AWS Resource Groups
User Guide

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.

Supported Resources

You can use the AWS Management Console or the AWS CLI to add tags to many AWS resources. This topic describes resources that you can query and group into resource groups by using AWS Resource Groups, and resources that you can tag by using Tag Editor.

Supported Resources for AWS Resource Groups

Use the AWS Resource Groups service to create groups for the following AWS resources. The supported resources vary slightly depending on whether you are creating a tag-based or an AWS CloudFormation stack-based group. Resources for global services (such as Amazon CloudFront and Route 53) appear only in the US East (N. Virginia) Region (us-east-1).

Important

A resource group based on a query for All supported resource types can add members automatically over time, as new resources are supported by Resource Groups. When you run automations or other bulk tasks on an existing resource group based on All supported resource types, be aware that the actions might be run on many more resources than were in the group when you first created it. This might also mean that automations or tasks that you created for other resources are applied to unintended resources, or resources on which the tasks cannot be completed.


                    Query based on All supported resource
                        types.

Supported Resources for Tag-based Groups

Service Resources

Amazon API Gateway

  • AWS::ApiGateway::Stage

  • AWS::ApiGateway::RestApi

Amazon AppStream

  • AWS::AppStream::Fleet

  • AWS::AppStream::ImageBuilder

  • AWS::AppStream::Stack

AWS Certificate Manager

  • AWS::CertificateManager::Certificate

AWS CloudFormation

  • AWS::CloudFormation::Stack

Amazon CloudFront

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::CloudFront::Distribution

  • AWS::CloudFront::StreamingDistribution

AWS CloudTrail

  • AWS::CloudTrail::Trail

Amazon CloudWatch

  • AWS::CloudWatch::Alarm

Amazon CloudWatch Events

  • AWS::Events::Rule

Amazon CloudWatch Logs

  • AWS::Logs::LogGroup

AWS CodeBuild

  • AWS::CodeBuild::Project

AWS CodeCommit

  • AWS::CodeCommit::Repository

AWS CodePipeline

  • AWS::CodePipeline::Pipeline

  • AWS::CodePipeline::Webhook

Amazon Cognito

  • AWS:Cognito::IdentityPool

  • AWS::Cognito::UserPool

AWS Config

  • AWS::Config::ConfigRule

AWS Data Pipeline

  • AWS::DataPipeline::Pipeline

AWS Database Migration Service

  • AWS::DMS::Certificate

  • AWS::DMS::Endpoint

  • AWS::DMS::EventSubscription

  • AWS::DMS::ReplicationInstance

  • AWS::DMS::ReplicationSubnetGroup

  • AWS::DMS::ReplicationTask

Amazon DynamoDB

  • AWS::DynamoDB::Table

AWS Elastic Beanstalk

  • AWS::ElasticBeanstalk::Application

  • AWS::ElasticBeanstalk::ApplicationVersion

  • AWS::ElasticBeanstalk::ConfigurationTemplate

  • AWS::ElasticBeanstalk::Environment

Amazon Elastic Compute Cloud (Amazon EC2)

  • AWS::EC2::CapacityReservation

  • AWS::EC2::CustomerGateway

  • AWS::EC2::DHCPOptions

  • AWS::EC2::EIP

  • AWS::EC2::Host

  • AWS::EC2::Image

  • AWS::EC2::Instance

  • AWS::EC2::InternetGateway

  • AWS::EC2::LaunchTemplate

  • AWS::EC2::NatGateway

  • AWS::EC2::NetworkAcl

  • AWS::EC2::NetworkInterface

  • AWS::EC2::ReservedInstance

  • AWS::EC2::RouteTable

  • AWS::EC2::SecurityGroup

  • AWS::EC2::Snapshot

  • AWS::EC2::SpotInstanceRequest

  • AWS::EC2::Subnet

  • AWS::EC2::TransitGateway

  • AWS::EC2::TransitGatewayRouteTable

  • AWS::EC2::VPC

  • AWS::EC2::VPCPeeringConnection

  • AWS::EC2::VPNConnection

  • AWS::EC2::VPNGateway

  • AWS::EC2::Volume

Amazon Elastic Container Registry

  • AWS::ECR::Repository

Amazon Elastic Container Service

  • AWS::ECS::Cluster

  • AWS::ECS::ContainerInstance

  • AWS::ECS::Service

  • AWS::ECS::Task

  • AWS::ECS::TaskDefinition

Amazon ElastiCache

  • AWS::ElastiCache::CacheCluster

  • AWS::ElastiCache::Snapshot

Amazon Elastic File System

  • AWS::EFS::FileSystem

Elastic Load Balancing

  • AWS::ElasticLoadBalancing::LoadBalancer

  • AWS::ElasticLoadBalancingV2::LoadBalancer

  • AWS::ElasticLoadBalancingV2::TargetGroup

Amazon EMR

  • AWS::EMR::Cluster

Amazon Elasticsearch Service

  • AWS::Elasticsearch::Domain

Amazon FSx

  • AWS::FSx::FileSystem

Amazon S3 Glacier

  • AWS::Glacier::Vault

AWS Glue

  • AWS::Glue::Crawler

  • AWS::Glue::Job

  • AWS::Glue::Trigger

Amazon Inspector

  • AWS::Inspector::AssessmentTemplate

AWS IoT

  • AWS::IoT::TopicRule

AWS IoT Analytics

  • AWS::IoTAnalytics::Channel

  • AWS::IoTAnalytics::Datastore

  • AWS::IoTAnalytics::Dataset

  • AWS::IoTAnalytics::Pipeline

AWS IoT Events

  • AWS::IoTEvents::DetectorModel

  • AWS::IoTEvents::Input

AWS Key Management Service

  • AWS::KMS::Key

Amazon Kinesis

  • AWS::Kinesis::Stream

Amazon Kinesis Data Analytics

  • AWS::KinesisAnalytics::Application

Amazon Kinesis Data Firehose

  • AWS::KinesisFirehose::DeliveryStream

AWS Lambda

  • AWS::Lambda::Function

Amazon Managed Streaming for Kafka

  • AWS::Kafka::Cluster

Amazon MQ

  • AWS::AmazonMQ::Broker

  • AWS::AmazonMQ::Configuration

AWS OpsWorks

  • AWS::OpsWorks::Instance

  • AWS::OpsWorks::Layer

  • AWS::OpsWorks::Stack

AWS Organizations
  • AWS::Organizations::Account

Amazon Quantum Ledger Database (Amazon QLDB)

  • AWS::QLDB::Ledger

Amazon Redshift

  • AWS::Redshift::Cluster

  • AWS::Redshift::ClusterParameterGroup

  • AWS::Redshift::ClusterSecurityGroup

  • AWS::Redshift::ClusterSubnetGroup

  • AWS::Redshift::HSMClientCertificate

Amazon Relational Database Service (Amazon RDS)

  • AWS::RDS::DBCluster

  • AWS::RDS::DBClusterParameterGroup

  • AWS::RDS::DBClusterSnapshot

  • AWS::RDS::DBInstance

  • AWS::RDS::DBParameterGroup

  • AWS::RDS::DBSecurityGroup

  • AWS::RDS::DBSnapshot

  • AWS::RDS::DBSubnetGroup

  • AWS::RDS::EventSubscription

  • AWS::RDS::OptionGroup

  • AWS::RDS::ReservedDBInstance

AWS Resource Access Manager

  • AWS::RAM::ResourceShare

AWS Resource Groups

  • AWS::ResourceGroups::Group

    (Lets you create a nested resource group, or a resource group that contains other resource groups)

AWS RoboMaker

  • AWS::RoboMaker::DeploymentJob

  • AWS::RoboMaker::Fleet

  • AWS::RoboMaker::Robot

  • AWS::RoboMaker::RobotApplication

  • AWS::RoboMaker::SimulationApplication

  • AWS::RoboMaker::SimulationJob

Amazon Route 53

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::Route53::Domain

  • AWS::Route53::HealthCheck

  • AWS::Route53::HostedZone

Amazon Route 53 Resolver

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::Route53Resolver::ResolverEndpoint

  • AWS::Route53Resolver::ResolverRule

Amazon SageMaker

  • AWS::SageMaker::Endpoint

  • AWS::SageMaker::EndpointConfig

  • AWS::SageMaker::HyperParameterTuningJob

  • AWS::SageMaker::LabelingJob

  • AWS::SageMaker::Model

  • AWS::SageMaker::NotebookInstance

  • AWS::SageMaker::TrainingJob

  • AWS::SageMaker::TransformJob

  • AWS::SageMaker::Workteam

AWS Secrets Manager
  • AWS::SecretsManager::Secret

AWS Service Catalog

  • AWS::ServiceCatalog::CloudFormationProduct

  • AWS::ServiceCatalog::Portfolio

Amazon Simple Notification Service

  • AWS::SNS::Topic

Amazon Simple Queue Service

  • AWS::SQS::Queue

Amazon Simple Storage Service (Amazon S3)

  • AWS::S3::Bucket

AWS Step Functions

  • AWS::StepFunctions::Activity

  • AWS::StepFunctions::StateMachine

AWS Storage Gateway

  • AWS::StorageGateway::Gateway

  • AWS::StorageGateway::Volume

AWS Systems Manager

  • AWS::SSM::Document

  • AWS::SSM::MaintenanceWindow

  • AWS::SSM::ManagedInstance

  • AWS::SSM::Parameter

  • AWS::SSM::PatchBaseline

Amazon WorkSpaces

  • AWS::WorkSpaces::Workspace

Supported Resources for AWS CloudFormation Stack-based Groups

Service Resources

Amazon API Gateway

  • AWS::ApiGateway::Account

  • AWS::ApiGateway::ApiKey

  • AWS::ApiGateway::DomainName

  • AWS::ApiGateway::RestApi

  • AWS::ApiGateway::UsagePlan

AWS AppSync

  • AWS::AppSync::DataSource

  • AWS::AppSync::GraphQLApi

AWS Certificate Manager

  • AWS::CertificateManager::Certificate

AWS CloudFormation
  • AWS::CloudFormation::Stack

Amazon CloudFront

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::CloudFront::Distribution

  • AWS::CloudFront::StreamingDistribution

AWS CloudTrail

  • AWS::CloudTrail::Trail

Amazon CloudWatch

  • AWS::CloudWatch::Alarm

  • AWS::CloudWatch::Dashboard

Amazon CloudWatch Events

  • AWS::Events::Rule

Amazon CloudWatch Logs

  • AWS::Logs::LogGroup

AWS CodeDeploy

  • AWS::CodeDeploy::Application

  • AWS::CodeDeploy::DeploymentConfig

AWS CodePipeline

  • AWS::CodePipeline::Pipeline

  • AWS::CodePipeline::Webhook

Amazon Cognito

  • AWS::Cognito::IdentityPool

  • AWS::Cognito::UserPool

AWS Data Pipeline

  • AWS::DataPipeline::Pipeline

AWS Database Migration Service

  • AWS::DMS::Endpoint

  • AWS::DMS::ReplicationInstance

Amazon DynamoDB

  • AWS::DynamoDB::Table

Amazon Elastic Compute Cloud (Amazon EC2)

  • AWS::EC2::CustomerGateway

  • AWS::EC2::DHCPOptions

  • AWS::EC2::Instance

  • AWS::EC2::InternetGateway

  • AWS::EC2::LaunchTemplate

  • AWS::EC2::NatGateway

  • AWS::EC2::NetworkAcl

  • AWS::EC2::NetworkInterface

  • AWS::EC2::RouteTable

  • AWS::EC2::SecurityGroup

  • AWS::EC2::Subnet

  • AWS::EC2::VPC

  • AWS::EC2::VPCPeeringConnection

  • AWS::EC2::VPNConnection

  • AWS::EC2::VPNGateway

  • AWS::EC2::Volume

Amazon Elastic File System

  • AWS::EFS::FileSystem

Elastic Load Balancing

  • AWS::ElasticLoadBalancing::LoadBalancer

  • AWS::ElasticLoadBalancingV2::LoadBalancer

  • AWS::ElasticLoadBalancingV2::TargetGroup

Amazon ElastiCache

  • AWS::ElastiCache::CacheCluster

Amazon Elasticsearch Service

  • AWS::Elasticsearch::Domain

Amazon EMR

  • AWS::EMR::Cluster

AWS Glue

  • AWS::Glue::Database

AWS Identity and Access Management (IAM)

  • AWS::IAM::Role

AWS IoT

  • AWS::IoT::TopicRule

AWS IoT Events

  • AWS::IoTEvents::DetectorModel

  • AWS::IoTEvents::Input

Amazon Inspector

  • AWS::Inspector::AssessmentTemplate

AWS Key Management Service

  • AWS::KMS::Key

  • AWS::KMS::Alias

Amazon Kinesis

  • AWS::Kinesis::Stream

AWS Lambda

  • AWS::Lambda::Alias

  • AWS::Lambda::EventSourceMapping

  • AWS::Lambda::Function

  • AWS::Lambda::LayerVersion

  • AWS::Lambda::Version

AWS OpsWorks

  • AWS::OpsWorks::Instance

  • AWS::OpsWorks::Layer

  • AWS::OpsWorks::Stack

Amazon Quantum Ledger Database (Amazon QLDB)

  • AWS::QLDB::Ledger

Amazon Redshift

  • AWS::Redshift::Cluster

  • AWS::Redshift::ClusterParameterGroup

  • AWS::Redshift::ClusterSecurityGroup

  • AWS::Redshift::ClusterSubnetGroup

Amazon Relational Database Service (Amazon RDS)

  • AWS::RDS::DBCluster

  • AWS::RDS::DBClusterParameterGroup

  • AWS::RDS::DBInstance

  • AWS::RDS::DBParameterGroup

  • AWS::RDS::DBSecurityGroup

  • AWS::RDS::DBSubnetGroup

Amazon Route 53

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::Route53::HealthCheck

  • AWS::Route53::HostedZone

Amazon SageMaker

  • AWS::SageMaker::Endpoint

  • AWS::SageMaker::EndpointConfig

  • AWS::SageMaker::Model

  • AWS::SageMaker::NotebookInstance

AWS Secrets Manager

  • AWS::SecretsManager::Secret

AWS Service Catalog

  • AWS::ServiceCatalog::CloudFormationProduct

  • AWS::ServiceCatalog::Portfolio

Amazon Simple Notification Service

  • AWS::SNS::Topic

Amazon Simple Queue Service

  • AWS::SQS::Queue

Amazon Simple Storage Service (Amazon S3)

  • AWS::S3::Bucket

AWS Step Functions

  • AWS::StepFunctions::Activity

  • AWS::StepFunctions::StateMachine

AWS Systems Manager

  • AWS::SSM::Document

  • AWS::SSM::Parameter

  • AWS::SSM::PatchBaseline

Amazon WorkSpaces

  • AWS::WorkSpaces::Workspace

Supported Resources for Tag Editor Tagging

You can use Tag Editor in the AWS Management Console to tag the following AWS resources. For more information, see Working with Tag Editor.

Service Resources

AWS CloudFormation

  • AWS::CloudFormation::Stack

Amazon CloudFront

  • AWS::CloudFront::Distribution

  • AWS::CloudFront::StreamingDistribution

Amazon CloudWatch

  • AWS::CloudWatch::Alarm

Amazon CloudWatch Events

  • AWS::Events::Rule

Amazon CloudWatch Logs

  • AWS::Logs::LogGroup

AWS CodeBuild

  • AWS::CodeBuild::Project

AWS CodePipeline

  • AWS::CodePipeline::Pipeline

  • AWS::CodePipeline::Webhook

Amazon Cognito

  • AWS::Cognito::IdentityPool

  • AWS::Cognito::UserPool

AWS Config

  • AWS::Config::ConfigRule

AWS Data Pipeline

  • AWS::DataPipeline::Pipeline

Amazon DynamoDB

  • AWS::DynamoDB::Table

AWS Elastic Beanstalk

  • AWS::ElasticBeanstalk::Application

Amazon Elastic Compute Cloud (Amazon EC2)

  • AWS::EC2::CustomerGateway

  • AWS::EC2::DHCPOptions

  • AWS::EC2::EIP

  • AWS::EC2::Image

  • AWS::EC2::Instance

  • AWS::EC2::InternetGateway

  • AWS::EC2::NetworkAcl

  • AWS::EC2::NetworkInterface

  • AWS::EC2::ReservedInstance

  • AWS::EC2::RouteTable

  • AWS::EC2::SecurityGroup

  • AWS::EC2::Snapshot

  • AWS::EC2::SpotInstanceRequest

  • AWS::EC2::Subnet

  • AWS::EC2::Volume

  • AWS::EC2::VPC

  • AWS::EC2::VPNConnection

  • AWS::EC2::VPNGateway

Elastic Load Balancing

  • AWS::ElasticLoadBalancing::LoadBalancer

  • AWS::ElasticLoadBalancingV2::LoadBalancer

  • AWS::ElasticLoadBalancingV2::TargetGroup

Amazon ElastiCache

  • AWS::ElastiCache::CacheCluster

  • AWS::ElastiCache::Snapshot

Amazon Elasticsearch Service

  • AWS::Elasticsearch::Domain

Amazon EMR

  • AWS::EMR::Cluster

Amazon FSx

  • AWS::FSx::FileSystem

Glacier

  • AWS::Glacier::Vault

AWS Glue

  • AWS::Glue::Crawler

  • AWS::Glue::Job

  • AWS::Glue::Trigger

AWS IoT Analytics

  • AWS::IoTAnalytics::Dataset

AWS IoT Events

  • AWS::IoTEvents::DetectorModel

  • AWS::IoTEvents::Input

AWS Key Management Service

  • AWS::KMS::Key

Kinesis

  • AWS::Kinesis::Stream

Amazon Kinesis Data Analytics

  • AWS::KinesisAnalytics::Application

AWS Lambda

  • AWS::Lambda::Function

Amazon Managed Streaming for Kafka

  • AWS::Kafka::Cluster

Amazon MQ

  • AWS::AmazonMQ::Broker

  • AWS::AmazonMQ::Configuration

AWS Organizations

  • AWS::Organizations::Account

Amazon Quantum Ledger Database (Amazon QLDB)

  • AWS::QLDB::Ledger

Amazon Redshift

  • AWS::Redshift::Cluster

  • AWS::Redshift::HSMClientCertificate

  • AWS::Redshift::ClusterParameterGroup

  • AWS::Redshift::ClusterSubnetGroup

Amazon Relational Database Service (Amazon RDS)

  • AWS::RDS::DBInstance

  • AWS::RDS::DBParameterGroup

  • AWS::RDS::DBSecurityGroup

  • AWS::RDS::DBSnapshot

  • AWS::RDS::DBSubnetGroup

  • AWS::RDS::EventSubscription

  • AWS::RDS::OptionGroup

  • AWS::RDS::ReservedDBInstance

AWS Resource Access Manager

  • AWS::RAM::ResourceShare

AWS Resource Groups

  • AWS::ResourceGroups::Group

AWS RoboMaker

  • AWS::RoboMaker::DeploymentJob

  • AWS::RoboMaker::Fleet

  • AWS::RoboMaker::Robot

  • AWS::RoboMaker::RobotApplication

  • AWS::RoboMaker::SimulationApplication

  • AWS::RoboMaker::SimulationJob

Amazon Route 53

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::Route53::Domain

  • AWS::Route53::HealthCheck

  • AWS::Route53::HostedZone

Amazon SageMaker

  • AWS::SageMaker::NotebookInstance

Amazon Simple Storage Service (Amazon S3)

  • AWS::S3::Bucket

AWS Systems Manager

  • AWS::SSM::Parameter

AWS Step Functions

  • AWS::StepFunctions::Activity

  • AWS::StepFunctions::StateMachine

AWS Storage Gateway

  • AWS::StorageGateway::Gateway