Resource types you can search for with Resource Explorer - AWS Resource Explorer
Supported services and resource typesProgrammatically accessing the list of supported resource typesResource types that appear as other types

Resource types you can search for with Resource Explorer

Resource Explorer supports resource types across numerous AWS services.

Some resource types are identified by Amazon resource name (ARN) strings that share a common format with another resource type. When this happens, Resource Explorer can report such resources as that other resource type. For list of resource types affected by this issue, see Resource types that appear as other types.

At this time, tags attached to AWS Identity and Access Management (IAM) resources, such as roles or users, can't be used for searching.

If you have encrypted access to some of your resources, Resource Explorer is unable to discover them. You will not see these resources in your search results.

The following tables list the resource types that are supported for searching in AWS Resource Explorer.

Note

As of July 9, 2024, Resource Explorer no longer supports the following resource types:

  • Amazon Elastic Container Service — ecs:task

  • AWS Systems Manager — ssm:automation-execution

  • AWS Systems Manager — ssm:patchbaseline

You can still use these resource types in their own services, but they are no longer indexed or searchable in Resource Explorer.

Supported services and resource types

Supported AWS services

Amazon API Gateway

  • apigateway:restapis

AWS Amplify

  • amplify:apps/branches

  • amplify:apps/domains

AWS App Runner

  • apprunner:service

  • apprunner:vpcconnector

Amazon AppFlow

  • appflow:flow

AppIntegrations

  • app-integrations:event-integration

AWS App Mesh

  • appmesh:mesh

  • appmesh:mesh/virtualNode

  • appmesh:mesh/virtualService

Amazon AppStream

  • appstream:app-block

  • appstream:application

  • appstream:fleet

  • appstream:image-builder

  • appstream:stack

AWS AppSync

  • appsync:apis

Amazon Athena

  • athena:datacatalog

  • athena:workgroup

AWS Audit Manager

  • auditmanager:assessment

AWS Backup

  • backup:backup-plan

  • backup:backup-vault

AWS Batch

  • batch:compute-environment

  • batch:job-queue

  • batch:scheduling-policy

AWS Certificate Manager

  • acm:certificate

AWS CloudFormation

  • cloudformation:stack

  • cloudformation:stackset

Amazon CloudFront

  • cloudfront:cache-policy

  • cloudfront:distribution

  • cloudfront:field-level-encryption-config

  • cloudfront:field-level-encryption-profile

  • cloudfront:function

  • cloudfront:origin-access-control

  • cloudfront:origin-access-identity

  • cloudfront:origin-request-policy

  • cloudfront:realtime-log-config

  • cloudfront:response-headers-policy

AWS CloudTrail

  • cloudtrail:trail

Amazon CloudWatch

  • cloudwatch:alarm

  • cloudwatch:dashboard

  • cloudwatch:insight-rule

  • cloudwatch:metric-stream

Amazon CloudWatch Evidently

  • evidently:project

  • evidently:project/experiment

  • evidently:project/feature

  • evidently:project/launch

Amazon CloudWatch Logs

  • logs:destination

  • logs:log-group

AWS CodeArtifact

  • codeartifact:domain

  • codeartifact:repository

AWS CodeBuild

  • codebuild:project

AWS CodeCommit

  • codecommit:repository

AWS CodeConnections

  • codeconnections:connection

Amazon CodeGuru Profiler

  • codeguru-profiler:profilingGroup

Amazon CodeGuru Reviewer

  • codeguru-reviewer:association

AWS CodePipeline

  • codepipeline:pipeline

  • codepipeline:webhook

AWS CodeStar Connections

  • codestar-connections:connection

Amazon Cognito Identity

  • cognito-identity:identitypool

Amazon Cognito IdentityPool

  • cognito-idp:userpool

Amazon Comprehend

  • comprehend:document-classifier

  • comprehend:entity-recognizer

Amazon Connect

  • connect:instance

  • connect:instance/agent

  • connect:instance/transfer-destination

Amazon Connect Wisdom

  • wisdom:assistant

  • wisdom:association

  • wisdom:knowledge-base

AWS Data Exchange

  • dataexchange:data-sets

AWS DataSync

  • datasync:location

  • datasync:task

AWS Database Migration Service

  • dms:endpoint

  • dms:es

  • dms:rep

  • dms:subgrp

  • dms:task

Amazon Detective

  • detective:graph

Amazon DynamoDB

  • dynamodb:table

EC2 Image Builder

  • imagebuilder:component

  • imagebuilder:container-recipe

  • imagebuilder:distribution-configuration

  • imagebuilder:image

  • imagebuilder:image-pipeline

  • imagebuilder:image-recipe

  • imagebuilder:infrastructure-configuration

Amazon EMR

  • elasticmapreduce:cluster

Amazon EMR Serverless

  • emr-serverless:applications

Amazon EMR on EKS

  • emr-containers:virtualclusters

Amazon ElastiCache

  • elasticache:cluster

  • elasticache:globalreplicationgroup

  • elasticache:parametergroup

  • elasticache:replicationgroup

  • elasticache:reserved-instance

  • elasticache:snapshot

  • elasticache:subnetgroup

  • elasticache:user

  • elasticache:usergroup

AWS Elastic Beanstalk

  • elasticbeanstalk:application

  • elasticbeanstalk:applicationversion

  • elasticbeanstalk:configurationtemplate

  • elasticbeanstalk:environment

Amazon Elastic Compute Cloud (Amazon EC2)

  • ec2:capacity-reservation

  • ec2:capacity-reservation-fleet

  • ec2:carrier-gateway

  • ec2:client-vpn-endpoint

  • ec2:customer-gateway

  • ec2:dedicated-host

  • ec2:dhcp-options

  • ec2:egress-only-internet-gateway

  • ec2:elastic-ip

  • ec2:fleet

  • ec2:fpga-image

  • ec2:host-reservation

  • ec2:image

  • ec2:instance

  • ec2:instance-event-window

  • ec2:internet-gateway

  • ec2:ipam

  • ec2:ipam-pool

  • ec2:ipam-scope

  • ec2:ipv4pool-ec2

  • ec2:key-pair

  • ec2:launch-template

  • ec2:natgateway

  • ec2:network-acl

  • ec2:network-insights-access-scope

  • ec2:network-insights-access-scope-analysis

  • ec2:network-insights-analysis

  • ec2:network-insights-path

  • ec2:network-interface

  • ec2:placement-group

  • ec2:prefix-list

  • ec2:reserved-instances

  • ec2:route-table

  • ec2:security-group

  • ec2:security-group-rule

  • ec2:snapshot

  • ec2:spot-fleet-request

  • ec2:spot-instances-request

  • ec2:subnet

  • ec2:subnet-cidr-reservation

  • ec2:traffic-mirror-filter

  • ec2:traffic-mirror-filter-rule

  • ec2:traffic-mirror-session

  • ec2:traffic-mirror-target

  • ec2:transit-gateway

  • ec2:transit-gateway-attachment

  • ec2:transit-gateway-connect-peer

  • ec2:transit-gateway-multicast-domain

  • ec2:transit-gateway-policy-table

  • ec2:transit-gateway-route-table

  • ec2:transit-gateway-route-table-announcement

  • ec2:verified-access-endpoint

  • ec2:verified-access-group

  • ec2:verified-access-instance

  • ec2:verified-access-trust-provider

  • ec2:volume

  • ec2:vpc

  • ec2:vpc-endpoint

  • ec2:vpc-flow-log

  • ec2:vpc-peering-connection

  • ec2:vpn-connection

  • ec2:vpn-gateway

Amazon Elastic Container Registry

  • ecr:repository

Amazon Elastic Container Registry Public

  • ecr-public:repository

Amazon Elastic Container Service

  • ecs:capacity-provider

  • ecs:cluster

  • ecs:container-instance

  • ecs:service

  • ecs:task-definition

  • ecs:task-set

Amazon Elastic File System

  • elasticfilesystem:access-point

  • elasticfilesystem:file-system

Amazon Elastic Kubernetes Service (Amazon EKS)

  • eks:cluster

Elastic Load Balancing

  • elasticloadbalancing:listener

  • elasticloadbalancing:listener-rule

  • elasticloadbalancing:listener-rule/app

  • elasticloadbalancing:listener/app

  • elasticloadbalancing:listener/net

  • elasticloadbalancing:loadbalancer

  • elasticloadbalancing:loadbalancer/app

  • elasticloadbalancing:loadbalancer/net

  • elasticloadbalancing:targetgroup

AWS Elemental MediaPackage

  • mediapackage:channels

  • mediapackage:origin_endpoints

AWS Elemental MediaPackage VoD

  • mediapackage-vod:packaging-configurations

  • mediapackage-vod:packaging-groups

AWS Elemental MediaTailor

  • mediatailor:playbackConfiguration

Amazon CloudWatch Events

  • events:event-bus

  • events:rule

Amazon FSx

  • fsx:file-system

AWS Fault Injection Service

  • fis:experiment-template

Amazon FinSpace

  • finspace:environment

Firehose

  • firehose:deliverystream

Amazon Forecast

  • forecast:dataset

  • forecast:dataset-group

Amazon Fraud Detector

  • frauddetector:detector

  • frauddetector:entity-type

  • frauddetector:event-type

  • frauddetector:external-model

  • frauddetector:label

  • frauddetector:model

  • frauddetector:outcome

  • frauddetector:variable

Amazon GameLift

  • gamelift:alias

  • gamelift:build

  • gamelift:gamesessionqueue

  • gamelift:matchmakingconfiguration

  • gamelift:matchmakingruleset

AWS Global Accelerator

  • globalaccelerator:accelerator

  • globalaccelerator:accelerator/listener

  • globalaccelerator:accelerator/listener/endpoint-group

AWS Glue

  • glue:crawler

  • glue:database

  • glue:job

  • glue:mlTransform

  • glue:table

  • glue:trigger

AWS Glue DataBrew

  • databrew:dataset

  • databrew:job

  • databrew:project

  • databrew:recipe

  • databrew:ruleset

  • databrew:schedule

AWS Ground Station

  • groundstation:config

Amazon GuardDuty

  • guardduty:detector/filter

  • guardduty:detector/ipset

  • guardduty:detector/threatintelset

AWS HealthLake

  • healthlake:datastore/fhir

IAM Access Analyzer

  • access-analyzer:analyzer

AWS Identity and Access Management

  • iam:group

  • iam:instance-profile

  • iam:mfa

  • iam:oidc-provider

  • iam:policy

  • iam:role

  • iam:saml-provider

  • iam:server-certificate

  • iam:user

Amazon Interactive Video Service

  • ivs:channel

  • ivs:recording-configuration

  • ivs:stream-key

AWS IoT

  • iot:authorizer

  • iot:jobtemplate

  • iot:mitigationaction

  • iot:policy

  • iot:provisioningtemplate

  • iot:rolealias

  • iot:rule

  • iot:securityprofile

  • iot:thing

AWS IoT Analytics

  • iotanalytics:channel

  • iotanalytics:dataset

  • iotanalytics:datastore

  • iotanalytics:pipeline

AWS IoT Events

  • iotevents:alarmModel

  • iotevents:detectorModel

  • iotevents:input

AWS IoT Greengrass

  • greengrass:components:versions

  • greengrass:connectorsDefinition

  • greengrass:coresDefinition

  • greengrass:devicesDefinition

  • greengrass:functionsDefinition

  • greengrass:groups

  • greengrass:loggersDefinition

  • greengrass:resourcesDefinition

  • greengrass:subscriptionsDefinition

AWS IoT SiteWise

  • iotsitewise:asset

  • iotsitewise:asset-model

  • iotsitewise:dashboard

  • iotsitewise:gateway

AWS IoT TwinMaker

  • iottwinmaker:workspace

  • iottwinmaker:workspace/component-type

  • iottwinmaker:workspace/entity

AWS IoT Wireless

  • iotwireless:ServiceProfile

Amazon Kendra

  • kendra:index

AWS Key Management Service

  • kms:key

Amazon Kinesis

  • kinesis:stream

Amazon Managed Service for Apache Flink

  • kinesisanalytics:application

Amazon Kinesis Video Streams

  • kinesisvideo:stream

AWS Lambda

  • lambda:code-signing-config

  • lambda:event-source-mapping

  • lambda:function

Amazon Lex

  • lex:bot-alias

Amazon Location Service

  • geo:place-index

  • geo:tracker

Amazon Lookout for Metrics

  • lookoutmetrics:Alert

Amazon Lookout for Vision

  • lookoutvision:project

Amazon MQ

  • mq:broker

Amazon Managed Service for Prometheus

  • aps:rulegroupsnamespace

  • aps:workspace

Amazon Managed Streaming for Apache Kafka

  • kafka:cluster

  • kafka:configuration

Amazon Managed Workflows for Apache Airflow

  • airflow:environment

Amazon MemoryDB

  • memorydb:acl

  • memorydb:cluster

  • memorydb:parametergroup

  • memorydb:subnetgroup

  • memorydb:user

AWS Migration Hub Refactor Spaces

  • refactor-spaces:environment

  • refactor-spaces:environment/application

  • refactor-spaces:environment/application/route

  • refactor-spaces:environment/application/service

AWS Mobile Targeting

  • mobiletargeting:apps/campaigns

  • mobiletargeting:apps/segments

AWS Network Firewall

  • network-firewall:firewall

  • network-firewall:firewall-policy

AWS Network Manager

  • networkmanager:attachment

  • networkmanager:core-network

  • networkmanager:device

  • networkmanager:global-network

  • networkmanager:link

Amazon OpenSearch Service

  • es:domain

AWS Panorama

  • panorama:package

Amazon Personalize

  • personalize:dataset

  • personalize:dataset-group

  • personalize:schema

AWS Private Certificate Authority

  • acm-pca:certificate-authority

AWS Proton

  • proton:environment-account-connection

Amazon Quantum Ledger Database (Amazon QLDB)

  • qldb:ledger

  • qldb:stream

Amazon QuickSight

  • quicksight:dataset

  • quicksight:datasource

  • quicksight:template

Amazon Redshift

  • redshift:cluster

  • redshift:eventsubscription

  • redshift:parametergroup

  • redshift:snapshot

  • redshift:snapshotcopygrant

  • redshift:snapshotschedule

  • redshift:subnetgroup

  • redshift:usagelimit

Amazon Rekognition

  • rekognition:project

Amazon Relational Database Service (Amazon RDS)

  • rds:auto-backup

  • rds:cev

  • rds:cluster

  • rds:cluster-endpoint

  • rds:cluster-pg

  • rds:cluster-snapshot

  • rds:db

  • rds:db-proxy

  • rds:db-proxy-endpoint

  • rds:deployment

  • rds:es

  • rds:global-cluster

  • rds:og

  • rds:pg

  • rds:ri

  • rds:secgrp

  • rds:snapshot

  • rds:subgrp

AWS Resilience Hub

  • resiliencehub:resiliency-policy

AWS Resource Access Manager

  • ram:resource-share

AWS Resource Groups

  • resource-groups:group

AWS Resource Explorer

  • resource-explorer-2:index

  • resource-explorer-2:view

Amazon Route 53

  • route53:domain

  • route53:healthcheck

  • route53:hostedzone

Amazon Route 53 Recovery Readiness

  • route53-recovery-readiness:recovery-group

  • route53-recovery-readiness:resource-set

Amazon Route 53 Resolver

  • route53resolver:firewall-domain-list

  • route53resolver:firewall-rule-group

  • route53resolver:resolver-endpoint

  • route53resolver:resolver-query-log-config

  • route53resolver:resolver-rule

Amazon S3 Glacier

  • glacier:vaults

Amazon SageMaker AI

  • sagemaker:domain

  • sagemaker:endpoint

  • sagemaker:feature-group

  • sagemaker:image

  • sagemaker:model

  • sagemaker:notebook-instance

  • sagemaker:pipeline

AWS Secrets Manager

  • secretsmanager:secret

AWS Service Catalog

  • servicecatalog:applications

  • servicecatalog:attribute-groups

AWS Signer

  • signer:signing-profiles

Amazon Simple Email Service

  • ses:configuration-set

  • ses:contact-list

  • ses:identity

Amazon Simple Notification Service

  • sns:topic

Amazon Simple Queue Service

  • sqs:queue

Amazon Simple Storage Service (Amazon S3)

  • s3:accesspoint

  • s3:bucket

  • s3:storage-lens

AWS Step Functions States Language

  • states:activity

  • states:stateMachine

Storage Gateway

  • storagegateway:gateway

AWS Systems Manager

  • ssm:association

  • ssm:document

  • ssm:maintenancewindow

  • ssm:managed-instance

  • ssm:parameter

  • ssm:resource-data-sync

  • ssm:windowtarget

  • ssm:windowtask

AWS Transfer Family

  • transfer:workflow

Amazon WorkSpaces

  • workspaces:workspace

Programmatically accessing the list of supported resource types

To access the list of supported resource types from code, you can invoke the ListSupportedResourceTypes operation from any AWS SDK.

For example, you can run the list-supported-resource-types AWS Command Line Interface (AWS CLI) command, as shown in the following example.

$ aws resource-explorer-2 list-supported-resource-types
{
    "ResourceTypes": [
        {
            "ResourceType": "acm-pca:certificate-authority",
            "Service": "acm-pca"
        },
        {
            "ResourceType": "airflow:environment",
            "Service": "airflow"
        },
        {
            "ResourceType": "amplify:branches",
            "Service": "amplify"
        },
... truncated for brevity ...

Resource types that appear as other types

Some resource types are identified by Amazon resource name (ARN) strings that share a common format with another resource type. When this happens, Resource Explorer can report such resources as that other resource type. This affects the resource types in the following table.

Actual resource type Reported as resource type

ec2:securitygroupegress

ec2:securitygroupingress

ec2:security-group-rule

elasticloadbalancingv2:loadbalancer

elasticloadbalancing:loadbalancer

docdb:dbcluster

neptune:dbcluster

rds:dbcluster

rds:cluster

docdb:dbclusterparametergroup

neptune:dbclusterparametergroup

rds:dbclusterparametergroup

rds:cluster-pg

docdb:clustersnapshot

neptune:dbclustersnapshot

rds:clustersnapshot

rds:cluster-snapshot

docdb:dbinstance

neptune:dbinstance

rds:dbinstance

rds:db

docdb:eventsubscription

neptune:eventsubscription

rds:eventsubscription

rds:es

docdb:globalcluster

rds:globalcluster

rds:global-cluster

neptune:dbparametergroup

rds:dbparametergroup

rds:pg

docdb:dbsubnetgroup

neptune:dbsubnetgroup

rds:dbsubnetgroup

rds:subgrp