# AWS Resource Groups User Guide

> AWS Resource Groupslet you organize your AWS resources into groups, based on their attached tags, or their CloudFormation stack membership.

- [AWS Resource Groups availability change](https://docs.aws.amazon.com/ARG/latest/userguide/resource-groups-gle-availability-change.md)
- [Deleting groups](https://docs.aws.amazon.com/ARG/latest/userguide/deleting-resource-groups.md)
- [Supported resource types](https://docs.aws.amazon.com/ARG/latest/userguide/supported-resources.md)
- [Creating groups with AWS CloudFormation resources](https://docs.aws.amazon.com/ARG/latest/userguide/creating-resources-with-cloudformation.md)
- [Making API requests](https://docs.aws.amazon.com/ARG/latest/userguide/making-api-requests.md)
- [Service quotas](https://docs.aws.amazon.com/ARG/latest/userguide/service-quotas.md)
- [Document history](https://docs.aws.amazon.com/ARG/latest/userguide/doc-history.md)

## [What are resource groups?](https://docs.aws.amazon.com/ARG/latest/userguide/resource-groups.md)

### [Getting started](https://docs.aws.amazon.com/ARG/latest/userguide/gettingstarted.md)

Get started using Resource Groups by using a walkthrough.

### [Prerequisites](https://docs.aws.amazon.com/ARG/latest/userguide/gettingstarted-prereqs.md)

Prepare your account to create resource groups.

### [Set up permissions](https://docs.aws.amazon.com/ARG/latest/userguide/gettingstarted-prereqs-permissions.md)

Set up permissions and review authorization and access control that you'll need to tag resources and create resource groups.

- [Granting permissions for using AWS Resource Groups and Tag Editor](https://docs.aws.amazon.com/ARG/latest/userguide/gettingstarted-prereqs-permissions-howto.md): To add a policy for using AWS Resource Groups and Tag Editor to a user, do the following.
- [Resource Groups authorization and access control](https://docs.aws.amazon.com/ARG/latest/userguide/rg-auth-access.md): Resource Groups supports the following.
- [AWS services that work with AWS Resource Groups](https://docs.aws.amazon.com/ARG/latest/userguide/integrated-services-list.md): Learn about which services integrate with AWS Resource Groups.

### [Service configurations](https://docs.aws.amazon.com/ARG/latest/userguide/about-slg.md)

Learn how to add a service configuration to a resource group that enables an AWS service to treat resources in the group according to the settings in the configuration.

- [Configuration types and parameters](https://docs.aws.amazon.com/ARG/latest/userguide/about-slg-types.md): Resource Groups supports using the following configuration types.


## [Creating groups](https://docs.aws.amazon.com/ARG/latest/userguide/gettingstarted-query.md)

- [Build a tag-based query and create a group](https://docs.aws.amazon.com/ARG/latest/userguide/gettingstarted-query-tag-based.md): The following procedures show you how to build a tag-based query and use it to create a resource group.
- [Create an CloudFormation stack-based group](https://docs.aws.amazon.com/ARG/latest/userguide/gettingstarted-query-stack-based.md): The following procedures show you how to build a stack-based query and use it to create a resource group.


## [Updating groups](https://docs.aws.amazon.com/ARG/latest/userguide/updating-resource-groups.md)

- [Update tag-based query groups](https://docs.aws.amazon.com/ARG/latest/userguide/updating-tag-based-resource-groups.md): The following procedures show you how to update a tag-based query group.
- [Update an CloudFormation stack-based group](https://docs.aws.amazon.com/ARG/latest/userguide/updating-stack-based-resource-groups.md): The following procedures show you how to update a CloudFormation stack-based group.


## [Monitoring resource groups for changes](https://docs.aws.amazon.com/ARG/latest/userguide/monitor-groups.md)

- [Turning on group lifecycle events](https://docs.aws.amazon.com/ARG/latest/userguide/monitor-groups-turn-on.md)
- [Creating a group lifecycle events rule](https://docs.aws.amazon.com/ARG/latest/userguide/monitor-groups-create-rule.md)
- [Turning off group lifecycle events](https://docs.aws.amazon.com/ARG/latest/userguide/monitor-groups-turn-off.md)

### [Structure and syntax of events](https://docs.aws.amazon.com/ARG/latest/userguide/monitor-groups-syntax.md)

- [Structure of the detail field](https://docs.aws.amazon.com/ARG/latest/userguide/monitor-groups-syntax-detail.md)
- [Example custom event patterns](https://docs.aws.amazon.com/ARG/latest/userguide/monitor-groups-example-eventbridge-filters.md)


## [Security](https://docs.aws.amazon.com/ARG/latest/userguide/security.md)

- [Data protection](https://docs.aws.amazon.com/ARG/latest/userguide/data-protection.md): Learn how the AWS shared responsibility model applies to data protection in AWS Resource Groups.

### [Identity and access management](https://docs.aws.amazon.com/ARG/latest/userguide/security-iam.md)

How to authenticate requests and manage access your AWS Resource Groups resources.

- [How Resource Groups works with IAM](https://docs.aws.amazon.com/ARG/latest/userguide/security_iam_service-with-iam.md): Before you use IAM to manage access to Resource Groups, you should understand what IAM features are available to use with Resource Groups.
- [AWS managed policies](https://docs.aws.amazon.com/ARG/latest/userguide/security-iam-awsmanpol.md): Learn about AWS managed policies for AWS Resource Groups and recent changes to those policies.
- [Using service-linked roles](https://docs.aws.amazon.com/ARG/latest/userguide/using-service-linked-roles.md): How to use service-linked roles to give Resource Groups access to resources in your AWS account.
- [Identity-based policy examples](https://docs.aws.amazon.com/ARG/latest/userguide/security_iam_id-based-policy-examples.md): By default, IAM principals, such as roles and users, don't have permission to create or modify Resource Groups resources.
- [Troubleshooting](https://docs.aws.amazon.com/ARG/latest/userguide/security_iam_troubleshoot.md): Use the following information to help you diagnose and fix common issues that you might encounter when working with Resource Groups and IAM.
- [Logging and monitoring](https://docs.aws.amazon.com/ARG/latest/userguide/security_logging-monitoring.md): All AWS Resource Groups actions are logged in AWS CloudTrail.
- [Compliance validation](https://docs.aws.amazon.com/ARG/latest/userguide/compliance-validation.md): Learn what AWS services are in scope of a specific compliance program.
- [Resilience](https://docs.aws.amazon.com/ARG/latest/userguide/disaster-recovery-resiliency.md): Learn how AWS architecture supports data redundancy, and learn about specific AWS Resource Groups features for data resiliency.
- [Infrastructure Security](https://docs.aws.amazon.com/ARG/latest/userguide/infrastructure-security.md): Learn how AWS Resource Groups isolates service traffic.
- [AWS PrivateLink](https://docs.aws.amazon.com/ARG/latest/userguide/vpc-interface-endpoints.md): You can use an AWS PrivateLink to create a private connection between your VPC and AWS Resource Groups.
- [Security best practices](https://docs.aws.amazon.com/ARG/latest/userguide/security_best-practices.md): The following best practices are general guidelines and don’t represent a complete security solution.


## Full content

The entire guide is also available as a single markdown file, useful for feeding the full guide to an LLM in one pass:

- [Complete guide (single file)](https://docs.aws.amazon.com/ARG/latest/userguide/full.md)