Resources you can use with AWS Resource Groups

You can use the AWS Management Console or the AWS CLI to add tags to many AWS resources. This topic describes resources that you can query and group into resource groups by using AWS Resource Groups, and resources that you can tag by using Tag Editor.

Important

A resource group based on a query for All supported resource types can add members automatically over time, as new resources are supported by Resource Groups. When you run automations or other bulk tasks on an existing resource group based on All supported resource types, be aware that the actions might be run on many more resources than were in the group when you first created it. This might also mean that automations or tasks that you created for other resources are applied to unintended resources, or resources on which the tasks cannot be completed.

The following tables list which resources are supported for tag-based groups, tagging in Tag Editor, and for AWS CloudFormation stack-based groups.

Amazon API Gateway

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::ApiGateway::Account	No	No	Yes
AWS::ApiGateway::ApiKey	No	No	Yes
AWS::ApiGateway::DomainName	No	No	Yes
AWS::ApiGateway::RestApi	No	Yes	Yes
AWS::ApiGateway::Stage	No	Yes	No
AWS::ApiGateway::UsagePlan	No	No	Yes

Amazon AppStream

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::AppStream::Fleet	No	Yes	No
AWS::AppStream::ImageBuilder	No	Yes	No
AWS::AppStream::Stack	No	Yes	No

AWS AppSync

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::AppSync::DataSource	No	No	Yes
AWS::AppSync::GraphQLApi	No	No	Yes

AWS Certificate Manager

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::CertificateManager::Certificate	Yes	Yes	Yes

AWS Certificate Manager private certificate authority

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::ACMPCA::CertificateAuthority	No	Yes	No

AWS CloudFormation

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::CloudFormation::Stack	Yes	Yes	Yes

Amazon CloudFront

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::CloudFront::Distribution	Yes¹	Yes²	Yes²
AWS::CloudFront::StreamingDistribution	Yes¹	Yes²	Yes²

¹ This is a resource for a global service that is hosted in the US East (N. Virginia) Region. To use Tag Editor to create or modify tags for this resource type, you must include us-east-1 from the Select regions list under Find resources to tag in the Tag Editor console.

² This is a resource for a global service that is hosted in the US East (N. Virginia) Region. Because Resource Groups are maintained separately for each region, you must switch your AWS console to the Region that contains the resources you want to include in the group. To create a resource group that contains a global resource, you must configure your AWS Console to US East (N. Virginia) us-east-1 using the Region selector in the upper-right corner of the AWS console.

AWS CloudTrail

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::CloudTrail::Trail	Yes	Yes	Yes

Amazon CloudWatch

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::CloudWatch::Alarm	Yes	Yes	Yes
AWS::CloudWatch::Dashboard	No	No	Yes

Amazon CloudWatch Logs

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Logs::LogGroup	No	Yes	Yes

AWS CodeBuild

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::CodeBuild::Project	Yes	Yes	No

AWS CodeCommit

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::CodeCommit::Repository	Yes	Yes	No

AWS CodeDeploy

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::CodeDeploy::Application	No	No	Yes
AWS::CodeDeploy::DeploymentConfig	No	No	Yes

AWS CodePipeline

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::CodePipeline::CustomActionType	No	Yes	No
AWS::CodePipeline::Pipeline	Yes	Yes	Yes
AWS::CodePipeline::Webhook	Yes	Yes	Yes

Amazon Cognito

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Cognito::IdentityPool	Yes	Yes	Yes
AWS::Cognito::UserPool	Yes	Yes	Yes

Amazon Comprehend

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Comprehend::DocumentClassifier	Yes	Yes	No
AWS::Comprehend::EntityRecognizer	Yes	Yes	No

AWS Config

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Config::ConfigRule	Yes	Yes	No

AWS data Exchange

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::DataExchange::DataSet	Yes	Yes	No
AWS::DataExchange::Revision	No	Yes	No

AWS Data Pipeline

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::DataPipeline::Pipeline	Yes	Yes	Yes

AWS Database Migration Service

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::DMS::Certificate	No	Yes	No
AWS::DMS::Endpoint	No	Yes	Yes
AWS::DMS::EventSubscription	No	Yes	No
AWS::DMS::ReplicationInstance	No	Yes	Yes
AWS::DMS::ReplicationSubnetGroup	No	Yes	No
AWS::DMS::ReplicationTask	No	Yes	No

Amazon DynamoDB

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::DynamoDB::Table	Yes	Yes	Yes

Amazon EMR

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::EMR::Cluster	Yes	Yes	Yes

Amazon ElastiCache

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::ElastiCache::CacheCluster	Yes	Yes	Yes
AWS::ElastiCache::Snapshot	Yes	Yes	No

AWS Elastic Beanstalk

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::ElasticBeanstalk::Application	Yes	Yes	No
AWS::ElasticBeanstalk::ApplicationVersion	No	Yes	No
AWS::ElasticBeanstalk::ConfigurationTemplate	No	Yes	No
AWS::ElasticBeanstalk::Environment	No	Yes	No

Amazon Elastic Compute Cloud (Amazon EC2)

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::EC2::CapacityReservation	No	Yes	No
AWS::EC2::CustomerGateway	Yes	Yes	Yes
AWS::EC2::DHCPOptions	Yes	Yes	Yes
AWS::EC2::EIP	Yes	Yes	No
AWS::EC2::Host	No	Yes	No
AWS::EC2::Image	Yes	Yes	No
AWS::EC2::Instance	Yes	Yes	Yes
AWS::EC2::InternetGateway	Yes	Yes	Yes
AWS::EC2::LaunchTemplate	No	Yes	Yes
AWS::EC2::NatGateway	No	Yes	Yes
AWS::EC2::NetworkAcl	Yes	Yes	Yes
AWS::EC2::NetworkInterface	Yes	Yes	Yes
AWS::EC2::ReservedInstance	Yes	Yes	No
AWS::EC2::RouteTable	Yes	Yes	Yes
AWS::EC2::SecurityGroup	Yes	Yes	Yes
AWS::EC2::Snapshot	Yes	Yes	No
AWS::EC2::SpotInstanceRequest	Yes	Yes	No
AWS::EC2::Subnet	Yes	Yes	Yes
AWS::EC2::TransitGateway	No	Yes	No
AWS::EC2::TransitGatewayRouteTable	No	Yes	No
AWS::EC2::Volume	Yes	Yes	Yes
AWS::EC2::VPC	Yes	Yes	Yes
AWS::EC2::VPCPeeringConnection	No	Yes	Yes
AWS::EC2::VPNConnection	Yes	Yes	Yes
AWS::EC2::VPNGateway	Yes	Yes	Yes

Amazon Elastic Container Registry

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::ECR::Repository	No	Yes	No

Amazon Elastic Container Service

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::ECS::Cluster	Yes	Yes	No
AWS::ECS::ContainerInstance	No	Yes	No
AWS::ECS::Service	No	Yes	No
AWS::ECS::Task	No	Yes	No
AWS::ECS::TaskDefinition	Yes	Yes	No

Amazon Elastic File System

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::EFS::FileSystem	Yes	Yes	Yes

Elastic Load Balancing

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::ElasticLoadBalancing::LoadBalancer	Yes	Yes	Yes
AWS::ElasticLoadBalancingV2::LoadBalancer	Yes	Yes	Yes
AWS::ElasticLoadBalancingV2::TargetGroup	Yes	Yes	Yes

Amazon Elasticsearch Service

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Elasticsearch::Domain	Yes	Yes	Yes

Amazon CloudWatch Events

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Events::Rule	Yes	Yes	Yes

Amazon FSx

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::FSx::FileSystem	Yes	Yes	No

AWS Glue

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Glue::Crawler	Yes	Yes	No
AWS::Glue::Database	No	No	Yes
AWS::Glue::Job	Yes	Yes	No
AWS::Glue::Trigger	Yes	Yes	No

AWS Identity and Access Management

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::IAM::Role	No	No	Yes

Amazon Inspector

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Inspector::AssessmentTemplate	No	Yes	Yes

AWS IoT

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::IoT::TopicRule	No	Yes	Yes

AWS IoT Analytics

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::IoTAnalytics::Channel	No	Yes	No
AWS::IoTAnalytics::Dataset	Yes	Yes	No
AWS::IoTAnalytics::Datastore	No	Yes	No
AWS::IoTAnalytics::Pipeline	No	Yes	No

AWS IoT Events

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::IoTEvents::DetectorModel	Yes	Yes	Yes
AWS::IoTEvents::Input	Yes	Yes	Yes

AWS IoT Greengrass

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Greengrass::ConnectorDefinition	Yes	Yes	No
AWS::Greengrass::CoreDefinition	Yes	Yes	No
AWS::Greengrass::DeviceDefinition	Yes	Yes	No
AWS::Greengrass::FunctionDefinition	Yes	Yes	No
AWS::Greengrass::Group	Yes	Yes	No
AWS::Greengrass::LoggerDefinition	Yes	Yes	No
AWS::Greengrass::ResourceDefinition	Yes	Yes	No
AWS::Greengrass::SubscriptionDefinition	Yes	Yes	No

AWS Key Management Service

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::KMS::Alias	No	No	Yes
AWS::KMS::Key	Yes	Yes	Yes

Amazon Kinesis

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Kinesis::Stream	Yes	Yes	Yes

Amazon Kinesis Data Analytics

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::KinesisAnalytics::Application	Yes	Yes	Yes
AWS::KinesisAnalyticsV2::Application	No	No	Yes

Amazon Kinesis Data Firehose

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::KinesisFirehose::DeliveryStream	No	Yes	Yes

AWS Lambda

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Lambda::Alias	No	No	Yes
AWS::Lambda::EventSourceMapping	No	No	Yes
AWS::Lambda::Function	Yes	Yes	Yes
AWS::Lambda::LayerVersion	No	No	Yes
AWS::Lambda::Version	No	No	Yes

Amazon MQ

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::AmazonMQ::Broker	Yes	Yes	No
AWS::AmazonMQ::Configuration	Yes	Yes	No

Amazon Managed Streaming for Apache Kafka

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Kafka::Cluster	Yes	Yes	No

AWS OpsWorks

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::OpsWorks::Instance	No	Yes	Yes
AWS::OpsWorks::Layer	No	Yes	Yes
AWS::OpsWorks::Stack	No	Yes	Yes

AWS Organizations

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Organizations::Account	Yes	Yes	No

Amazon Quantum Ledger Database (Amazon QLDB)

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::QLDB::Ledger	Yes	Yes	Yes

Amazon Redshift

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Redshift::Cluster	Yes	Yes	Yes
AWS::Redshift::ClusterParameterGroup	Yes	Yes	Yes
AWS::Redshift::ClusterSecurityGroup	No	Yes	Yes
AWS::Redshift::ClusterSubnetGroup	Yes	Yes	Yes
AWS::Redshift::HSMClientCertificate	Yes	Yes	No

Amazon Relational Database Service (Amazon RDS)

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::RDS::DBCluster	Yes	Yes	Yes
AWS::RDS::DBClusterParameterGroup	Yes	Yes	Yes
AWS::RDS::DBClusterSnapshot	Yes	Yes	No
AWS::RDS::DBInstance	Yes	Yes	Yes
AWS::RDS::DBParameterGroup	Yes	Yes	Yes
AWS::RDS::DBSecurityGroup	Yes	Yes	Yes
AWS::RDS::DBSnapshot	Yes	Yes	No
AWS::RDS::DBSubnetGroup	Yes	Yes	Yes
AWS::RDS::EventSubscription	Yes	Yes	No
AWS::RDS::OptionGroup	Yes	Yes	No
AWS::RDS::ReservedDBInstance	Yes	Yes	No

AWS Resource Access Manager

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::RAM::ResourceShare	Yes	Yes	No

AWS Resource Groups

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::ResourceGroups::Group	Yes	Yes	No

AWS robomaker

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::RoboMaker::DeploymentJob	Yes	Yes	No
AWS::RoboMaker::Fleet	Yes	Yes	No
AWS::RoboMaker::Robot	Yes	Yes	No
AWS::RoboMaker::RobotApplication	Yes	Yes	No
AWS::RoboMaker::SimulationApplication	Yes	Yes	No
AWS::RoboMaker::SimulationJob	Yes	Yes	No

Amazon Route 53

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Route53::Domain	Yes¹	Yes²	No
AWS::Route53::HealthCheck	Yes¹	Yes²	Yes²
AWS::Route53::HostedZone	Yes¹	Yes²	Yes²

¹ This is a resource for a global service that is hosted in the US East (N. Virginia) Region. To use Tag Editor to create or modify tags for this resource type, you must include us-east-1 from the Select regions list under Find resources to tag in the Tag Editor console.

² This is a resource for a global service that is hosted in the US East (N. Virginia) Region. Because Resource Groups are maintained separately for each region, you must switch your AWS console to the Region that contains the resources you want to include in the group. To create a resource group that contains a global resource, you must configure your AWS Console to US East (N. Virginia) us-east-1 using the Region selector in the upper-right corner of the AWS console.

Amazon Route 53 resolver

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Route53Resolver::ResolverEndpoint	Yes¹	Yes²	No
AWS::Route53Resolver::ResolverRule	Yes¹	Yes²	No

¹ This is a resource for a global service that is hosted in the US East (N. Virginia) Region. To use Tag Editor to create or modify tags for this resource type, you must include us-east-1 from the Select regions list under Find resources to tag in the Tag Editor console.

² This is a resource for a global service that is hosted in the US East (N. Virginia) Region. Because Resource Groups are maintained separately for each region, you must switch your AWS console to the Region that contains the resources you want to include in the group. To create a resource group that contains a global resource, you must configure your AWS Console to US East (N. Virginia) us-east-1 using the Region selector in the upper-right corner of the AWS console.

Amazon S3 Glacier

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::Glacier::Vault	Yes	Yes	No

Amazon SageMaker

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::SageMaker::Endpoint	No	Yes	Yes
AWS::SageMaker::EndpointConfig	No	Yes	Yes
AWS::SageMaker::HyperParameterTuningJob	No	Yes	No
AWS::SageMaker::LabelingJob	No	Yes	No
AWS::SageMaker::Model	No	Yes	Yes
AWS::SageMaker::NotebookInstance	Yes	Yes	Yes
AWS::SageMaker::TrainingJob	No	Yes	No
AWS::SageMaker::TransformJob	No	Yes	No
AWS::SageMaker::Workteam	No	Yes	No

AWS Secrets Manager

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::SecretsManager::Secret	Yes	Yes	Yes

AWS Service Catalog

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::ServiceCatalog::CloudFormationProduct	No	Yes	Yes
AWS::ServiceCatalog::Portfolio	No	Yes	Yes

Amazon Simple Notification Service

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::SNS::Topic	Yes	Yes	Yes

Amazon Simple Queue Service

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::SQS::Queue	Yes	Yes	Yes

Amazon Simple Storage Service (Amazon S3)

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::S3::Bucket	Yes	Yes	Yes

AWS Step Functions

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::StepFunctions::Activity	Yes	Yes	Yes
AWS::StepFunctions::StateMachine	Yes	Yes	Yes

AWS Storage Gateway

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::StorageGateway::Gateway	Yes	Yes	No
AWS::StorageGateway::Volume	No	Yes	No

AWS Systems Manager

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::SSM::Document	No	Yes	Yes
AWS::SSM::MaintenanceWindow	No	Yes	No
AWS::SSM::ManagedInstance	No	Yes	No
AWS::SSM::Parameter	Yes	Yes	Yes
AWS::SSM::PatchBaseline	No	Yes	Yes

Amazon WorkSpaces

Resources	Tag Editor Tagging	Tag-based Groups	AWS CloudFormation Stack-based Groups
AWS::WorkSpaces::Workspace	Yes	Yes	Yes