View a markdown version of this page

Supported Resources - AMS Advanced Application Developer's Guide

End of support notice: On June 30, 2027, AWS will end support for AMS Advanced. After June 30, 2027, you will no longer be able to access the AMS Advanced console or AMS Advanced resources. For more information, see AMS Advanced end of support.

Supported Resources

The following AWS resources are supported in the AMS CloudFormation ingest process.

CloudFormation Ingest Stack: Supported resources

The instance operating system must be supported by AMS workload ingestion. Only those AWS resources listed here are supported.

  • Amazon API Gateway

    • AWS::ApiGateway::Account

    • AWS::ApiGateway::ApiKey

    • AWS::ApiGateway::Authorizer

    • AWS::ApiGateway::BasePathMapping

    • AWS::ApiGateway::ClientCertificate

    • AWS::ApiGateway::Deployment

    • AWS::ApiGateway::DocumentationPart

    • AWS::ApiGateway::DocumentationVersion

    • AWS::ApiGateway::DomainName

    • AWS::ApiGateway::GatewayResponse

    • AWS::ApiGateway::Method

    • AWS::ApiGateway::Model

    • AWS::ApiGateway::RequestValidator

    • AWS::ApiGateway::Resource

    • AWS::ApiGateway::RestApi

    • AWS::ApiGateway::Stage

    • AWS::ApiGateway::UsagePlan

    • AWS::ApiGateway::UsagePlanKey

    • AWS::ApiGateway::VpcLink

  • Amazon API Gateway V2

    • AWS::ApiGatewayV2::Api

    • AWS::ApiGatewayV2::ApiGatewayManagedOverrides

    • AWS::ApiGatewayV2::ApiMapping

    • AWS::ApiGatewayV2::Authorizer

    • AWS::ApiGatewayV2::Deployment

    • AWS::ApiGatewayV2::DomainName

    • AWS::ApiGatewayV2::Integration

    • AWS::ApiGatewayV2::IntegrationResponse

    • AWS::ApiGatewayV2::Model

    • AWS::ApiGatewayV2::Route

    • AWS::ApiGatewayV2::RouteResponse

    • AWS::ApiGatewayV2::Stage

    • AWS::ApiGatewayV2::VpcLink

  • AWS AppSync

    • AWS::AppSync::ApiCache

    • AWS::AppSync::ApiKey

    • AWS::AppSync::DataSource

    • AWS::AppSync::FunctionConfiguration

    • AWS::AppSync::GraphQLApi

    • AWS::AppSync::GraphQLSchema

    • AWS::AppSync::Resolver

  • Amazon Athena

    • AWS::Athena::NamedQuery

    • AWS::Athena::WorkGroup

  • AWS Backup

    • AWS::Backup::BackupVault

  • Amazon CloudFront

    • AWS::CloudFront::Distribution

    • AWS::CloudFront::CloudFrontOriginAccessIdentity

    • AWS::CloudFront::StreamingDistribution

  • Amazon CloudWatch

    • AWS::CloudWatch::Alarm

    • AWS::CloudWatch::AnomalyDetector

    • AWS::CloudWatch::CompositeAlarm

    • AWS::CloudWatch::Dashboard

    • AWS::CloudWatch::InsightRule

  • Amazon CloudWatch Logs

    • AWS::Logs::LogGroup

    • AWS::Logs::LogStream

    • AWS::Logs::MetricFilter

    • AWS::Logs::SubscriptionFilter

  • Amazon Cognito

    • AWS::Cognito::IdentityPool

    • AWS::Cognito::IdentityPoolRoleAttachment

    • AWS::Cognito::UserPool

    • AWS::Cognito::UserPoolClient

    • AWS::Cognito::UserPoolDomain

    • AWS::Cognito::UserPoolGroup

    • AWS::Cognito::UserPoolIdentityProvider

    • AWS::Cognito::UserPoolResourceServer

    • AWS::Cognito::UserPoolRiskConfigurationAttachment

    • AWS::Cognito::UserPoolUICustomizationAttachment

    • AWS::Cognito::UserPoolUser

    • AWS::Cognito::UserPoolUserToGroupAttachment

  • Amazon DocumentDB

    • AWS::DocDB::DBCluster

    • AWS::DocDB::DBClusterParameterGroup

    • AWS::DocDB::DBInstance

    • AWS::DocDB::DBSubnetGroup

  • Amazon DynamoDB

    • AWS::DynamoDB::Table

  • Amazon EC2

    • AWS::EC2::Volume

    • AWS::EC2::VolumeAttachment

    • AWS::EC2::Instance

    • AWS::EC2::EIP

    • AWS::EC2::EIPAssociation

    • AWS::EC2::NetworkInterface

    • AWS::EC2::NetworkInterfaceAttachment

    • AWS::EC2::SecurityGroup

    • AWS::EC2::SecurityGroupIngress

    • AWS::EC2::SecurityGroupEgress

    • AWS::EC2::LaunchTemplate

  • AWS Batch

    • AWS::Batch::ComputeEnvironment

    • AWS::Batch::JobDefinition

    • AWS::Batch::JobQueue

  • Amazon Elastic Container Registry (ECR)

    • AWS::ECR::Repository

  • Amazon Elastic Container Service (ECS) (Fargate)

    • AWS::ECS::CapacityProvider

    • AWS::ECS::Cluster

    • AWS::ECS::PrimaryTaskSet

    • AWS::ECS::Service

    • AWS::ECS::TaskDefinition

    • AWS::ECS::TaskSet

  • Amazon Elastic File System (EFS)

    • AWS::EFS::FileSystem

    • AWS::EFS::MountTarget

  • Amazon ElastiCache

    • AWS::ElastiCache::CacheCluster

    • AWS::ElastiCache::ParameterGroup

    • AWS::ElastiCache::ReplicationGroup

    • AWS::ElastiCache::SecurityGroup

    • AWS::ElastiCache::SecurityGroupIngress

    • AWS::ElastiCache::SubnetGroup

  • Amazon EventBridge

    • AWS::Events::EventBus

    • AWS::Events::EventBusPolicy

    • AWS::Events::Rule

  • Amazon FSx

    • AWS::FSx::FileSystem

  • Amazon Inspector

    • AWS::Inspector::AssessmentTarget

    • AWS::Inspector::AssessmentTemplate

    • AWS::Inspector::ResourceGroup

  • Amazon Kinesis Data Analytics

    • AWS::KinesisAnalytics::Application

    • AWS::KinesisAnalytics::ApplicationOutput

    • AWS::KinesisAnalytics::ApplicationReferenceDataSource

  • Amazon Kinesis Data Firehose

    • AWS::KinesisFirehose::DeliveryStream

  • Amazon Kinesis Data Streams

    • AWS::Kinesis::Stream

    • AWS::Kinesis::StreamConsumer

  • Amazon MQ

    • AWS::AmazonMQ::Broker

    • AWS::AmazonMQ::Configuration

    • AWS::AmazonMQ::ConfigurationAssociation

  • Amazon OpenSearch

    • AWS::OpenSearchService::Domain

  • Amazon Relational Database Service (RDS)

    • AWS::RDS::DBCluster

    • AWS::RDS::DBClusterParameterGroup

    • AWS::RDS::DBInstance

    • AWS::RDS::DBParameterGroup

    • AWS::RDS::DBSubnetGroup

    • AWS::RDS::EventSubscription

    • AWS::RDS::OptionGroup

  • Amazon Route 53

    • AWS::Route53::HealthCheck

    • AWS::Route53::HostedZone

    • AWS::Route53::RecordSet

    • AWS::Route53::RecordSetGroup

    • AWS::Route53Resolver::ResolverRule

    • AWS::Route53Resolver::ResolverRuleAssociation

  • Amazon S3

    • AWS::S3::Bucket

  • Amazon Sagemaker

    • AWS::SageMaker::CodeRepository

    • AWS::SageMaker::Endpoint

    • AWS::SageMaker::EndpointConfig

    • AWS::SageMaker::Model

    • AWS::SageMaker::NotebookInstance

    • AWS::SageMaker::NotebookInstanceLifecycleConfig

    • AWS::SageMaker::Workteam

  • Amazon Simple Email Service (SES)

    • AWS::SES::ConfigurationSet

    • AWS::SES::ConfigurationSetEventDestination

    • AWS::SES::ReceiptFilter

    • AWS::SES::ReceiptRule

    • AWS::SES::ReceiptRuleSet

    • AWS::SES::Template

  • Amazon SimpleDB

    • AWS::SDB::Domain

  • Amazon SNS

    • AWS::SNS::Subscription

    • AWS::SNS::Topic

  • Amazon SQS

    • AWS::SQS::Queue

  • Amazon WorkSpaces

    • AWS::WorkSpaces::Workspace

  • Application AutoScaling

    • AWS::ApplicationAutoScaling::ScalableTarget

    • AWS::ApplicationAutoScaling::ScalingPolicy

  • Amazon EC2 AutoScaling

    • AWS::AutoScaling::AutoScalingGroup

    • AWS::AutoScaling::LaunchConfiguration

    • AWS::AutoScaling::LifecycleHook

    • AWS::AutoScaling::ScalingPolicy

    • AWS::AutoScaling::ScheduledAction

  • AWS Certificate Manager

    • AWS::CertificateManager::Certificate

  • AWS CloudFormation

    • AWS::CloudFormation::CustomResource

    • AWS::CloudFormation::Designer

    • AWS::CloudFormation::WaitCondition

    • AWS::CloudFormation::WaitConditionHandle

  • AWS CodeBuild

    • AWS::CodeBuild::Project

    • AWS::CodeBuild::ReportGroup

    • AWS::CodeBuild::SourceCredential

  • AWS CodeCommit

    • AWS::CodeCommit::Repository

  • AWS CodeDeploy

    • AWS::CodeDeploy::Application

    • AWS::CodeDeploy::DeploymentConfig

    • AWS::CodeDeploy::DeploymentGroup

  • AWS CodePipeline

    • AWS::CodePipeline::CustomActionType

    • AWS::CodePipeline::Pipeline

    • AWS::CodePipeline::Webhook

  • AWS Database Migration Service (DMS)

    • AWS::DMS::Certificate

    • AWS::DMS::Endpoint

    • AWS::DMS::EventSubscription

    • AWS::DMS::ReplicationInstance

    • AWS::DMS::ReplicationSubnetGroup

    • AWS::DMS::ReplicationTask

    The MongoDbSettings property in AWS::DMS::Endpoint resource is not allowed.

    The following properties are only allowed if they are resolved by AWS Secrets Manager: CertificatePem and CertificateWallet properties in the AWS::DMS::Certificate resource, and the Password property in the AWS::DMS::Endpoint resource.

  • AWS Elastic Load Balancing - Application Load Balancer / Network Load Balancer

    • AWS::ElasticLoadBalancingV2::Listener

    • AWS::ElasticLoadBalancingV2::ListenerCertificate

    • AWS::ElasticLoadBalancingV2::ListenerRule

    • AWS::ElasticLoadBalancingV2::LoadBalancer

    • AWS::ElasticLoadBalancingV2::TargetGroup

  • AWS Elastic Load Balancing - Classic Load Balancer

    • AWS::ElasticLoadBalancing::LoadBalancer

  • AWS Elemental MediaConvert

    • AWS::MediaConvert::JobTemplate

    • AWS::MediaConvert::Preset

    • AWS::MediaConvert::Queue

  • AWS Elemental MediaStore

    • AWS::MediaStore::Container

  • AWS Identity and Access Management (IAM)

    • AWS::IAM::Role

  • AWS Managed Streaming for Apache Kafka (MSK)

    • AWS::MSK::Cluster

  • AWS Glue

    • AWS::Glue::Classifier

    • AWS::Glue::Connection

    • AWS::Glue::Crawler

    • AWS::Glue::Database

    • AWS::Glue::DataCatalogEncryptionSettings

    • AWS::Glue::DevEndpoint

    • AWS::Glue::Job

    • AWS::Glue::MLTransform

    • AWS::Glue::Partition

    • AWS::Glue::SecurityConfiguration

    • AWS::Glue::Table

    • AWS::Glue::Trigger

    • AWS::Glue::Workflow

  • AWS Key Management Service (KMS)

    • AWS::KMS::Key

    • AWS::KMS::Alias

  • AWS Lake Formation

    • AWS::LakeFormation::DataLakeSettings

    • AWS::LakeFormation::Permissions

    • AWS::LakeFormation::Resource

  • AWS Lambda

    • AWS::Lambda::Alias

    • AWS::Lambda::EventInvokeConfig

    • AWS::Lambda::EventSourceMapping

    • AWS::Lambda::Function

    • AWS::Lambda::LayerVersion

    • AWS::Lambda::LayerVersionPermission

    • AWS::Lambda::Permission

    • AWS::Lambda::Version

  • Amazon Redshift

    • AWS::Redshift::Cluster

    • AWS::Redshift::ClusterParameterGroup

    • AWS::Redshift::ClusterSubnetGroup

  • AWS Secrets Manager

    • AWS::SecretsManager::ResourcePolicy

    • AWS::SecretsManager::RotationSchedule

    • AWS::SecretsManager::Secret

    • AWS::SecretsManager::SecretTargetAttachment

  • AWS Security Hub

    • AWS::SecurityHub::Hub

  • AWS Step Functions

    • AWS::StepFunctions::Activity

    • AWS::StepFunctions::StateMachine

  • AWS Systems Manager (SSM)

    • AWS::SSM::Parameter

  • Amazon CloudWatch Synthetics

    • AWS::Synthetics::Canary

  • AWS Transfer Family

    • AWS::Transfer::Server

    • AWS::Transfer::User

  • AWS WAF

    • AWS::WAF::ByteMatchSet

    • AWS::WAF::IPSet

    • AWS::WAF::Rule

    • AWS::WAF::SizeConstraintSet

    • AWS::WAF::SqlInjectionMatchSet

    • AWS::WAF::WebACL

    • AWS::WAF::XssMatchSet

  • AWS WAF Regional

    • AWS::WAFRegional::ByteMatchSet

    • AWS::WAFRegional::GeoMatchSet

    • AWS::WAFRegional::IPSet

    • AWS::WAFRegional::RateBasedRule

    • AWS::WAFRegional::RegexPatternSet

    • AWS::WAFRegional::Rule

    • AWS::WAFRegional::SizeConstraintSet

    • AWS::WAFRegional::SqlInjectionMatchSet

    • AWS::WAFRegional::WebACL

    • AWS::WAFRegional::WebACLAssociation

    • AWS::WAFRegional::XssMatchSet

  • AWS WAFv2

    • AWS::WAFv2::IPSet

    • AWS::WAFv2::RegexPatternSet

    • AWS::WAFv2::RuleGroup

    • AWS::WAFv2::WebACL

    • AWS::WAFv2::WebACLAssociation