AWS Documentation » AWS Resource Groups » User Guide » What Is AWS Resource Groups? » Supported Resources

Supported Resources

You can use the AWS Management Console or the AWS CLI to add tags to many AWS resources. This topic describes resources that you can query and group into resource groups by using AWS Resource Groups, and resources that you can tag by using Tag Editor.

Supported Resources for AWS Resource Groups

Use the AWS Resource Groups service to create groups for the following AWS resources. The supported resources vary slightly depending on whether you are creating a tag-based or an AWS CloudFormation stack-based group. Resources for global services (such as Amazon CloudFront and Route 53) appear only in the US East (N. Virginia) Region (us-east-1).

Important

A resource group based on a query for All supported resource types can add members automatically over time, as new resources are supported by Resource Groups. When you run automations or other bulk tasks on an existing resource group based on All supported resource types, be aware that the actions might be run on many more resources than were in the group when you first created it. This might also mean that automations or tasks that you created for other resources are applied to unintended resources, or resources on which the tasks cannot be completed.

Topics

• Supported Resources for Tag-based Groups
• Supported Resources for AWS CloudFormation Stack-based Groups

Supported Resources for Tag-based Groups

Service	Resources
Amazon API Gateway	AWS::ApiGateway::Stage AWS::ApiGateway::RestApi
Amazon AppStream	AWS::AppStream::Fleet AWS::AppStream::ImageBuilder AWS::AppStream::Stack
AWS Certificate Manager	AWS::CertificateManager::Certificate
AWS CloudFormation	AWS::CloudFormation::Stack
Amazon CloudFront	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::CloudFront::Distribution AWS::CloudFront::StreamingDistribution
AWS CloudTrail	AWS::CloudTrail::Trail
Amazon CloudWatch	AWS::CloudWatch::Alarm
Amazon CloudWatch Events	AWS::Events::Rule
Amazon CloudWatch Logs	AWS::Logs::LogGroup
AWS CodeBuild	AWS::CodeBuild::Project
AWS CodeCommit	AWS::CodeCommit::Repository
AWS CodePipeline	AWS::CodePipeline::Pipeline AWS::CodePipeline::Webhook
Amazon Cognito	AWS:Cognito::IdentityPool AWS::Cognito::UserPool
AWS Config	AWS::Config::ConfigRule
AWS Data Pipeline	AWS::DataPipeline::Pipeline
AWS Database Migration Service	AWS::DMS::Certificate AWS::DMS::Endpoint AWS::DMS::EventSubscription AWS::DMS::ReplicationInstance AWS::DMS::ReplicationSubnetGroup AWS::DMS::ReplicationTask
Amazon DynamoDB	AWS::DynamoDB::Table
AWS Elastic Beanstalk	AWS::ElasticBeanstalk::Application AWS::ElasticBeanstalk::ApplicationVersion AWS::ElasticBeanstalk::ConfigurationTemplate AWS::ElasticBeanstalk::Environment
Amazon Elastic Compute Cloud (Amazon EC2)	AWS::EC2::CapacityReservation AWS::EC2::CustomerGateway AWS::EC2::DHCPOptions AWS::EC2::EIP AWS::EC2::Host AWS::EC2::Image AWS::EC2::Instance AWS::EC2::InternetGateway AWS::EC2::LaunchTemplate AWS::EC2::NatGateway AWS::EC2::NetworkAcl AWS::EC2::NetworkInterface AWS::EC2::ReservedInstance AWS::EC2::RouteTable AWS::EC2::SecurityGroup AWS::EC2::Snapshot AWS::EC2::SpotInstanceRequest AWS::EC2::Subnet AWS::EC2::TransitGateway AWS::EC2::TransitGatewayRouteTable AWS::EC2::VPC AWS::EC2::VPCPeeringConnection AWS::EC2::VPNConnection AWS::EC2::VPNGateway AWS::EC2::Volume
Amazon Elastic Container Registry	AWS::ECR::Repository
Amazon Elastic Container Service	AWS::ECS::Cluster AWS::ECS::ContainerInstance AWS::ECS::Service AWS::ECS::Task AWS::ECS::TaskDefinition
Amazon ElastiCache	AWS::ElastiCache::CacheCluster AWS::ElastiCache::Snapshot
Amazon Elastic File System	AWS::EFS::FileSystem
Elastic Load Balancing	AWS::ElasticLoadBalancing::LoadBalancer AWS::ElasticLoadBalancingV2::LoadBalancer AWS::ElasticLoadBalancingV2::TargetGroup
Amazon EMR	AWS::EMR::Cluster
Amazon Elasticsearch Service	AWS::Elasticsearch::Domain
Amazon FSx	AWS::FSx::FileSystem
Amazon S3 Glacier	AWS::Glacier::Vault
AWS Glue	AWS::Glue::Crawler AWS::Glue::Job AWS::Glue::Trigger
Amazon Inspector	AWS::Inspector::AssessmentTemplate
AWS IoT	AWS::IoT::TopicRule
AWS IoT Analytics	AWS::IoTAnalytics::Channel AWS::IoTAnalytics::Datastore AWS::IoTAnalytics::Dataset AWS::IoTAnalytics::Pipeline
AWS IoT Events	AWS::IoTEvents::DetectorModel AWS::IoTEvents::Input
AWS Key Management Service	AWS::KMS::Key
Amazon Kinesis	AWS::Kinesis::Stream
Amazon Kinesis Data Analytics	AWS::KinesisAnalytics::Application
Amazon Kinesis Data Firehose	AWS::KinesisFirehose::DeliveryStream
AWS Lambda	AWS::Lambda::Function
Amazon Managed Streaming for Apache Kafka	AWS::Kafka::Cluster
Amazon MQ	AWS::AmazonMQ::Broker AWS::AmazonMQ::Configuration
AWS OpsWorks	AWS::OpsWorks::Instance AWS::OpsWorks::Layer AWS::OpsWorks::Stack
AWS Organizations	AWS::Organizations::Account
Amazon Quantum Ledger Database (Amazon QLDB)	AWS::QLDB::Ledger
Amazon Redshift	AWS::Redshift::Cluster AWS::Redshift::ClusterParameterGroup AWS::Redshift::ClusterSecurityGroup AWS::Redshift::ClusterSubnetGroup AWS::Redshift::HSMClientCertificate
Amazon Relational Database Service (Amazon RDS)	AWS::RDS::DBCluster AWS::RDS::DBClusterParameterGroup AWS::RDS::DBClusterSnapshot AWS::RDS::DBInstance AWS::RDS::DBParameterGroup AWS::RDS::DBSecurityGroup AWS::RDS::DBSnapshot AWS::RDS::DBSubnetGroup AWS::RDS::EventSubscription AWS::RDS::OptionGroup AWS::RDS::ReservedDBInstance
AWS Resource Access Manager	AWS::RAM::ResourceShare
AWS Resource Groups	AWS::ResourceGroups::Group (Lets you create a nested resource group, or a resource group that contains other resource groups)
AWS RoboMaker	AWS::RoboMaker::DeploymentJob AWS::RoboMaker::Fleet AWS::RoboMaker::Robot AWS::RoboMaker::RobotApplication AWS::RoboMaker::SimulationApplication AWS::RoboMaker::SimulationJob
Amazon Route 53	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::Route53::Domain AWS::Route53::HealthCheck AWS::Route53::HostedZone
Amazon Route 53 Resolver	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::Route53Resolver::ResolverEndpoint AWS::Route53Resolver::ResolverRule
Amazon SageMaker	AWS::SageMaker::Endpoint AWS::SageMaker::EndpointConfig AWS::SageMaker::HyperParameterTuningJob AWS::SageMaker::LabelingJob AWS::SageMaker::Model AWS::SageMaker::NotebookInstance AWS::SageMaker::TrainingJob AWS::SageMaker::TransformJob AWS::SageMaker::Workteam
AWS Secrets Manager	AWS::SecretsManager::Secret
AWS Service Catalog	AWS::ServiceCatalog::CloudFormationProduct AWS::ServiceCatalog::Portfolio
Amazon Simple Notification Service	AWS::SNS::Topic
Amazon Simple Queue Service	AWS::SQS::Queue
Amazon Simple Storage Service (Amazon S3)	AWS::S3::Bucket
AWS Step Functions	AWS::StepFunctions::Activity AWS::StepFunctions::StateMachine
AWS Storage Gateway	AWS::StorageGateway::Gateway AWS::StorageGateway::Volume
AWS Systems Manager	AWS::SSM::Document AWS::SSM::MaintenanceWindow AWS::SSM::ManagedInstance AWS::SSM::Parameter AWS::SSM::PatchBaseline
Amazon WorkSpaces	AWS::WorkSpaces::Workspace

Supported Resources for AWS CloudFormation Stack-based Groups

Service	Resources
Amazon API Gateway	AWS::ApiGateway::Account AWS::ApiGateway::ApiKey AWS::ApiGateway::DomainName AWS::ApiGateway::RestApi AWS::ApiGateway::UsagePlan
AWS AppSync	AWS::AppSync::DataSource AWS::AppSync::GraphQLApi
AWS Certificate Manager	AWS::CertificateManager::Certificate
AWS CloudFormation	AWS::CloudFormation::Stack
Amazon CloudFront	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::CloudFront::Distribution AWS::CloudFront::StreamingDistribution
AWS CloudTrail	AWS::CloudTrail::Trail
Amazon CloudWatch	AWS::CloudWatch::Alarm AWS::CloudWatch::Dashboard
Amazon CloudWatch Events	AWS::Events::Rule
Amazon CloudWatch Logs	AWS::Logs::LogGroup
AWS CodeDeploy	AWS::CodeDeploy::Application AWS::CodeDeploy::DeploymentConfig
AWS CodePipeline	AWS::CodePipeline::Pipeline AWS::CodePipeline::Webhook
Amazon Cognito	AWS::Cognito::IdentityPool AWS::Cognito::UserPool
AWS Data Pipeline	AWS::DataPipeline::Pipeline
AWS Database Migration Service	AWS::DMS::Endpoint AWS::DMS::ReplicationInstance
Amazon DynamoDB	AWS::DynamoDB::Table
Amazon Elastic Compute Cloud (Amazon EC2)	AWS::EC2::CustomerGateway AWS::EC2::DHCPOptions AWS::EC2::Instance AWS::EC2::InternetGateway AWS::EC2::LaunchTemplate AWS::EC2::NatGateway AWS::EC2::NetworkAcl AWS::EC2::NetworkInterface AWS::EC2::RouteTable AWS::EC2::SecurityGroup AWS::EC2::Subnet AWS::EC2::VPC AWS::EC2::VPCPeeringConnection AWS::EC2::VPNConnection AWS::EC2::VPNGateway AWS::EC2::Volume
Amazon Elastic File System	AWS::EFS::FileSystem
Elastic Load Balancing	AWS::ElasticLoadBalancing::LoadBalancer AWS::ElasticLoadBalancingV2::LoadBalancer AWS::ElasticLoadBalancingV2::TargetGroup
Amazon ElastiCache	AWS::ElastiCache::CacheCluster
Amazon Elasticsearch Service	AWS::Elasticsearch::Domain
Amazon EMR	AWS::EMR::Cluster
AWS Glue	AWS::Glue::Database
AWS Identity and Access Management (IAM)	AWS::IAM::Role
AWS IoT	AWS::IoT::TopicRule
AWS IoT Events	AWS::IoTEvents::DetectorModel AWS::IoTEvents::Input
Amazon Inspector	AWS::Inspector::AssessmentTemplate
AWS Key Management Service	AWS::KMS::Key AWS::KMS::Alias
Amazon Kinesis	AWS::Kinesis::Stream
AWS Lambda	AWS::Lambda::Alias AWS::Lambda::EventSourceMapping AWS::Lambda::Function AWS::Lambda::LayerVersion AWS::Lambda::Version
AWS OpsWorks	AWS::OpsWorks::Instance AWS::OpsWorks::Layer AWS::OpsWorks::Stack
Amazon Quantum Ledger Database (Amazon QLDB)	AWS::QLDB::Ledger
Amazon Redshift	AWS::Redshift::Cluster AWS::Redshift::ClusterParameterGroup AWS::Redshift::ClusterSecurityGroup AWS::Redshift::ClusterSubnetGroup
Amazon Relational Database Service (Amazon RDS)	AWS::RDS::DBCluster AWS::RDS::DBClusterParameterGroup AWS::RDS::DBInstance AWS::RDS::DBParameterGroup AWS::RDS::DBSecurityGroup AWS::RDS::DBSubnetGroup
Amazon Route 53	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::Route53::HealthCheck AWS::Route53::HostedZone
Amazon SageMaker	AWS::SageMaker::Endpoint AWS::SageMaker::EndpointConfig AWS::SageMaker::Model AWS::SageMaker::NotebookInstance
AWS Secrets Manager	AWS::SecretsManager::Secret
AWS Service Catalog	AWS::ServiceCatalog::CloudFormationProduct AWS::ServiceCatalog::Portfolio
Amazon Simple Notification Service	AWS::SNS::Topic
Amazon Simple Queue Service	AWS::SQS::Queue
Amazon Simple Storage Service (Amazon S3)	AWS::S3::Bucket
AWS Step Functions	AWS::StepFunctions::Activity AWS::StepFunctions::StateMachine
AWS Systems Manager	AWS::SSM::Document AWS::SSM::Parameter AWS::SSM::PatchBaseline
Amazon WorkSpaces	AWS::WorkSpaces::Workspace

Supported Resources for Tag Editor Tagging

You can use Tag Editor in the AWS Management Console to tag the following AWS resources. For more information, see Tag Editor.

Service	Resources
AWS CloudFormation	AWS::CloudFormation::Stack
Amazon CloudFront	AWS::CloudFront::Distribution AWS::CloudFront::StreamingDistribution
Amazon CloudWatch	AWS::CloudWatch::Alarm
Amazon CloudWatch Events	AWS::Events::Rule
Amazon CloudWatch Logs	AWS::Logs::LogGroup
AWS CodeBuild	AWS::CodeBuild::Project
AWS CodePipeline	AWS::CodePipeline::Pipeline AWS::CodePipeline::Webhook
Amazon Cognito	AWS::Cognito::IdentityPool AWS::Cognito::UserPool
AWS Config	AWS::Config::ConfigRule
AWS Data Pipeline	AWS::DataPipeline::Pipeline
Amazon DynamoDB	AWS::DynamoDB::Table
AWS Elastic Beanstalk	AWS::ElasticBeanstalk::Application
Amazon Elastic Compute Cloud (Amazon EC2)	AWS::EC2::CustomerGateway AWS::EC2::DHCPOptions AWS::EC2::EIP AWS::EC2::Image AWS::EC2::Instance AWS::EC2::InternetGateway AWS::EC2::NetworkAcl AWS::EC2::NetworkInterface AWS::EC2::ReservedInstance AWS::EC2::RouteTable AWS::EC2::SecurityGroup AWS::EC2::Snapshot AWS::EC2::SpotInstanceRequest AWS::EC2::Subnet AWS::EC2::Volume AWS::EC2::VPC AWS::EC2::VPNConnection AWS::EC2::VPNGateway
Elastic Load Balancing	AWS::ElasticLoadBalancing::LoadBalancer AWS::ElasticLoadBalancingV2::LoadBalancer AWS::ElasticLoadBalancingV2::TargetGroup
Amazon ElastiCache	AWS::ElastiCache::CacheCluster AWS::ElastiCache::Snapshot
Amazon Elasticsearch Service	AWS::Elasticsearch::Domain
Amazon EMR	AWS::EMR::Cluster
Amazon FSx	AWS::FSx::FileSystem
Glacier	AWS::Glacier::Vault
AWS Glue	AWS::Glue::Crawler AWS::Glue::Job AWS::Glue::Trigger
AWS IoT Analytics	AWS::IoTAnalytics::Dataset
AWS IoT Events	AWS::IoTEvents::DetectorModel AWS::IoTEvents::Input
AWS Key Management Service	AWS::KMS::Key
Kinesis	AWS::Kinesis::Stream
Amazon Kinesis Data Analytics	AWS::KinesisAnalytics::Application
AWS Lambda	AWS::Lambda::Function
Amazon Managed Streaming for Apache Kafka	AWS::Kafka::Cluster
Amazon MQ	AWS::AmazonMQ::Broker AWS::AmazonMQ::Configuration
AWS Organizations	AWS::Organizations::Account
Amazon Quantum Ledger Database (Amazon QLDB)	AWS::QLDB::Ledger
Amazon Redshift	AWS::Redshift::Cluster AWS::Redshift::HSMClientCertificate AWS::Redshift::ClusterParameterGroup AWS::Redshift::ClusterSubnetGroup
Amazon Relational Database Service (Amazon RDS)	AWS::RDS::DBInstance AWS::RDS::DBParameterGroup AWS::RDS::DBSecurityGroup AWS::RDS::DBSnapshot AWS::RDS::DBSubnetGroup AWS::RDS::EventSubscription AWS::RDS::OptionGroup AWS::RDS::ReservedDBInstance
AWS Resource Access Manager	AWS::RAM::ResourceShare
AWS Resource Groups	AWS::ResourceGroups::Group
AWS RoboMaker	AWS::RoboMaker::DeploymentJob AWS::RoboMaker::Fleet AWS::RoboMaker::Robot AWS::RoboMaker::RobotApplication AWS::RoboMaker::SimulationApplication AWS::RoboMaker::SimulationJob
Amazon Route 53	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::Route53::Domain AWS::Route53::HealthCheck AWS::Route53::HostedZone
Amazon SageMaker	AWS::SageMaker::NotebookInstance
Amazon Simple Storage Service (Amazon S3)	AWS::S3::Bucket
AWS Systems Manager	AWS::SSM::Parameter
AWS Step Functions	AWS::StepFunctions::Activity AWS::StepFunctions::StateMachine
AWS Storage Gateway	AWS::StorageGateway::Gateway