AWS Resource Groups
User Guide

Supported Resources

You can use the AWS Management Console or the AWS CLI to add tags to many AWS resources. This topic describes resources that are currently supported by tags.

Supported Resources for Resource Groups

You can use the Resource Groups tool in the AWS Management Console to create groups for the following tagged AWS resources.


A resource group based on a query for All supported resource types can add members automatically over time, as new resources are supported by Resource Groups. When you run automations or other bulk tasks on an existing resource group based on All supported resource types, be aware that the actions might be run on many more resources than were in the group when you first created it. This might also mean that automations or tasks that you created for other resources are applied to unintended resources, or resources on which the tasks cannot be completed.

                    Query based on All supported resource
Service Resources

Amazon API Gateway

  • AWS::ApiGateway::Stage

AWS Certificate Manager

  • AWS::CertificateManager::Certificate

Amazon CloudFront

  • AWS::CloudFront::Distribution

  • AWS::CloudFront::StreamingDistribution

AWS CloudTrail

  • AWS::CloudTrail::Trail

Amazon CloudWatch Logs

  • AWS::Logs::LogGroup

AWS Database Migration Service

  • AWS::DMS::Endpoint

  • AWS::DMS::ReplicationInstance

AWS Data Pipeline

  • AWS::DataPipeline::Pipeline

Amazon DynamoDB

  • AWS::DynamoDB::Table

Amazon Elastic Compute Cloud (Amazon EC2)

  • AWS::EC2::CustomerGateway

  • AWS::EC2::DHCPOptions

  • AWS::EC2::EIP

  • AWS::EC2::Instance

  • AWS::EC2::InternetGateway

  • AWS::EC2::LaunchTemplate

  • AWS::EC2::NatGateway

  • AWS::EC2::NetworkAcl

  • AWS::EC2::NetworkInterface

  • AWS::EC2::RouteTable

  • AWS::EC2::SecurityGroup

  • AWS::EC2::Snapshot

  • AWS::EC2::Subnet

  • AWS::EC2::VPCPeeringConnection

  • AWS::EC2::VPC

  • AWS::EC2::VPNConnection

  • AWS::EC2::VPNGateway

  • AWS::EC2::Volume

AWS Elastic Beanstalk

  • AWS::ElasticBeanstalk::Environment

Amazon ElastiCache

  • AWS::ElastiCache::CacheCluster

  • AWS::ElastiCache::Snapshot

Amazon Elastic File System

  • AWS::EFS::FileSystem

Elastic Load Balancing

  • AWS::ElasticLoadBalancing::LoadBalancer

  • AWS::ElasticLoadBalancingV2::LoadBalancer

  • AWS::ElasticLoadBalancingV2::TargetGroup

Amazon EMR

  • AWS::EMR::Cluster

Amazon Elasticsearch Service

  • AWS::Elasticsearch::Domain

Amazon Inspector

  • AWS::Inspector::AssessmentTemplate

AWS Key Management Service

  • AWS::KMS::Key

Amazon Kinesis

  • AWS::Kinesis::Stream

AWS Lambda

  • AWS::Lambda::Function

AWS OpsWorks

  • AWS::OpsWorks::Instance

  • AWS::OpsWorks::Layer

  • AWS::OpsWorks::Stack

Amazon Relational Database Service (Amazon RDS)

  • AWS::RDS::DBClusterParameterGroup

  • AWS::RDS::DBCluster

  • AWS::RDS::DBInstance

  • AWS::RDS::DBParameterGroup

  • AWS::RDS::DBSecurityGroup

  • AWS::RDS::DBSnapshot

  • AWS::RDS::DBSubnetGroup

  • AWS::RDS::OptionGroup

Amazon Redshift

  • AWS::Redshift::ClusterParameterGroup

  • AWS::Redshift::ClusterSecurityGroup

  • AWS::Redshift::ClusterSubnetGroup

  • AWS::Redshift::Cluster

AWS Resource Groups

  • AWS::ResourceGroups::Group

    (Lets you create a nested resource group, or a resource group that contains other resource groups)

Amazon Route 53

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::Route53::HealthCheck

  • AWS::Route53::HostedZone

Amazon SageMaker

  • AWS::SageMaker::EndpointConfig

  • AWS::SageMaker::Endpoint

  • AWS::SageMaker::HyperParameterTuningJob

  • AWS::SageMaker::Model

  • AWS::SageMaker::NotebookInstance

  • AWS::SageMaker::TrainingJob

AWS Service Catalog

  • AWS::ServiceCatalog::CloudFormationProduct

  • AWS::ServiceCatalog::Portfolio

Amazon Simple Queue Service

  • AWS::SQS::Queue

Amazon Simple Storage Service (Amazon S3)

  • AWS::S3::Bucket

AWS Systems Manager

  • AWS::SSM::Document

  • AWS::SSM::MaintenanceWindow

  • AWS::SSM::ManagedInstance

  • AWS::SSM::Parameter

  • AWS::SSM::PatchBaseline

AWS Storage Gateway

  • AWS::StorageGateway::Gateway

  • AWS::StorageGateway::Volume

Amazon WorkSpaces

  • AWS::WorkSpaces::Workspace

Supported Resources for Tag Editor Tagging

You can use Tag Editor in the AWS Management Console to tag the following AWS resources. For more information, see Working with Tag Editor.

Service Resources

Amazon ElastiCache

  • Cache cluster

  • Snapshot

Amazon Elastic Compute Cloud (Amazon EC2)

  • AMI

  • Instance

  • Network interface

  • Reserved Instance

  • Security group

  • Snapshot

  • Spot Instance request

  • Volume

Elastic Load Balancing

  • Classic load balancer (CLB)

Amazon EMR

  • Cluster

Amazon Glacier

  • Vault


  • Stream

Amazon Relational Database Service (Amazon RDS)

  • Database instance

  • Database option group

  • Database parameter group

  • Database security group

  • Database snapshot

  • Database subnet group

  • Event subscription

  • Reserved database instance

Amazon Redshift

  • Cluster

  • Hardware security module (HSM) client certificate

  • HSM connection

  • Parameter group

  • Snapshot

  • Subnet group

Amazon Route 53

  • Domain

  • Health check

  • Hosted zone

Amazon Simple Storage Service (Amazon S3)

  • Bucket

AWS Storage Gateway

  • Gateway

Amazon Virtual Private Cloud

  • Customer gateway

  • DHCP option set

  • Internet gateway

  • Network access conrol list (ACL)

  • Route table

  • Subnet

  • Virtual private gateway

  • VPC

  • VPN connection