with AWS CodeBuild, see [Use AWS Config with AWS CodeBuild Sample](https://docs.aws.amazon.com/codebuild/latest/userguide/how-to-integrate-config.html).

## AWS CodeDeploy
<a name="awscodedeploy"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS CodePipeline
<a name="awscodepipeline"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

\$1AWS Config records configuration changes to CodePipeline pipelines and supported resource types in the pipelines. AWS Config does not record configuration changes for resource types in the pipelines that are not yet supported. Unsupported resource types such as `CodeCommit repository, CodeDeploy application, ECS cluster,` and `ECS service` appear in the supplementary configuration section of the configuration item for the stack. 

## AWS Config
<a name="awsconfig"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

\$1The relationship between `AWS::Config::ResourceCompliance` and a related resource depends on how `AWS::Config::ResourceCompliance` reports compliance for that specific resource type.

\$1`AWS::Config::ConfigurationRecorder` is a system resource type of AWS Config and recording of this resource type is enabled by default.

**Note**  
Recording for the `AWS::Config::ConformancePackCompliance` and `AWS::Config::ConfigurationRecorder` resource types come with no additional charge.

## AWS Cost Explorer
<a name="awscostexplorer"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Database Migration Service
<a name="awsdms"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS DataSync
<a name="awsdatasync"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Deadline Cloud
<a name="awsdeadlinecloud"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Device Farm
<a name="awsdevicefarm"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Elastic Beanstalk
<a name="awselasticbeanstalk"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Entity Resolution
<a name="awsentityresolution"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Fault Injection Service
<a name="awsfis"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS Fault Injection Service | AWS::FIS::ExperimentTemplate | NA | NA |  | 

## AWS Global Accelerator
<a name="awsglobalaccelerator"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Glue
<a name="awsglue"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Glue DataBrew
<a name="awsgluedatabrew"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Ground Station
<a name="aws-ground-station"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS HealthLake
<a name="amazonhealthlake"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS HealthLake | AWS::HealthLake::FHIRDatastore | NA | NA |  | 

## AWS Identity and Access Management (IAM)
<a name="awsiam"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

AWS Config includes inline policies with the configuration details that it records. For more information on inline policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#inline-policies) in the IAM User Guide.

## AWS IoT
<a name="awsiot"></a>

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Key Management Service
<a name="awskeymanagementservice"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Lambda
<a name="awslambda"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Mainframe Modernization
<a name="awsmainframemodernization"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS Mainframe Modernization | AWS::M2::Environment | NA | NA |  | 

## AWS Network Firewall
<a name="awsnetworkfirewall"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Network Manager
<a name="awsnetworkmanager"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Organizations
<a name="awsorganizations"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS HealthOmics
<a name="awshealthomics"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS HealthOmics | AWS::Omics::ReferenceStore | NA | NA |  | 

## AWS Panorama
<a name="awspanorama"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Private Certificate Authority
<a name="awsprivateca"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Resilience Hub
<a name="awsresiliencehub"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Resource Explorer
<a name="awsresourceexplorer"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Resource Groups
<a name="awsresourcegroups"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS Resource Groups | AWS::ResourceGroups::Group | NA | NA |  | 

## AWS RoboMaker
<a name="awsrobomaker"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Signer
<a name="awssigner"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS Signer | AWS::Signer::SigningProfile | NA | NA |  | 

## AWS Secrets Manager
<a name="awssecretsmanager"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Security Hub CSPM
<a name="awssecurityhub"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS Security Hub CSPM | AWS::SecurityHub::Standard | NA | NA |  | 

## AWS Service Catalog
<a name="awsservicecatalog"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

**Note**  
When you use AWS Service Catalog with AWS Config, configuration items show the child provisioned product's ARN instead of the parent product's ARN. This happens when a AWS Service Catalog provisioned product serves as a resource within a parent provisioned product through CloudFormation. The resource ID remains trackable through the AWS Config interfaces.

## AWS Shield
<a name="awsshield"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Step Functions
<a name="awsstepfunctions"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## Amazon EventBridge Scheduler
<a name="amazoneventbridgescheduler"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| Amazon EventBridge Scheduler | AWS::Scheduler::ScheduleGroup | NA | NA |  | 

## AWS Systems Manager
<a name="awssystemsmanager"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

\$1To learn more about managed instance inventory, see [Recording Software Configuration for Managed Instances with AWS Config](recording-managed-instance-inventory.md).

## AWS Transfer Family
<a name="awstransferfamily"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS WAF
<a name="awswaf"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS X-Ray
<a name="awsxray"></a>


****  

| AWS Service | Resource Type Value | Relationship | Related Resource | Notes | 
| --- | --- | --- | --- | --- | 
| AWS X-Ray | AWS::XRay::EncryptionConfig | NA | NA |  | 

## Elastic Load Balancing
<a name="awselasticloadbalancing"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Elemental MediaConnect
<a name="awsconnect"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Elemental MediaPackage
<a name="awselementalmediapackage"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Elemental MediaPackage V2
<a name="awselementalmediapackagev2"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)

## AWS Elemental MediaTailor
<a name="awselementalmediatailor"></a>


****  
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html)