AWS Management Console
Getting Started Guide (Version 1.0)

Supported Resources

You can use the AWS Management Console or the AWS CLI to add tags to many AWS resources. This topic describes resources that you can query and group into resource groups by using AWS Resource Groups, and resources that you can tag by using Tag Editor.

Supported Resources for AWS Resource Groups

Use the AWS Resource Groups service to create groups for the following AWS resources. The supported resources vary slightly depending on whether you are creating a tag-based or an AWS CloudFormation stack-based group.

Important

A resource group based on a query for All supported resource types can add members automatically over time, as new resources are supported by Resource Groups. When you run automations or other bulk tasks on an existing resource group based on All supported resource types, be aware that the actions might be run on many more resources than were in the group when you first created it. This might also mean that automations or tasks that you created for other resources are applied to unintended resources, or resources on which the tasks cannot be completed.


                    Query based on All supported resource
                        types.

Supported Resources for Tag-based Groups

Service Resources

Amazon API Gateway

  • AWS::ApiGateway::Stage

Amazon AppStream

  • AWS::AppStream::Fleet

  • AWS::AppStream::ImageBuilder

  • AWS::AppStream::Stack

AWS Certificate Manager

  • AWS::CertificateManager::Certificate

Amazon CloudFront

  • AWS::CloudFront::Distribution

  • AWS::CloudFront::StreamingDistribution

AWS CloudFormation

  • AWS::CloudFormation::Stack

AWS CloudTrail

  • AWS::CloudTrail::Trail

Amazon CloudWatch

  • AWS::CloudWatch::Alarm

Amazon CloudWatch Events

  • AWS::Events::Rule

Amazon CloudWatch Logs

  • AWS::Logs::LogGroup

AWS CodeBuild

  • AWS::CodeBuild::Project

Amazon Cognito

  • AWS:Cognito::IdentityPool

  • AWS::Cognito::UserPool

AWS Config

  • AWS::Config::ConfigRule

AWS Database Migration Service

  • AWS::DMS::Certificate

  • AWS::DMS::Endpoint

  • AWS::DMS::EventSubscription

  • AWS::DMS::ReplicationInstance

  • AWS::DMS::ReplicationSubnetGroup

  • AWS::DMS::ReplicationTask

AWS Data Pipeline

  • AWS::DataPipeline::Pipeline

Amazon DynamoDB

  • AWS::DynamoDB::Table

AWS Elastic Beanstalk

  • AWS::ElasticBeanstalk::Application

  • AWS::ElasticBeanstalk::ApplicationVersion

  • AWS::ElasticBeanstalk::ConfigurationTemplate

Amazon Elastic Compute Cloud (Amazon EC2)

  • AWS::EC2::CapacityReservation

  • AWS::EC2::CustomerGateway

  • AWS::EC2::DHCPOptions

  • AWS::EC2::EIP

  • AWS::EC2::Host

  • AWS::EC2::Image

  • AWS::EC2::Instance

  • AWS::EC2::InternetGateway

  • AWS::EC2::LaunchTemplate

  • AWS::EC2::NatGateway

  • AWS::EC2::NetworkAcl

  • AWS::EC2::NetworkInterface

  • AWS::EC2::ReservedInstance

  • AWS::EC2::RouteTable

  • AWS::EC2::SecurityGroup

  • AWS::EC2::Snapshot

  • AWS::EC2::SpotInstanceRequest

  • AWS::EC2::Subnet

  • AWS::EC2::TransitGateway

  • AWS::EC2::TransitGatewayRouteTable

  • AWS::EC2::VPC

  • AWS::EC2::VPCPeeringConnection

  • AWS::EC2::VPNConnection

  • AWS::EC2::VPNGateway

  • AWS::EC2::Volume

Amazon Elastic Container Registry

  • AWS::ECR::Repository

Amazon Elastic Container Service

  • AWS::ECS::Cluster

  • AWS::ECS::ContainerInstance

  • AWS::ECS::Service

  • AWS::ECS::Task

  • AWS::ECS::TaskDefinition

AWS Elastic Beanstalk

  • AWS::ElasticBeanstalk::Environment

Amazon ElastiCache

  • AWS::ElastiCache::CacheCluster

  • AWS::ElastiCache::Snapshot

Amazon Elastic File System

  • AWS::EFS::FileSystem

Elastic Load Balancing

  • AWS::ElasticLoadBalancing::LoadBalancer

  • AWS::ElasticLoadBalancingV2::LoadBalancer

  • AWS::ElasticLoadBalancingV2::TargetGroup

Amazon EMR

  • AWS::EMR::Cluster

Amazon Elasticsearch Service

  • AWS::Elasticsearch::Domain

Amazon FSx

  • AWS::FSx::FileSystem

Amazon S3 Glacier

  • AWS::Glacier::Vault

AWS Glue

  • AWS::Glue::Crawler

  • AWS::Glue::Job

  • AWS::Glue::Trigger

Amazon Inspector

  • AWS::Inspector::AssessmentTemplate

AWS IoT

  • AWS::IoT::TopicRule

AWS IoT Analytics

  • AWS::IoTAnalytics::Channel

  • AWS::IoTAnalytics::Datastore

  • AWS::IoTAnalytics::Dataset

  • AWS::IoTAnalytics::Pipeline

AWS Key Management Service

  • AWS::KMS::Key

Amazon Kinesis

  • AWS::Kinesis::Stream

Amazon Kinesis Data Firehose

  • AWS::KinesisFirehose::DeliveryStream

AWS Lambda

  • AWS::Lambda::Function

Amazon Managed Streaming for Kafka

  • AWS::Kafka::Cluster

Amazon MQ

  • AWS::AmazonMQ::Broker

  • AWS::AmazonMQ::Configuration

AWS OpsWorks

  • AWS::OpsWorks::Instance

  • AWS::OpsWorks::Layer

  • AWS::OpsWorks::Stack

AWS Resource Access Manager

  • AWS::RAM::ResourceShare

Amazon Relational Database Service (Amazon RDS)

  • AWS::RDS::DBCluster

  • AWS::RDS::DBClusterParameterGroup

  • AWS::RDS::DBInstance

  • AWS::RDS::DBParameterGroup

  • AWS::RDS::DBSecurityGroup

  • AWS::RDS::DBSnapshot

  • AWS::RDS::DBSubnetGroup

  • AWS::RDS::EventSubscription

  • AWS::RDS::OptionGroup

  • AWS::RDS::ReservedDBInstance

Amazon Redshift

  • AWS::Redshift::Cluster

  • AWS::Redshift::ClusterParameterGroup

  • AWS::Redshift::ClusterSecurityGroup

  • AWS::Redshift::ClusterSubnetGroup

  • AWS::Redshift::HSMClientCertificate

AWS Resource Groups

  • AWS::ResourceGroups::Group

    (Lets you create a nested resource group, or a resource group that contains other resource groups)

AWS RoboMaker

  • AWS::RoboMaker::DeploymentJob

  • AWS::RoboMaker::Fleet

  • AWS::RoboMaker::Robot

  • AWS::RoboMaker::RobotApplication

  • AWS::RoboMaker::SimulationApplication

  • AWS::RoboMaker::SimulationJob

Amazon Route 53

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::Route53::Domain

  • AWS::Route53::HealthCheck

  • AWS::Route53::HostedZone

Amazon Route 53 Resolver

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::Route53Resolver::ResolverEndpoint

  • AWS::Route53Resolver::ResolverRule

Amazon SageMaker

  • AWS::SageMaker::Endpoint

  • AWS::SageMaker::EndpointConfig

  • AWS::SageMaker::HyperParameterTuningJob

  • AWS::SageMaker::Model

  • AWS::SageMaker::NotebookInstance

  • AWS::SageMaker::TrainingJob

  • AWS::SageMaker::TransformJob

  • AWS::SageMaker::Workteam

AWS Secrets Manager
  • AWS::SecretsManager::Secret

AWS Service Catalog

  • AWS::ServiceCatalog::CloudFormationProduct

  • AWS::ServiceCatalog::Portfolio

Amazon Simple Queue Service

  • AWS::SQS::Queue

Amazon Simple Storage Service (Amazon S3)

  • AWS::S3::Bucket

AWS Step Functions

  • AWS::StepFunctions::Activity

  • AWS::StepFunctions::StateMachine

AWS Storage Gateway

  • AWS::StorageGateway::Gateway

  • AWS::StorageGateway::Volume

AWS Systems Manager

  • AWS::SSM::Document

  • AWS::SSM::MaintenanceWindow

  • AWS::SSM::ManagedInstance

  • AWS::SSM::Parameter

  • AWS::SSM::PatchBaseline

Amazon WorkSpaces

  • AWS::WorkSpaces::Workspace

Supported Resources for AWS CloudFormation Stack-based Groups

Service Resources

AWS Certificate Manager

  • AWS::CertificateManager::Certificate

AWS CloudFormation
  • AWS::CloudFormation::Stack

Amazon CloudFront

  • AWS::CloudFront::Distribution

  • AWS::CloudFront::StreamingDistribution

AWS CloudTrail

  • AWS::CloudTrail::Trail

Amazon CloudWatch

  • AWS::CloudWatch::Alarm

  • AWS::CloudWatch::Dashboard

Amazon CloudWatch Logs

  • AWS::Logs::LogGroup

Amazon Cognito

  • AWS::Cognito::IdentityPool

  • AWS::Cognito::UserPool

AWS Database Migration Service

  • AWS::DMS::Endpoint

  • AWS::DMS::ReplicationInstance

AWS Data Pipeline

  • AWS::DataPipeline::Pipeline

Amazon DynamoDB

  • AWS::DynamoDB::Table

Amazon Elastic Compute Cloud (Amazon EC2)

  • AWS::EC2::CustomerGateway

  • AWS::EC2::DHCPOptions

  • AWS::EC2::Instance

  • AWS::EC2::InternetGateway

  • AWS::EC2::LaunchTemplate

  • AWS::EC2::NatGateway

  • AWS::EC2::NetworkAcl

  • AWS::EC2::NetworkInterface

  • AWS::EC2::RouteTable

  • AWS::EC2::SecurityGroup

  • AWS::EC2::Subnet

  • AWS::EC2::VPC

  • AWS::EC2::VPCPeeringConnection

  • AWS::EC2::VPNConnection

  • AWS::EC2::VPNGateway

  • AWS::EC2::Volume

Amazon ElastiCache

  • AWS::ElastiCache::CacheCluster

Amazon Elastic File System

  • AWS::EFS::FileSystem

Elastic Load Balancing

  • AWS::ElasticLoadBalancing::LoadBalancer

  • AWS::ElasticLoadBalancingV2::LoadBalancer

  • AWS::ElasticLoadBalancingV2::TargetGroup

Amazon EMR

  • AWS::EMR::Cluster

Amazon Elasticsearch Service

  • AWS::Elasticsearch::Domain

Amazon Inspector

  • AWS::Inspector::AssessmentTemplate

AWS Key Management Service

  • AWS::KMS::Key

Amazon Kinesis

  • AWS::Kinesis::Stream

AWS Lambda

  • AWS::Lambda::Function

AWS OpsWorks

  • AWS::OpsWorks::Instance

  • AWS::OpsWorks::Layer

  • AWS::OpsWorks::Stack

Amazon Relational Database Service (Amazon RDS)

  • AWS::RDS::DBCluster

  • AWS::RDS::DBClusterParameterGroup

  • AWS::RDS::DBInstance

  • AWS::RDS::DBParameterGroup

  • AWS::RDS::DBSecurityGroup

  • AWS::RDS::DBSubnetGroup

Amazon Redshift

  • AWS::Redshift::Cluster

  • AWS::Redshift::ClusterParameterGroup

  • AWS::Redshift::ClusterSecurityGroup

  • AWS::Redshift::ClusterSubnetGroup

Amazon Route 53

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • AWS::Route53::HealthCheck

  • AWS::Route53::HostedZone

Amazon SageMaker

  • AWS::SageMaker::Endpoint

  • AWS::SageMaker::EndpointConfig

  • AWS::SageMaker::Model

  • AWS::SageMaker::NotebookInstance

AWS Service Catalog

  • AWS::ServiceCatalog::CloudFormationProduct

  • AWS::ServiceCatalog::Portfolio

Amazon Simple Storage Service (Amazon S3)

  • AWS::S3::Bucket

AWS Systems Manager

  • AWS::SSM::Document

  • AWS::SSM::Parameter

  • AWS::SSM::PatchBaseline

Amazon WorkSpaces

  • AWS::WorkSpaces::Workspace

Supported Resources for Tag Editor Tagging

You can use Tag Editor in the AWS Management Console to tag the following AWS resources. For more information, see Working with Tag Editor.

Service Resources

AWS CloudFormation

  • Stack

Amazon CloudFront

  • Distribution

  • StreamingDistribution

Amazon CloudWatch

  • Alarm

Amazon CloudWatch Events

  • Rule

AWS CodeBuild

  • Project

Amazon Cognito

  • IdentityPool

  • UserPool

AWS Config

  • Config rule

AWS Data Pipeline

  • Pipeline

Amazon DynamoDB

  • Table

AWS Elastic Beanstalk

  • Application

Amazon ElastiCache

  • Cache cluster

  • Snapshot

Amazon Elastic Compute Cloud (Amazon EC2)

  • AMI

  • Instance

  • Network interface

  • Reserved Instance

  • Security group

  • Snapshot

  • Spot Instance request

  • Volume

Elastic Load Balancing

  • Classic load balancer (CLB)

Amazon EMR

  • Cluster

Amazon FSx

  • File system

Glacier

  • Vault

AWS Glue

  • Crawler

  • Job

  • Trigger

AWS IoT Analytics

  • Dataset

Kinesis

  • Stream

AWS Key Management Service

  • Key

AWS Lambda

  • Function

Amazon Managed Streaming for Kafka

  • Cluster

Amazon MQ

  • Broker

  • Configuration

AWS Resource Access Manager

  • Resource share

Amazon Relational Database Service (Amazon RDS)

  • Database instance

  • Database option group

  • Database parameter group

  • Database security group

  • Database snapshot

  • Database subnet group

  • Event subscription

  • Reserved database instance

Amazon Redshift

  • Cluster

  • Hardware security module (HSM) client certificate

  • HSM connection

  • Parameter group

  • Snapshot

  • Subnet group

AWS RoboMaker

  • Deployment job

  • Fleet

  • Robot

  • Robot application

  • Simulation application

  • Simulation job

Amazon Route 53

(Supported only in the US East (N. Virginia) Region, us-east-1.)

  • Domain

  • Health check

  • Hosted zone

Amazon SageMaker

  • Notebook instance

Amazon Simple Storage Service (Amazon S3)

  • Bucket

AWS Step Functions

  • Activity

  • State machine

AWS Storage Gateway

  • Gateway

AWS Systems Manager

  • Parameter

Amazon Virtual Private Cloud

  • Customer gateway

  • DHCP option set

  • Internet gateway

  • Network access conrol list (ACL)

  • Route table

  • Subnet

  • Virtual private gateway

  • VPC

  • VPN connection