AWS Documentation » AWS Resource Groups » User Guide » What Is AWS Resource Groups? » Supported Resources

Supported Resources

You can use the AWS Management Console or the AWS CLI to add tags to many AWS resources. This topic describes resources that you can query and group into resource groups by using AWS Resource Groups, and resources that you can tag by using Tag Editor.

Supported Resources for AWS Resource Groups

Use the AWS Resource Groups service to create groups for the following AWS resources. The supported resources vary slightly depending on whether you are creating a tag-based or an AWS CloudFormation stack-based group. Resources for global services (such as Amazon CloudFront and Route 53) appear only in the US East (N. Virginia) Region (us-east-1).

Important

A resource group based on a query for All supported resource types can add members automatically over time, as new resources are supported by Resource Groups. When you run automations or other bulk tasks on an existing resource group based on All supported resource types, be aware that the actions might be run on many more resources than were in the group when you first created it. This might also mean that automations or tasks that you created for other resources are applied to unintended resources, or resources on which the tasks cannot be completed.

Topics

• Supported Resources for Tag-based Groups
• Supported Resources for AWS CloudFormation Stack-based Groups

Supported Resources for Tag-based Groups

Service	Resources
Amazon API Gateway	AWS::ApiGateway::Stage AWS::ApiGateway::RestApi
Amazon AppStream	AWS::AppStream::Fleet AWS::AppStream::ImageBuilder AWS::AppStream::Stack
AWS Certificate Manager	AWS::CertificateManager::Certificate
Amazon CloudFront	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::CloudFront::Distribution AWS::CloudFront::StreamingDistribution
AWS CloudFormation	AWS::CloudFormation::Stack
AWS CloudTrail	AWS::CloudTrail::Trail
Amazon CloudWatch	AWS::CloudWatch::Alarm
Amazon CloudWatch Events	AWS::Events::Rule
Amazon CloudWatch Logs	AWS::Logs::LogGroup
AWS CodeBuild	AWS::CodeBuild::Project
AWS CodeCommit	AWS::CodeCommit::Repository
Amazon Cognito	AWS:Cognito::IdentityPool AWS::Cognito::UserPool
AWS Config	AWS::Config::ConfigRule
AWS Database Migration Service	AWS::DMS::Certificate AWS::DMS::Endpoint AWS::DMS::EventSubscription AWS::DMS::ReplicationInstance AWS::DMS::ReplicationSubnetGroup AWS::DMS::ReplicationTask
AWS Data Pipeline	AWS::DataPipeline::Pipeline
Amazon DynamoDB	AWS::DynamoDB::Table
AWS Elastic Beanstalk	AWS::ElasticBeanstalk::Application AWS::ElasticBeanstalk::ApplicationVersion AWS::ElasticBeanstalk::ConfigurationTemplate
Amazon Elastic Compute Cloud (Amazon EC2)	AWS::EC2::CapacityReservation AWS::EC2::CustomerGateway AWS::EC2::DHCPOptions AWS::EC2::EIP AWS::EC2::Host AWS::EC2::Image AWS::EC2::Instance AWS::EC2::InternetGateway AWS::EC2::LaunchTemplate AWS::EC2::NatGateway AWS::EC2::NetworkAcl AWS::EC2::NetworkInterface AWS::EC2::ReservedInstance AWS::EC2::RouteTable AWS::EC2::SecurityGroup AWS::EC2::Snapshot AWS::EC2::SpotInstanceRequest AWS::EC2::Subnet AWS::EC2::TransitGateway AWS::EC2::TransitGatewayRouteTable AWS::EC2::VPC AWS::EC2::VPCPeeringConnection AWS::EC2::VPNConnection AWS::EC2::VPNGateway AWS::EC2::Volume
Amazon Elastic Container Registry	AWS::ECR::Repository
Amazon Elastic Container Service	AWS::ECS::Cluster AWS::ECS::ContainerInstance AWS::ECS::Service AWS::ECS::Task AWS::ECS::TaskDefinition
AWS Elastic Beanstalk	AWS::ElasticBeanstalk::Environment
Amazon ElastiCache	AWS::ElastiCache::CacheCluster AWS::ElastiCache::Snapshot
Amazon Elastic File System	AWS::EFS::FileSystem
Elastic Load Balancing	AWS::ElasticLoadBalancing::LoadBalancer AWS::ElasticLoadBalancingV2::LoadBalancer AWS::ElasticLoadBalancingV2::TargetGroup
Amazon EMR	AWS::EMR::Cluster
Amazon Elasticsearch Service	AWS::Elasticsearch::Domain
Amazon FSx	AWS::FSx::FileSystem
Amazon S3 Glacier	AWS::Glacier::Vault
AWS Glue	AWS::Glue::Crawler AWS::Glue::Job AWS::Glue::Trigger
Amazon Inspector	AWS::Inspector::AssessmentTemplate
AWS IoT	AWS::IoT::TopicRule
AWS IoT Analytics	AWS::IoTAnalytics::Channel AWS::IoTAnalytics::Datastore AWS::IoTAnalytics::Dataset AWS::IoTAnalytics::Pipeline
AWS Key Management Service	AWS::KMS::Key
Amazon Kinesis	AWS::Kinesis::Stream
Amazon Kinesis Data Firehose	AWS::KinesisFirehose::DeliveryStream
AWS Lambda	AWS::Lambda::Function
Amazon Managed Streaming for Kafka	AWS::Kafka::Cluster
Amazon MQ	AWS::AmazonMQ::Broker AWS::AmazonMQ::Configuration
AWS OpsWorks	AWS::OpsWorks::Instance AWS::OpsWorks::Layer AWS::OpsWorks::Stack
AWS Organizations	AWS::Organizations::Account
AWS Resource Access Manager	AWS::RAM::ResourceShare
Amazon Relational Database Service (Amazon RDS)	AWS::RDS::DBCluster AWS::RDS::DBClusterParameterGroup AWS::RDS::DBInstance AWS::RDS::DBParameterGroup AWS::RDS::DBSecurityGroup AWS::RDS::DBSnapshot AWS::RDS::DBSubnetGroup AWS::RDS::EventSubscription AWS::RDS::OptionGroup AWS::RDS::ReservedDBInstance
Amazon Redshift	AWS::Redshift::Cluster AWS::Redshift::ClusterParameterGroup AWS::Redshift::ClusterSecurityGroup AWS::Redshift::ClusterSubnetGroup AWS::Redshift::HSMClientCertificate
AWS Resource Groups	AWS::ResourceGroups::Group (Lets you create a nested resource group, or a resource group that contains other resource groups)
AWS RoboMaker	AWS::RoboMaker::DeploymentJob AWS::RoboMaker::Fleet AWS::RoboMaker::Robot AWS::RoboMaker::RobotApplication AWS::RoboMaker::SimulationApplication AWS::RoboMaker::SimulationJob
Amazon Route 53	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::Route53::Domain AWS::Route53::HealthCheck AWS::Route53::HostedZone
Amazon Route 53 Resolver	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::Route53Resolver::ResolverEndpoint AWS::Route53Resolver::ResolverRule
Amazon SageMaker	AWS::SageMaker::Endpoint AWS::SageMaker::EndpointConfig AWS::SageMaker::HyperParameterTuningJob AWS::SageMaker::Model AWS::SageMaker::NotebookInstance AWS::SageMaker::TrainingJob AWS::SageMaker::TransformJob AWS::SageMaker::Workteam
AWS Secrets Manager	AWS::SecretsManager::Secret
AWS Service Catalog	AWS::ServiceCatalog::CloudFormationProduct AWS::ServiceCatalog::Portfolio
Amazon Simple Notification Service	AWS::SNS::Topic
Amazon Simple Queue Service	AWS::SQS::Queue
Amazon Simple Storage Service (Amazon S3)	AWS::S3::Bucket
AWS Step Functions	AWS::StepFunctions::Activity AWS::StepFunctions::StateMachine
AWS Storage Gateway	AWS::StorageGateway::Gateway AWS::StorageGateway::Volume
AWS Systems Manager	AWS::SSM::Document AWS::SSM::MaintenanceWindow AWS::SSM::ManagedInstance AWS::SSM::Parameter AWS::SSM::PatchBaseline
Amazon WorkSpaces	AWS::WorkSpaces::Workspace

Supported Resources for AWS CloudFormation Stack-based Groups

Service	Resources
Amazon API Gateway	AWS::ApiGateway::Account AWS::ApiGateway::ApiKey AWS::ApiGateway::DomainName AWS::ApiGateway::RestApi AWS::ApiGateway::UsagePlan
AWS AppSync	AWS::AppSync::DataSource AWS::AppSync::GraphQLApi
AWS Certificate Manager	AWS::CertificateManager::Certificate
AWS CloudFormation	AWS::CloudFormation::Stack
Amazon CloudFront	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::CloudFront::Distribution AWS::CloudFront::StreamingDistribution
AWS CloudTrail	AWS::CloudTrail::Trail
Amazon CloudWatch	AWS::CloudWatch::Alarm AWS::CloudWatch::Dashboard
Amazon CloudWatch Events	AWS::Events::Rule
Amazon CloudWatch Logs	AWS::Logs::LogGroup
Amazon Cognito	AWS::Cognito::IdentityPool AWS::Cognito::UserPool
AWS CodeDeploy	AWS::CodeDeploy::Application AWS::CodeDeploy::DeploymentConfig
AWS Database Migration Service	AWS::DMS::Endpoint AWS::DMS::ReplicationInstance
AWS Data Pipeline	AWS::DataPipeline::Pipeline
Amazon DynamoDB	AWS::DynamoDB::Table
Amazon Elastic Compute Cloud (Amazon EC2)	AWS::EC2::CustomerGateway AWS::EC2::DHCPOptions AWS::EC2::Instance AWS::EC2::InternetGateway AWS::EC2::LaunchTemplate AWS::EC2::NatGateway AWS::EC2::NetworkAcl AWS::EC2::NetworkInterface AWS::EC2::RouteTable AWS::EC2::SecurityGroup AWS::EC2::Subnet AWS::EC2::VPC AWS::EC2::VPCPeeringConnection AWS::EC2::VPNConnection AWS::EC2::VPNGateway AWS::EC2::Volume
Amazon ElastiCache	AWS::ElastiCache::CacheCluster
Amazon Elastic File System	AWS::EFS::FileSystem
Elastic Load Balancing	AWS::ElasticLoadBalancing::LoadBalancer AWS::ElasticLoadBalancingV2::LoadBalancer AWS::ElasticLoadBalancingV2::TargetGroup
Amazon EMR	AWS::EMR::Cluster
Amazon Elasticsearch Service	AWS::Elasticsearch::Domain
AWS Glue	AWS::Glue::Database
AWS Identity and Access Management (IAM)	AWS::IAM::Role
Amazon Inspector	AWS::Inspector::AssessmentTemplate
AWS Key Management Service	AWS::KMS::Key
Amazon Kinesis	AWS::Kinesis::Stream
Amazon Kinesis Data Firehose	AWS::KinesisFirehose::DeliveryStream
AWS Lambda	AWS::Lambda::Alias AWS::Lambda::EventSourceMapping AWS::Lambda::Function AWS::Lambda::LayerVersion AWS::Lambda::Version
AWS OpsWorks	AWS::OpsWorks::Instance AWS::OpsWorks::Layer AWS::OpsWorks::Stack
Amazon Relational Database Service (Amazon RDS)	AWS::RDS::DBCluster AWS::RDS::DBClusterParameterGroup AWS::RDS::DBInstance AWS::RDS::DBParameterGroup AWS::RDS::DBSecurityGroup AWS::RDS::DBSubnetGroup
Amazon Redshift	AWS::Redshift::Cluster AWS::Redshift::ClusterParameterGroup AWS::Redshift::ClusterSecurityGroup AWS::Redshift::ClusterSubnetGroup
Amazon Route 53	(Supported only in the US East (N. Virginia) Region, us-east-1.) AWS::Route53::HealthCheck AWS::Route53::HostedZone
Amazon SageMaker	AWS::SageMaker::Endpoint AWS::SageMaker::EndpointConfig AWS::SageMaker::Model AWS::SageMaker::NotebookInstance
AWS Secrets Manager	AWS::SecretsManager::Secret
AWS Service Catalog	AWS::ServiceCatalog::CloudFormationProduct AWS::ServiceCatalog::Portfolio
Amazon Simple Notification Service	AWS::SNS::Topic
Amazon Simple Queue Service	AWS::SQS::Queue
Amazon Simple Storage Service (Amazon S3)	AWS::S3::Bucket
AWS Step Functions	AWS::StepFunctions::Activity AWS::StepFunctions::StateMachine
AWS Systems Manager	AWS::SSM::Document AWS::SSM::Parameter AWS::SSM::PatchBaseline
Amazon WorkSpaces	AWS::WorkSpaces::Workspace

Supported Resources for Tag Editor Tagging

You can use Tag Editor in the AWS Management Console to tag the following AWS resources. For more information, see Working with Tag Editor.

Service	Resources
AWS CloudFormation	Stack
Amazon CloudWatch	Alarm
Amazon CloudWatch Events	Rule
Amazon CloudWatch Logs	Log group
AWS Data Pipeline	Pipeline
Amazon DynamoDB	Table
AWS Elastic Beanstalk	Application
Amazon ElastiCache	Cache cluster Snapshot
Amazon Elastic Compute Cloud (Amazon EC2)	Customer gateway DHCP options EIP Image Instance Internet gateway Network ACL Network interface Reserved Instance Route table Security group Snapshot Spot Instance request Subnet Volume VPC VPN connection VPN gateway
Elastic Load Balancing	Classic load balancer (CLB)
Amazon EMR	Cluster
Glacier	Vault
Kinesis	Stream
AWS Lambda	Function
AWS Resource Access Manager	Resource share
Amazon Relational Database Service (Amazon RDS)	Database instance Database option group Database parameter group Database security group Database snapshot Database subnet group Event subscription Reserved database instance
Amazon Redshift	Cluster Hardware security module (HSM) client certificate Parameter group Subnet group
AWS Resource Groups	Group
Amazon Route 53	(Supported only in the US East (N. Virginia) Region, us-east-1.) Domain Health check Hosted zone
Amazon Simple Storage Service (Amazon S3)	Bucket
AWS Storage Gateway	Gateway