Amazon Resource Names (ARNs) in GovCloud (US) Regions - AWS GovCloud (US)
ARN FormatExample ARNsAmazon AthenaAmazon AppStream 2.0AWS ArtifactAmazon AuroraAmazon EC2 Auto ScalingAWS BatchAWS BackupAWS Certificate ManagerAWS Certificate Manager Private Certificate AuthorityAmazon Cloud DirectoryAmazon CloudWatch EventsAWS CodeBuildAWS CodeCommitAWS CodeDeployAWS CodePipelineAmazon CognitoAmazon ComprehendAmazon Comprehend MedicalAWS ConfigAWS DataSyncAWS Database Migration ServiceAWS Directory ServiceAmazon DocumentDB (with MongoDB compatibility)Amazon DynamoDBAWS Elastic BeanstalkAmazon Elastic Compute Cloud Amazon Elastic Compute Cloud Image Builder Amazon Elastic Container Registry Amazon Elastic Container Service Amazon Elastic File System Amazon Elastic Kubernetes ServiceAmazon Elasticsearch ServiceAWS GlueAmazon GuardDutyAWS HealthAWS Identity and Access Management Amazon InspectorAWS IoT CoreAWS IoT Device DefenderAWS IoT Device ManagementAWS IoT GreengrassAmazon Kinesis Data FirehoseAmazon Kinesis Data AnalyticsAmazon Kinesis Data StreamsAWS Lambda AWS Elemental MediaConvertAmazon Managed Streaming for Apache Kafka (MSK)Amazon NeptuneAWS OrganizationsAWS OutpostsAmazon PinpointAmazon Polly AWS Resource Access Manager Amazon RDS Amazon Rekognition AWS Resource GroupsAmazon Route 53 Amazon SageMaker AWS Security Hub AWS Secrets ManagerAWS Serverless Application Repository AWS Service Catalog Amazon Simple Email ServiceAmazon Simple Notification Service Amazon Simple Queue Service Amazon Simple Storage Service Amazon Simple Workflow Service AWS Step Functions AWS Storage Gateway AWS Systems ManagerAWS WAFAmazon WorkSpacesAWS X-Ray

Amazon Resource Names (ARNs) in GovCloud (US) Regions

Amazon Resource Names (ARNs) uniquely identify AWS resources. We require an ARN when you need to specify a resource unambiguously across all of AWS, such as in IAM policies, Amazon S3 bucket names, and API calls. In AWS GovCloud (US) Regions, ARNs have an identifier that is different from the one in other standard AWS Regions. For all other standard regions, ARNs begin with:

arn:aws

In the AWS GovCloud (US) Regions, ARNs begin with:

arn:aws-us-gov

If an ARN requires a region, for the AWS GovCloud (US-West) Region, the region should be identified as us-gov-west-1. For AWS GovCloud (US-East) Region, the region should be identified as us-gov-east-1.

Topics

ARN Format

Here are some example ARNs:

<!-- IAM user name --> arn:aws-us-gov:iam::123456789012:David <!-- Amazon EC2 instances --> arn:aws-us-gov:ec2:us-gov-west-1:001234567890:instance/* <!-- Amazon S3 bucket (and all objects in it)--> arn:aws-us-gov:s3:::my_corporate_bucket/*

The following are the general formats for ARNs. The specific components and values used depend on the AWS service.

arn:aws-us-gov:service:region:account:resource arn:aws-us-gov:service:region:account:resourcetype/resource arn:aws-us-gov:service:region:account:resourcetype:resource
partition

The service namespace that identifies the AWS partition (for example, for AWS GovCloud (US) it is aws-us-gov. For a list of namespaces, see AWS Service Namespaces in the Amazon Web Services General Reference.

service

The service namespace that identifies the AWS product (for example, Amazon S3 or IAM). For a list of namespaces, see AWS Service Namespaces in the Amazon Web Services General Reference.

region

The region in which the resource reside. The ARNs for some resources do not require a region, so this component might be omitted. For the AWS GovCloud (US-West) Region, the region is us-gov-west-1. For the AWS GovCloud (US-East) Region, the region is us-gov-east-1.

account

The ID of the AWS account that owns the resource, without the hyphens (for example, 123456789012). The ARNs for some resources don't require an account number, so this component might be omitted.

resource, resourcetype:resource, or resourcetype/resource

The content of this part of the ARN varies by service. It often includes an indicator of the type of resource—for example, IAM user—followed by a slash (/) or a colon (:), followed by the resource name itself. Some services allow paths for resource names, as described in Paths in ARNs.

Example ARNs

The following sections provide syntax and examples of the ARNs for AWS GovCloud (US-West) and AWS GovCloud (US-East) for different services. For more information about using ARNs in a specific AWS service, see the documentation for that service.

Amazon API Gateway

Syntax:

arn:aws-us-gov:apigateway:region::resource-path arn:aws-us-gov:execute-api:region:account-id:api-id/stage-name/HTTP-VERB/resource-path

Examples:

arn:aws-us-gov:apigateway:us-gov-west-1::/restapis/a123456789012bc3de45678901f23a45/* arn:aws-us-gov:apigateway:us-gov-west-1::a123456789012bc3de45678901f23a45:/test/mydemoresource/* arn:aws-us-gov:apigateway:*:a123456789012bc3de45678901f23a45:/*/petstorewalkthrough/pets arn:aws-us-gov:execute-api:us-gov-west-1:123456789012:qsxrty/test/GET/mydemoresource/*
arn:aws-us-gov:apigateway:us-gov-east-1::/restapis/a123456789012bc3de45678901f23a45/* arn:aws-us-gov:apigateway:us-gov-east-1::a123456789012bc3de45678901f23a45:/test/mydemoresource/* arn:aws-us-gov:apigateway:*:a123456789012bc3de45678901f23a45:/*/petstorewalkthrough/pets arn:aws-us-gov:execute-api:us-gov-east-1:123456789012:qsxrty/test/GET/mydemoresource/*

Amazon Athena

Syntax:

arn:aws-us-gov:athena:region:account-id:resourcetype/resource

Example

arn:aws-us-gov:athena:us-gov-west-1:123456789012:workgroup/test
arn:aws-us-gov:athena:us-gov-east-1:123456789012:workgroup/test

Amazon AppStream 2.0

Syntax:

arn:aws-us-gov:appstream:region:account:resource-type/resource-name

Examples:

arn:aws-us-gov:appstream:us-gov-west-1:123456789012:image-builder/my-image-builder
arn:aws-us-gov:appstream:us-gov-west-1:123456789012:image/my-image
arn:aws-us-gov:appstream:us-gov-west-1:123456789012:fleet/my-fleet
arn:aws-us-gov:appstream:us-gov-west-1:123456789012:stack/my-stack

AWS Artifact

Syntax:

arn:aws-us-gov:artifact:::agreement:/agreement_arn arn:aws-us-gov:artifact::account-id:customer-agreement:/* arn:aws-us-gov:artifact:::report-package:/:report_package_arn:/SOC:/* arn:aws-us-gov:iam::*:role/service-role/AWSArtifactAccountSync arn:aws-us-gov:iam::aws:policy/service-role/AWSArtifactAccountSync

Examples:

arn:aws-us-gov:artifact:::agreement/* arn:aws-us-gov:artifact:::agreement/AWS Business Associate Addendum arn:aws-us-gov:artifact::123456789012:customer-agreement/* arn:aws-us-gov:artifact:::report-package/Certifications and Attestations/SOC/* arn:aws-us-gov:artifact:::report-package/Alignment Documents/Laws and Regulations/Form W-9 arn:aws-us-gov:iam::*:role/service-role/AWSArtifactAccountSync arn:aws-us-gov:iam::aws:policy/service-role/AWSArtifactAccountSync

Amazon Aurora

Syntax:

arn:aws-us-gov:rds:region:account number:resourcetype:name

Examples:

arn:aws-us-gov:rds:us-gov-west-1:123456789012:cluster:my-aurora-cluster-1

Amazon EC2 Auto Scaling

Syntax:

arn:aws-us-gov:autoscaling:region:account:scalingPolicy:policyid:autoScalingGroupName/groupfriendlyname:policyname/policyfriendlyname arn:aws-us-gov:autoscaling:region:account:autoScalingGroup:groupid:autoScalingGroupName/groupfriendlyname

Examples:

arn:aws-us-gov:autoscaling:us-gov-west-1:123456789012:scalingPolicy:c7a27f55-d35e-4153-b044-8ca9155fc467:autoScalingGroupName/my-test-asg1:policyName/my-scaleout-policy
arn:aws-us-gov:autoscaling:us-gov-east-1:123456789012:scalingPolicy:c7a27f55-d35e-4153-b044-8ca9155fc467:autoScalingGroupName/my-test-asg1:policyName/my-scaleout-policy

AWS Batch

Syntax:

arn:aws-us-gov:batch:region:accound-id:job-queue/JobQueueName
arn:aws-us-gov:batch:region:accound-id:jobdefinitionname/JobDefinitionName:revision

Examples:

arn:aws-us-gov:batch:us-gov-west-1:123456789012:job-queue/MyFirstJobQueue
arn:aws-us-gov:batch:us-gov-east-1:123456789012:job-definition/MyFirstJobDefinition:1

AWS Backup

Syntax:

arn:aws-us-gov:backup:region:*

Examples:

arn:aws-us-gov:backup:region:account-id:backup-plan:*
arn:aws-us-gov:backup:region:account-id:backup-vault:*
arn::aws-us-gov:backup:region:account-id:recovery-point:*
arn:aws-us-gov:ec2:region::snapshot/*
arn:aws-us-gov:rds:region:account-id:snapshot:awsbackup:*
arn:aws-us-gov:rds:region:account-id:cluster-snapshot:awsbackup:*
arn:aws-us-gov:ec2:region::snapshot/*
arn:aws-us-gov:dynamodb:region:account-id::table/*/backup/*

AWS Certificate Manager

Syntax:

arn:aws-us-gov:acm:region:account-id:certificate/certificate-id

Examples:

arn:aws-us-gov:acm:us-gov-west-1:123456789012:certificate/12345678-1234-1234-1234-123456789012
arn:aws-us-gov:acm:us-gov-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012

AWS Certificate Manager Private Certificate Authority

Syntax:

arn:aws-us-gov:acm-pca:region:account-id:certificate-authority/certificate-authority-id arn:aws-us-gov:acm-pca:region:account-id:certificate-authority/certificate-authority-id/certificate/certificate-id
arn:aws-us-gov:acm-pca:region:account-id:template:certificate-type/certificate-type-version

Example:

arn:aws-us-gov:acm-pca:us-gov-west-1:123456789012:certificate-authority/12345678-1234-1234-1234-123456789012 arn:aws-us-gov:acm-pca:us-gov-west-1:123456789012:certificate-authority/12345678-1234-1234-1234-123456789012/certificate/01230123012301230123012301230123

Example:

arn:aws-us-gov:acm-pca:::template/SubordinateCACertificate_PathLen0/V1

Amazon Cloud Directory

Syntax:

arn:aws-us-gov:clouddirectory:region:account-id:schema/development/SchemaName arn:aws-us-gov:clouddirectory:region:account-id:schema/published/SchemaName/SchemaVersion arn:aws-us-gov:clouddirectory:region:account-id:schema/published/SchemaName/SchemaVersion/SchemaMinorVersion arn:aws-us-gov:clouddirectory:region:account-id:directory/directoryId/SchemaName/SchemaVersion arn:aws-us-gov:clouddirectory:region:account-id:directory/directoryId/SchemaName/SchemaVersion/SchemaMinorVersion arn:aws-us-gov:clouddirectory:region:Directory Owner account-id:directory/directoryId

Examples:

arn:aws-us-gov:clouddirectory:us-gov-west-1:123456789012:schema/development/deviceregistryschema arn:aws-us-gov:clouddirectory:us-gov-west-1:123456789012:schema/published/deviceregistryschema/1.0 arn:aws-us-gov:clouddirectory:us-gov-west-1:123456789012:schema/published/deviceregistryschema/1.0/XYZ arn:aws-us-gov:clouddirectory:us-gov-west-1:123456789012:directory/ARIqk1HD-UjdtmcIrJHEvPI/schema/deviceregistryschema/1.0 arn:aws-us-gov:clouddirectory:us-gov-west-1:123456789012:directory/ARIqk1HD-UjdtmcIrJHEvPI/schema/deviceregistryschema/1.0/XYZ arn:aws-us-gov:clouddirectory:us-gov-west-1:123456789012:directory/directory/ARIqk1HD-UjdtmcIrJHEvPI/schema/deviceregistryschema/1.0/XYZ arn:aws-us-gov:clouddirectory:us-gov-west-1:123456789012:directory/ARIqk1HD-UjdtmcIrJHEvPI

Amazon CloudWatch Events

Syntax:

arn:aws-us-gov:events:region:*:*

Examples:

arn:aws-us-gov:events:us-gov-west-1:*:* arn:aws-us-gov:events:us-gov-west-1:123456789012:* arn:aws-us-gov:events:us-gov-west-1:123456789012:rule/my-rule
arn:aws-us-gov:events:us-gov-east-1:*:* arn:aws-us-gov:events:us-gov-east-1:123456789012:* arn:aws-us-gov:events:us-gov-east-1:123456789012:rule/my-rule

AWS CodeBuild

Syntax:

arn:aws-us-gov:codebuild:* arn:aws-us-gov:codebuild:region:account id:CodeBuild Resource/Resource id

Example:

arn:aws-us-gov:codebuild:us-gov-west-1:012345678901:project/codebuild-project-name arn:aws-us-gov:codebuild:us-gov-west-1:012345678901:build/codebuild-project-name:build-uuid arn:aws-us-gov:codebuild:us-gov-east-1:012345678901:project/codebuild-project-name arn:aws-us-gov:codebuild:us-gov-east-1:012345678901:build/codebuild-project-name:build-uuid

AWS CodeCommit

Syntax:

arn:aws-us-gov:codecommit:* arn:aws-us-gov:codecommit:region:account:repository name

Example:

arn:aws-us-gov:codecommit:us-gov-west-1:475031329963:SabiniResourceAdminWebsite
arn:aws-us-gov:codecommit:us-gov-east-1:475031329963:SabiniResourceAdminWebsite

AWS CodeDeploy

Syntax:

arn:aws-us-gov:codedeploy:region:account-id:resource-type:resource-specifier arn:aws-us-gov:codedeploy:region:account-id:resource-type/resource-specifier

Examples:

arn:aws-us-gov:codedeploy:* arn:aws-us-gov:codedeploy:us-gov-west-1123456789012:* arn:aws-us-gov:codedeploy:us-gov-west-1123456789012:application/applicationname arn:aws-us-gov:codedeploy:us-gov-west-1123456789012:deploymentconfig/deployment-configuration-name arn:aws-us-gov:codedeploy:us-gov-west-1123456789012:deploymentgroup/deployment-group-name arn:aws-us-gov:codedeploy:us-gov-west-1123456789012:instance/instanceid

AWS CodePipeline

Syntax:

arn:aws-us-gov:codepipeline:region:account-id:resource-type:resource-specifier arn:aws-us-gov:codepipeline:region:account-id:resource-type/resource-specifier

Examples:

arn:aws-us-gov:codepipeline:* arn:aws-us-gov:codepipeline:us-gov-west-1123456789012:* arn:aws-us-gov:codepipeline:us-gov-west-1123456789012:pipeline-name arn:aws-us-gov:codepipeline:us-gov-west-1123456789012:pipeline-name/stage-name arn:aws-us-gov:codepipeline:us-gov-west-1123456789012:pipeline-name/stage-name/action-name

Amazon Cognito

Syntax:

arn:aws-us-gov:cognito-idp:region:account-id:userpool/user_pool_id arn:aws-us-gov:cognito-identity:region:account-id:identitypool/identitiy_pool_id

Example:

arn:aws-us-gov:cognito-idp:us-gov-west-1:111122223333:userpool/us-gov-west-1_ABCabc123 arn:aws-us-gov:cognito-identity:us-gov-west-1:111122223333:identitypool/us-gov-west-1:1a1a1a1a-ffff-1111-9999-12345678

Amazon Comprehend

Syntax:

arn:aws-us-gov:comprehend:region:account-id:comprehend tool/file or resource id

Example:

arn:aws-us-gov::comprehend:us-gov-west-1:012345678901:document-classifier/test-File arn:aws-us-gov::comprehend:us-gov-west-1:012345678901:entity-recognizer/test-File2

Amazon Comprehend Medical

Syntax:

arn:aws-us-gov:comprehendmedical:region:account-id:comprehend medical tool/file or resource id

Example:

arn:aws-us-gov::comprehend medical:us-gov-west-1:012345678901:document-classifier/test-File arn:aws-us-gov::comprehend medical:us-gov-west-1:012345678901:entity-recognizer/test-File2

AWS Config

Syntax:

arn:aws-us-gov:config:region:account-id:config-rule/config-rule-name

Examples:

arn:aws-us-gov:config:us-gov-west-1:123456789012:config-rule/MyConfigRule
arn:aws-us-gov:config:us-gov-east-1:123456789012:config-rule/MyConfigRule

AWS DataSync

Syntax:

arn:aws-us-gov:datasync:region:account-id:agent\:agent-id

Examples:

arn:aws-us-gov:datasync:us-gov-west-1:209870788375:agent/agent-09bf4d0be979c1154
arn:aws-us-gov:datasync:us-gov-east-1:209870788375:agent/agent-09bf4d0be979c1154

AWS Database Migration Service

Syntax:

arn:aws-us-gov:dms:region:account number:resourcetype:resourcename

Examples:

arn:aws-us-gov:dms:us-gov-west-1:123456789012:rep:QLXQZ64MH7CXF4QCQMGRVYVXAI
arn:aws-us-gov:dms:us-gov-east-1:123456789012:rep:QLXQZ64MH7CXF4QCQMGRVYVXAI

AWS Directory Service

Syntax:

arn:aws-us-gov:ds:region:account-id:directory/directoryId

Examples:

arn:aws-us-gov:ds:us-gov-west-2:123456789012:directory/ARIqk1HD-UjdtmcIrJHEvPI
arn:aws-us-gov:ds:us-gov-east-1:123456789012:directory/ARIqk1HD-UjdtmcIrJHEvPI

Amazon DocumentDB (with MongoDB compatibility)

Syntax:

arn:aws:rds:region:account-id:db:resource_id
arn:aws:rds:region:account-id:cluster:resource_id
arn:aws:rds:region:account-id:cluster-pg:resource_id
arn:aws:rds:region:account-id:secgrp:resource_id
arn:aws:rds:region:account-id:cluster-snapshot:resource_id
arn:aws:rds:region:account-id:subgrp:resource_id

Examples:

arn:aws:rds:us-east-1:123456789012:db:sample-db-instance arn:aws:rds:us-east-1:123456789012:cluster:sample-db-cluster arn:aws:rds:us-east-1:123456789012:cluster-pg:sample-db-cluster-parameter-group arn:aws:rds:us-east-1:123456789012:secgrp:sample-public-secgrp arn:aws:rds:us-east-1:123456789012:cluster-snapshot:sample-db-cluster-snapshot arn:aws:rds:us-east-1:123456789012:subgrp:sample-subnet-10

Amazon DynamoDB

Syntax:

arn:aws-us-gov:dynamodb:region:account:table/tablename

Examples:

arn:aws-us-gov:dynamodb:us-gov-west-1:123456789012:table/books_table
arn:aws-us-gov:dynamodb:us-gov-east-1:123456789012:table/books_table

AWS Elastic Beanstalk

Syntax:

arn:aws-us-gov:elasticbeanstalk:region:account-id:application/applicationname arn:aws-us-gov:elasticbeanstalk:region:account-id:applicationversion/applicationname/versionlabel arn:aws-us-gov:elasticbeanstalk:region:account-id:configurationtemplate/applicationname/templatename arn:aws-us-gov:elasticbeanstalk:region:account-id:environment/applicationname/environmentname arn:aws-us-gov:elasticbeanstalk:region:account-id:platform/PLATFORM_NAME/PLATFORM_VERSION arn:aws-us-gov:elasticbeanstalk:region::solutionstack/solutionstackname

Examples:

arn:aws-us-gov:elasticbeanstalk:us-west-2:123456789012:application/My App arn:aws-us-gov:elasticbeanstalk:us-west-2:123456789012:applicationversion/My App/My Version arn:aws-us-gov:elasticbeanstalk:us-west-2:123456789012:configurationtemplate/My App/My Template arn:aws-us-gov:elasticbeanstalk:us-west-2:123456789012:environment/My App/MyEnvironment arn:aws-us-gov:elasticbeanstalk:us-west-2:123456789012:platform/MyPlatform/1.0 arn:aws-us-gov:elasticbeanstalk:us-west-2::solutionstack/32bit Amazon Linux running Tomcat 7

Examples:

arn:aws-us-gov:elasticbeanstalk:us-east-2:123456789012:application/My App arn:aws-us-gov:elasticbeanstalk:us-east-2:123456789012:applicationversion/My App/My Version arn:aws-us-gov:elasticbeanstalk:us-east-2:123456789012:configurationtemplate/My App/My Template arn:aws-us-gov:elasticbeanstalk:us-east-2:123456789012:environment/My App/MyEnvironment arn:aws-us-gov:elasticbeanstalk:us-east-2:123456789012:platform/MyPlatform/1.0 arn:aws-us-gov:elasticbeanstalk:us-east-2::solutionstack/32bit Amazon Linux running Tomcat 7

Amazon Elastic Compute Cloud

Syntax:

arn:aws-us-gov:ec2:region:account:instance/instance-id arn:aws-us-gov:ec2:region:account:placement-group/placement-group-name arn:aws-us-gov:ec2:region::snapshot/snapshot-id arn:aws-us-gov:ec2:region:account:volume/volume-id

Examples:

arn:aws-us-gov:ec2:us-gov-west-1:123456789012:instance/* arn:aws-us-gov:ec2:us-gov-west-1:123456789012:volume/* arn:aws-us-gov:ec2:us-gov-west-1:123456789012:volume/vol-1a2b3c4d
arn:aws-us-gov:ec2:us-gov-east-1:123456789012:instance/* arn:aws-us-gov:ec2:us-gov-east-1:123456789012:volume/* arn:aws-us-gov:ec2:us-gov-east-1:123456789012:volume/vol-1a2b3c4d

Amazon Elastic Compute Cloud Image Builder

Syntax:

arn:aws-us-gov:imagebuilder:region:account:resource:resource-id

Examples:

arn:aws-us-gov:imagebuilder:us-gov-west-1:123456789012:component:my-component/1.2.3/1

Amazon Elastic Container Registry

Syntax:

arn:aws-us-gov:ecr:region:accountid:repository/repository-name

Examples:

arn:aws-us-gov:ecr:us-gov-west-1:123456789012:repository/my-repository
arn:aws-us-gov:ecr:us-gov-east-1:123456789012:repository/my-repository

Amazon Elastic Container Service

Syntax:

arn:aws-us-gov:ecs:region:accountid:cluster/clustername arn:aws-us-gov:ecs:region:accountid:container-instance/container-instance-id arn:aws-us-gov:ecs:region:accountid:task-definition/task-definition-family-name:task-definition-revision-number arn:aws-us-gov:ecs:region:accountid:service/service-name arn:aws-us-gov:ecs:region:accountid:task/task-id arn:aws-us-gov:ecs:region:accountid:container/container-id

Examples:

arn:aws-us-gov:ecs:us-gov-west-1:123456789012:cluster/my-cluster arn:aws-us-gov:ecs:us-gov-west-1:123456789012:container-instance/403125b0-555c-4473-86b5-65982db28a6d arn:aws-us-gov:ecs:us-gov-west-1:123456789012:task-definition/hello_world:8 arn:aws-us-gov:ecs:us-gov-west-1:123456789012:service/sample-webapp arn:aws-us-gov:ecs:us-gov-west-1:123456789012:task/1abf0f6d-a411-4033-b8eb-a4eed3ad252a arn:aws-us-gov:ecs:us-gov-west-1:123456789012:container/476e7c41-17f2-4c17-9d14-412566202c8a
arn:aws-us-gov:ecs:us-gov-east-1:123456789012:cluster/my-cluster arn:aws-us-gov:ecs:us-gov-east-1:123456789012:container-instance/403125b0-555c-4473-86b5-65982db28a6d arn:aws-us-gov:ecs:us-gov-east-1:123456789012:task-definition/hello_world:8 arn:aws-us-gov:ecs:us-gov-east-1:123456789012:service/sample-webapp arn:aws-us-gov:ecs:us-gov-east-1:123456789012:task/1abf0f6d-a411-4033-b8eb-a4eed3ad252a arn:aws-us-gov:ecs:us-gov-east-1:123456789012:container/476e7c41-17f2-4c17-9d14-412566202c8a

Amazon Elastic File System

Syntax:

arn:aws-us-gov:efs:region:account-id:file-system/file-system-id

Examples:

arn:aws-us-gov:elasticfilesystem:us-gov-west-1:012345678901:file-system/fs-f00df00d

Amazon Elastic Kubernetes Service

Syntax:

arn:aws-us-gov:eks:region:account:cluster/clustername arn:aws-us-gov:eks:region:account:fargateprofile/clustername/profilename/fargateprofile-id arn:aws-us-gov:eks:region:account:nodegroup/clustername/nodegroupname/nodegroup-id

Examples:

arn:aws-us-gov:eks:us-gov-west-1:123456789012:cluster/my-cluster arn:aws-us-gov:eks:us-gov-west-1:123456789012:fargateprofile/my-cluster/my-profile/08b7f7e0-b935-93a6-17e1-d68ee67baa70 arn:aws-us-gov:eks:us-gov-west-1:123456789012:nodegroup/my-cluster/my-nodegroup/e0b84a29-dacb-052c-33e9-1b6b4595d1aa
arn:aws-us-gov:eks:us-gov-east-1:123456789012:cluster/my-cluster arn:aws-us-gov:eks:us-gov-east-1:123456789012:fargateprofile/my-cluster/my-profile/08b7f7e0-b935-93a6-17e1-d68ee67baa70 arn:aws-us-gov:eks:us-gov-east-1:123456789012:nodegroup/my-cluster/my-nodegroup/e0b84a29-dacb-052c-33e9-1b6b4595d1aa

Amazon Elasticsearch Service

Syntax:

arn:aws-us-gov:es:region:account:domain/domain-name
arn:aws-us-gov:es:region:account:domain/domain-name/*

Examples:

arn:aws-us-gov:es:us-gov-west-1:123456789012:domain/my-domain arn:aws-us-gov:es:us-gov-west-1:123456789012:domain/my-domain/*
arn:aws-us-gov:es:us-gov-east-1:123456789012:domain/my-domain arn:aws-us-gov:es:us-gov-east-1:123456789012:domain/my-domain/*

AWS Glue

Syntax:

arn:aws-us-gov:glue:region:account-id:typeresource_path

Examples:

arn:aws-us-gov:glue:us-gov-west-1:123456789012:catalog arn:aws-us-gov:glue:us-gov-west-1:123456789012:database/db1 arn:aws-us-gov:glue:us-gov-west-1:123456789012:table/db1/tbl1 arn:aws-us-gov:glue:us-gov-west-1:123456789012:userDefinedFunction/db1/func1 arn:aws-us-gov:glue:us-gov-west-1:123456789012:connection/connection1 arn:aws-us-gov:glue:us-gov-west-1:123456789012:devEndpoint/tempdevendpoint
arn:aws-us-gov:glue:us-gov-west-1:123456789012:catalog arn:aws-us-gov:glue:us-gov-east-1:123456789012:database/db1 arn:aws-us-gov:glue:us-gov-east-1:123456789012:table/db1/tbl1 arn:aws-us-gov:glue:us-gov-east-1:123456789012:userDefinedFunction/db1/func1 arn:aws-us-gov:glue:us-gov-east-1:123456789012:connection/connection1 arn:aws-us-gov:glue:us-gov-east-1:123456789012:devEndpoint/tempdevendpoint

Amazon GuardDuty

Syntax:

arn:aws-us-gov:guardduty:region:account-id:detector/detector-id arn:aws-us-gov:guardduty:region:account-id:ipset/ipset-id arn:aws-us-gov:guardduty:region:account-id:threatintelset/threatintelset-id

Examples:

arn:aws-us-gov:guardduty:us-gov-west-1:detector/12abc34d567e8fa901bc2d34e56789f0 arn:aws-us-gov:guardduty:us-gov-west-1:123456789012:ipset/0cb0141ab9fbde177613ab9436212e90 arn:aws-us-gov:guardduty:us-gov-west-1:123456789012:threatintelset/12a34567890bc1de2345f67ab8901234

AWS Health

Syntax:

arn:aws-us-gov:health:region::event/SERVICE/EVENT_TYPE/EVENT_ID

Examples:

arn:aws-us-gov:health:us-gov-west-1::event/EC2/AWS_EC2_SYSTEM_REBOOT_MAINTENANCE_SCHEDULED/AWS_EC2_SYSTEM_REBOOT_MAINTENANCE_SCHEDULED_470_1563906895

AWS Identity and Access Management

Syntax:

arn:aws-us-gov:iam:region:account-id:root arn:aws-us-gov:iam:region:account-id:user/username arn:aws-us-gov:iam:region:account-id:group/groupname arn:aws-us-gov:iam:region:account-id:role/rolename arn:aws-us-gov:iam:region:account-id:instance-profile/instanceprofilename arn:aws-us-gov:sts:region:account-id:federated-user/username arn:aws-us-gov:iam:region:account-id:mfa/virtualdevicename arn:aws-us-gov:iam:region:account-id:server-certificate/certificatename

Examples:

arn:aws-us-gov:iam:us-gov-west-1:123456789012:root arn:aws-us-gov:iam:us-gov-west-1:123456789012:user/Bob arn:aws-us-gov:iam:us-gov-west-1:123456789012:user/division_abc/subdivision_xyz/Bob arn:aws-us-gov:iam:us-gov-west-1:123456789012:group/Developers arn:aws-us-gov:iam:us-gov-west-1:123456789012:group/division_abc/subdivision_xyz/product_A/Developers arn:aws-us-gov:iam:us-gov-west-1:123456789012:role/S3Access arn:aws-us-gov:iam:us-gov-west-1:123456789012:role/application_abc/component_xyz/S3Access arn:aws-us-gov:iam:us-gov-west-1:123456789012:instance-profile/Webserver arn:aws-us-gov:sts:us-gov-west-1:123456789012:federated-user/Bob arn:aws-us-gov:iam:us-gov-west-1:123456789012:mfa/BobJonesMFA arn:aws-us-gov:iam:us-gov-west-1:123456789012:server-certificate/ProdServerCert arn:aws-us-gov:iam:us-gov-west-1:123456789012:server-certificate/division_abc/subdivision_xyz/ProdServerCert
arn:aws-us-gov:iam:us-gov-east-1:123456789012:root arn:aws-us-gov:iam:us-gov-east-1:123456789012:user/Bob arn:aws-us-gov:iam:us-gov-east-1:123456789012:user/division_abc/subdivision_xyz/Bob arn:aws-us-gov:iam:us-gov-east-1:123456789012:group/Developers arn:aws-us-gov:iam:us-gov-east-1:123456789012:group/division_abc/subdivision_xyz/product_A/Developers arn:aws-us-gov:iam:us-gov-east-1:123456789012:role/S3Access arn:aws-us-gov:iam:us-gov-east-1:123456789012:role/application_abc/component_xyz/S3Access arn:aws-us-gov:iam:us-gov-east-1:123456789012:instance-profile/Webserver arn:aws-us-gov:sts:us-gov-east-1:123456789012:federated-user/Bob arn:aws-us-gov:iam:us-gov-east-1:123456789012:mfa/BobJonesMFA arn:aws-us-gov:iam:us-gov-east-1:123456789012:server-certificate/ProdServerCert arn:aws-us-gov:iam:us-gov-east-1:123456789012:server-certificate/division_abc/subdivision_xyz/ProdServerCert

Amazon Inspector

Syntax:

arn:aws-us-gov:inspector:region:account-id:target/target-id arn:aws-us-gov:inspector:region:account-id:target/target-id/template/template-id arn:aws-us-gov:inspector:region:account-id:target/target-id/template/template-id/run/run-id arn:aws-us-gov:inspector:region:account-id:target/target-id/template/template-id/run/run-id/finding/finding-id

Examples:

arn:aws-us-gov:inspector:us-gov-west-1:123456789012:target/0-SbqF87sd arn:aws-us-gov:inspector:us-gov-west-1:123456789012:target/0-SbqF87sd/template/0-ltAhR4vg arn:aws-us-gov:inspector:us-gov-west-1:123456789012:target/0-SbqF87sd/template/0-ltAhR4vg/run/0-IABgH9tK arn:aws-us-gov:inspector:us-gov-west-1:123456789012:target/0-SbqF87sd/template/0-ltAhR4vg/run/0-IABgH9tK/finding/0-ZNPdf4AB
arn:aws-us-gov:inspector:us-gov-east-1:123456789012:target/0-SbqF87sd arn:aws-us-gov:inspector:us-gov-east-1:123456789012:target/0-SbqF87sd/template/0-ltAhR4vg arn:aws-us-gov:inspector:us-gov-east-1:123456789012:target/0-SbqF87sd/template/0-ltAhR4vg/run/0-IABgH9tK arn:aws-us-gov:inspector:us-gov-east-1:123456789012:target/0-SbqF87sd/template/0-ltAhR4vg/run/0-IABgH9tK/finding/0-ZNPdf4AB

AWS IoT Core

Syntax:

arn:aws-us-gov:iot:region:account-id:authorizer/authorizer-function-name arn:aws-us-gov:iot:region:account-id:authorizer/authorizer-name arn:aws-us-gov:iot:region:account-id:cert/cert-id arn:aws-us-gov:iot:region:account-id:index/index-id arn:aws-us-gov:iot:region:account-id:index/index-name arn:aws-us-gov:iot:region:account-id:job/job-id arn:aws-us-gov:iot:region:account-id:policy/policy-name arn:aws-us-gov:iot:region:account-id:role/role-name arn:aws-us-gov:iot:region:account-id:rolealias/role-alias-name arn:aws-us-gov:iot:region:account-id:rule/rule-name arn:aws-us-gov:iot:region:account-id:thing/thing-name arn:aws-us-gov:iot:region:account-id:thinggroup/thing-group-name arn:aws-us-gov:iot:region:account-id:thingtype/thing-type-name

Examples:

arn:aws-us-gov:iot:us-gov-west-1:123456789012:authorizer/my_authorizer_function_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:authorizer/my_authorizer-name arn:aws-us-gov:iot:us-gov-west-1:123456789012:cert/my_cert_id arn:aws-us-gov:iot:us-gov-west-1:123456789012:index/my_index_id arn:aws-us-gov:iot:us-gov-west-1:123456789012:index/my_index_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:job/my_job_id arn:aws-us-gov:iot:us-gov-west-1:123456789012:policy/my_policy_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:role/my_role_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:rolealias/my_role_alias_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:rule/my_rule_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:thing/my_thing_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:thinggroup/my_thing_group_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:thingtype/my_thing_type_name

AWS IoT Device Defender

Syntax:

arn:aws-us-gov:iot:region:account-id:authorizer/authorizer-function-name arn:aws-us-gov:iot:region:account-id:authorizer/authorizer-name arn:aws-us-gov:iot:region:account-id:cert/cert-id arn:aws-us-gov:iot:region:account-id:index/index-id arn:aws-us-gov:iot:region:account-id:index/index-name arn:aws-us-gov:iot:region:account-id:job/job-id arn:aws-us-gov:iot:region:account-id:policy/policy-name arn:aws-us-gov:iot:region:account-id:role/role-name arn:aws-us-gov:iot:region:account-id:rolealias/role-alias-name arn:aws-us-gov:iot:region:account-id:rule/rule-name arn:aws-us-gov:iot:region:account-id:thing/thing-name arn:aws-us-gov:iot:region:account-id:thinggroup/thing-group-name arn:aws-us-gov:iot:region:account-id:thingtype/thing-type-name

Examples:

arn:aws-us-gov:iot:us-gov-west-1:123456789012:authorizer/my_authorizer_function_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:authorizer/my_authorizer-name arn:aws-us-gov:iot:us-gov-west-1:123456789012:cert/my_cert_id arn:aws-us-gov:iot:us-gov-west-1:123456789012:index/my_index_id arn:aws-us-gov:iot:us-gov-west-1:123456789012:index/my_index_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:job/my_job_id arn:aws-us-gov:iot:us-gov-west-1:123456789012:policy/my_policy_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:role/my_role_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:rolealias/my_role_alias_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:rule/my_rule_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:thing/my_thing_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:thinggroup/my_thing_group_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:thingtype/my_thing_type_name

AWS IoT Device Management

Syntax:

arn:aws-us-gov:iot:region:account-id:authorizer/authorizer-function-name arn:aws-us-gov:iot:region:account-id:authorizer/authorizer-name arn:aws-us-gov:iot:region:account-id:cert/cert-id arn:aws-us-gov:iot:region:account-id:index/index-id arn:aws-us-gov:iot:region:account-id:index/index-name arn:aws-us-gov:iot:region:account-id:job/job-id arn:aws-us-gov:iot:region:account-id:policy/policy-name arn:aws-us-gov:iot:region:account-id:role/role-name arn:aws-us-gov:iot:region:account-id:rolealias/role-alias-name arn:aws-us-gov:iot:region:account-id:rule/rule-name arn:aws-us-gov:iot:region:account-id:thing/thing-name arn:aws-us-gov:iot:region:account-id:thinggroup/thing-group-name arn:aws-us-gov:iot:region:account-id:thingtype/thing-type-name

Examples:

arn:aws-us-gov:iot:us-gov-west-1:123456789012:authorizer/my_authorizer_function_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:authorizer/my_authorizer-name arn:aws-us-gov:iot:us-gov-west-1:123456789012:cert/my_cert_id arn:aws-us-gov:iot:us-gov-west-1:123456789012:index/my_index_id arn:aws-us-gov:iot:us-gov-west-1:123456789012:index/my_index_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:job/my_job_id arn:aws-us-gov:iot:us-gov-west-1:123456789012:policy/my_policy_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:role/my_role_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:rolealias/my_role_alias_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:rule/my_rule_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:thing/my_thing_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:thinggroup/my_thing_group_name arn:aws-us-gov:iot:us-gov-west-1:123456789012:thingtype/my_thing_type_name

* Please note the ARN syntax is the same for AWS IoT

AWS IoT Greengrass

Syntax:

arn:aws-us-gov:greengrass:region:account-id:/greengrass/groups/group-id arn:aws-us-gov:greengrass:region:account-id:/greengrass/groups/group-id/certificateauthorities/certificate-fingerprint arn:aws-us-gov:greengrass:region:account-id:/greengrass/groups/group-id/deployments/deployment-id arn:aws-us-gov:greengrass:region:account-id:/greengrass/groups/group-id/versions/group-version-id arn:aws-us-gov:greengrass:region:account-id:/greengrass/definition/definition-type/definition-id arn:aws-us-gov:greengrass:region:account-id:/greengrass/definition/definition-type/definition-id/versions/version-id arn:aws-us-gov:greengrass:region:account-id:/greengrass/bulk/deployments/bulk-deployment-id arn:aws-us-gov:greengrass:region::/connectors/connector-name/versions/version-number

Examples:

arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/groups/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/groups/guid/certificateauthorities/certificate-fingerprint arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/groups/guid/deployments/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/groups/guid/versions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/connectors/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/connectors/guid/versions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/cores/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/coresguid/versions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/devices/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/devices/guid/versions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/functions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/functions/guid/versions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/loggers/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/loggers/guid/versions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/resources/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/resources/guid/versions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/subscriptions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/definition/subscriptions/guid/versions/guid arn:aws-us-gov:greengrass:us-gov-west-1:123456789012:/greengrass/bulk/deployments/guid arn:aws-us-gov:greengrass:us-gov-west-1::/connectors/KinesisFirehose/versions/2

Amazon Kinesis Data Firehose

Syntax:

arn:aws-us-gov:firehose:region:account-id:deliverystream/delivery-stream-name

Examples:

arn:aws-us-gov:firehose:us-gov-west-1:123456789012:deliverystream/my_stream arn:aws-us-gov:firehose:us-gov-east-1:123456789012:deliverystream/my_stream

Amazon Kinesis Data Analytics

Syntax:

arn:aws-us-gov:kinesisanalytics:region:account:application/app-name

Examples:

arn:aws-us-gov:kinesisanalytics:us-gov-west-1:123456789012:application/my_app

Amazon Kinesis Data Streams

Syntax:

arn:aws-us-gov:kinesis:region:account:stream/stream-name

Examples:

arn:aws-us-gov:kinesis:us-gov-west-1:123456789012:stream/my_stream
arn:aws-us-gov:kinesis:us-gov-east-1:123456789012:stream/my_stream

AWS Lambda

Syntax:

arn:aws-us-gov:lambda:account-id:function:function-name arn:aws-us-gov:lambda:account-id:function:function-name:alias-name arn:aws-us-gov:lambda:account-id:function:function-name:version arn:aws-us-gov:lambda:account-id:event-source-mappings:event-source-mapping-id

Examples:

arn:aws-us-gov:lambda:us-gov-west-1:123456789012:function:ProcessKinesisRecords arn:aws-us-gov:lambda:us-gov-west-1:123456789012:function:ProcessKinesisRecords:your alias arn:aws-us-gov:lambda:us-gov-west-1:123456789012:function:ProcessKinesisRecords:1.0 arn:aws-us-gov:lambda:us-gov-west-1:123456789012:event-source-mappings:kinesis-stream-arn
arn:aws-us-gov:lambda:us-gov-east-1:123456789012:function:ProcessKinesisRecords arn:aws-us-gov:lambda:us-gov-east-1:123456789012:function:ProcessKinesisRecords:your alias arn:aws-us-gov:lambda:us-gov-east-1:123456789012:function:ProcessKinesisRecords:1.0 arn:aws-us-gov:lambda:us-gov-east-1:123456789012:event-source-mappings:kinesis-stream-arn

AWS Elemental MediaConvert

Syntax:

arn:aws-us-gov:mediaconvert:region:account-id:jobs/jobID arn:aws-us-gov:mediaconvert:region:account-id:jobTemplates/jobTemplateName arn:aws-us-gov:mediaconvert:region:account-id:presets/presetName arn:aws-us-gov:mediaconvert:region:account-id:queues/queueName

Examples:

arn:aws-us-gov:mediaconvert:us-gov-west-1:123456789012:jobs/0123456789012-abc123 arn:aws-us-gov:arn:aws-us-gov:mediaconvert:us-gov-west-1:123456789012:jobTemplates/2345678 arn:aws-us-gov:arn:aws-us-gov:mediaconvert:us-gov-west-1:123456789012:presets/System-169_WIFI_1080p arn:aws-us-gov:arn:aws-us-gov:mediaconvert:us-gov-west-1:123456789012:queues/default

Amazon Managed Streaming for Apache Kafka (MSK)

Syntax:

arn:aws-us-gov:service:region:account-id:/cluster/cluster-name/ID
arn:aws-us-gov:service:region:account-id:configuration/config-name/ID

Examples:

arn:aws-us-gov:kafka:us-gov-east-1:123456789012:cluster/TestCluster-03/abcd1234-ab12-7e7e-9999-1234abcd5678-1 arn:aws-us-gov:kafka:us-gov-east-1:123456789012:configuration/TestConfig-07/abcd1234-abcd-1234-5e6e-abcd12345678-2

Amazon Neptune

Syntax:

arn:aws-us-gov:neptune:region:account-id:secret:secret-name

Examples:

arn:aws-us-gov:neptune:us-gov-west-1:123456789012

AWS Organizations

Syntax:

arn:aws-us-gov:organizations:master-account-id:organization/o-organization-id arn:aws-us-gov:organizations:master-account-id:root/o-organization-id/r-root-id arn:aws-us-gov:organizations:master-account-id:account/o-organization-id/account-id arn:aws-us-gov:organizations:master-account-id:ou/o-organization-id/ou-organizational-unit-id arn:aws-us-gov:organizations:master-account-id:policy/o-organization-id/policy-type/p-policy-id arn:aws-us-gov:organizations:master-account-id:handshake/o-organization-id/handshake-type/h-handshake-id

Examples:

arn:aws-us-gov:organizations::123456789012:organization/o-a1b2c3d4e5example arn:aws-us-gov:organizations::123456789012:root/o-a1b2c3d4e5/r-f6g7h8i9j0example arn:aws-us-gov:organizations::123456789012:account/o-a1b2c3d4e5/123456789012 arn:aws-us-gov:organizations::123456789012:ou/o-a1b2c3d4e5/ou-1a2b3c-k9l8m7n6o5example arn:aws-us-gov:organizations::123456789012:policy/o-a1b2c3d4e5/service_control_policy/p-p4q3r2s1t0example arn:aws-us-gov:organizations::123456789012:handshake/o-a1b2c3d4e5/invite/h-u2v4w5x8y0example

AWS Outposts

Syntax:

arn:aws-us-gov:outposts:region:account-id:outpost/outpost-id

Examples:

arn:aws-us-gov:outposts:us-gov-east-1:111122223333:outpost/op-0ffc85215e1112223

Amazon Pinpoint

Syntax:

arn:aws-us-gov:mobiletargeting:region:account-id:apps/projectId
arn:aws-us-gov:mobiletargeting:region:account-id:apps/projectId/campaigns
arn:aws-us-gov:mobiletargeting:region:account-id:apps/projectId/journeys/journeyId
arn:aws-us-gov:mobiletargeting:region:account-id:templates/templateName/EMAIL

Examples:

arn:aws-us-gov:mobiletargeting:us-gov-west-1:123456789012:apps/da48fa90744f403baee78c5a9a2a7aa2
arn:aws-us-gov:mobiletargeting:us-gov-west-1:123456789012:apps/da48fa90744f403baee78c5a9a2a7aa2/campaigns
arn:aws-us-gov:mobiletargeting:us-gov-west-1:123456789012:apps/da48fa90744f403baee78c5a9a2a7aa2/journeys/da54fa81732f201bbaa66b4b8b1b6cc4
arn:aws-us-gov:mobiletargeting:us-gov-west-1:123456789012:templates/MyTemplate/EMAIL

Amazon Polly

Syntax:

arn:aws-us-gov:polly:region:account-id:lexicon/LexiconName

Examples:

arn:aws-us-gov:polly:us-gov-west-1:123456789012:lexicon/MyNewLexicon

AWS Resource Access Manager

Syntax:

arn:aws-us-gov:ram:region:account-id:resource

Examples:

arn:aws-us-gov:ram:us-gov-west-1:123456789012:resource-share/fds5ung6-44e98-d0bh-6cf4-c00e09177huf
arn:aws-us-gov:ram:us-gov-east-1:123456789012:resource-share/fds5ung6-44e98-d0bh-6cf4-c00e09177huf

Amazon RDS

Syntax:

arn:aws-us-gov:rds:region:account-number:resourcetype:name

Examples:

arn:aws-us-gov:rds:us-gov-west-1:123456789012:db:my-mysql-instance-1
arn:aws-us-gov:rds:us-gov-east-1:123456789012:db:my-mysql-instance-1

Amazon Rekognition

Syntax:

arn:aws-us-gov:rekognition:region:account-id:collection/collection-id arn:aws-us-gov:rekognition:region:account-id:*

Examples:

arn:aws-us-gov:rekognition:us-gov-west-1:123456789012:mycollection/mycollection-id arn:aws-us-gov:rekognition:us-gov-west-1:123456789012:mycollection
arn:aws-us-gov:rekognition:us-gov-east-1:123456789012:mycollection/mycollection-id arn:aws-us-gov:rekognition:us-gov-west-1:123456789012:mycollection

AWS Resource Groups

Syntax:

arn:aws-us-gov:resource-groups:region:account-id:group/group-name

Examples:

arn:aws-us-gov:resource-groups:us-gov-west-1:123456789012:group/my-resource-group

Amazon Route 53

Syntax:

arn:aws:route53:::hostedzone/hostedzoneid arn:aws:route53:::changechangeid

Examples:

arn:aws:route53:::hostedzone/Z148QEXAMPLE8V arn:aws:route53:::change/C2RDJ5EXAMPLE2 arn:aws:route53:::change/*

Amazon SageMaker

Syntax:

arn:aws-us-gov:sagemaker:region:account-id:notebook-instance/notebookInstanceName arn:aws-us-gov:sagemaker:region:account-id:notebook-instance-lifecycle-config/notebookInstanceLifecycleConfigName arn:aws-us-gov:sagemaker:region:account-id:training-job/trainingJobName arn:aws-us-gov:sagemaker:region:account-id:model/modelName arn:aws-us-gov:sagemaker:region:account-id:endpointName arn:aws-us-gov:sagemaker:region:account-id:endpoint-config/endpointConfigName arn:aws-us-gov:sagemaker:region:account-id:hyper-parameter-tuning-job/hyperParameterTuningJobName arn:aws-us-gov:sagemaker:region:account-id:transform-job/transformJobName

Examples:

arn:aws-us-gov:sagemaker:us-gov-west-1:123456789012:notebook-instance/my-notebookInstance-1 arn:aws-us-gov:sagemaker:us-gov-west-1:123456789012:notebook-instance-lifecycle-config/my-notebookInstanceLifecycleConfig-1 arn:aws-us-gov:sagemaker:us-gov-west-1:123456789012:training-job/my-trainingJob-1 arn:aws-us-gov:sagemaker:us-gov-west-1:123456789012:model/my-mlModel-1 arn:aws-us-gov:sagemaker:us-gov-west-1:123456789012:endpoint/my-endpoint-1 arn:aws-us-gov:sagemaker:us-gov-west-1:123456789012:endpoint-config/my-endpointConfig-1 arn:aws-us-gov:sagemaker:us-gov-west-1:123456789012:hyper-parameter-tuning-job/my-hp-tuningJob-1 arn:aws-us-gov:sagemaker:us-gov-west-1:123456789012:transform-job/my-transformJob-1

AWS Security Hub

Syntax:

arn:aws-us-gov:securityhub:region:account-id:insight/CompanyId/ProductId/UniqueId arn:aws-us-gov:securityhub:::ruleset/StandardsName/v/StandardsVersion arn:Partition:securityhub:region:account-id:subscription/StandardsName/v/StandardsVersion arn:Partition:securityhub:region:account-id:product-subscription/Company/ProductId arn:Partition:securityhub:region:account-id:product/Company/ProductId arn:Partition:securityhub:region:account-id:hub/default arn:Partition:securityhub:region:account-id:action/custom/Id

Examples:

arn:aws-us-gov:securityhub:us-gov-west-1:123456789012:insight/123456789012/custom/a9460f2b-5a8d-499c-b6ac-c4882bff128b arn:aws-us-gov:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0 arn:aws-us-gov:securityhub:us-gov-west-1:123456789012:subscription/cis-aws-foundations-benchmark/v/1.2.0/1.11 arn:aws-us-gov:securityhub:us-gov-west-1:123456789012:product-subscription/aws/securityhub arn:aws-us-gov:securityhub:us-gov-west-1:123456789012:product/aws/securityhub arn:aws-us-gov:securityhub:us-gov-west-1:123456789012:hub/default arn:aws-us-gov:securityhub:us-gov-west-1:123456789012:action/custom/testaction

Examples:

arn:aws-us-gov:securityhub:us-gov-east-1:123456789012:insight/123456789012/custom/a9460f2b-5a8d-499c-b6ac-c4882bff128b arn:aws-us-gov:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0 arn:aws-us-gov:securityhub:us-gov-east-1:123456789012:subscription/cis-aws-foundations-benchmark/v/1.2.0/1.11 arn:aws-us-gov:securityhub:us-gov-east-1:123456789012:product-subscription/aws/securityhub arn:aws-us-gov:securityhub:us-gov-east-1:123456789012:product/aws/securityhub arn:aws-us-gov:securityhub:us-gov-east-1:123456789012:hub/default arn:aws-us-gov:securityhub:us-gov-east-1:123456789012:action/custom/testaction

AWS Secrets Manager

Syntax:

arn:aws-us-gov:secretsmanager:region:account-id:secret:secret-name

Examples:

arn:aws-us-gov:secretsmanager:us-gov-west-1:123456789012:secret:production/MyAwesomeAppSecret-a1b2c3

AWS Serverless Application Repository

Syntax:

arn:aws-us-gov:serverlessrepo:region:account-id:applications/application-name arn:aws-us-gov:serverlessrepo:region:account-id:applications/application-name/versions/symantec-version

Example:

arn:aws-us-gov:serverlessrepo:us-west-gov-1:123456789012:applications/myApp arn:aws-us-gov:serverlessrepo:us-west-gov-1:123456789012:applications/myApp/versions/1.0.0

AWS Service Catalog

Syntax:

arn:aws-us-gov:servicecatalog:region:account:stack/Provisioned Product Name/Provisioned Product ID

Example:

arn:aws-us-gov:servicecatalog:us-gov-west-1:523901394366:stack/test-qa/pp-jwe982jgls34f

Amazon Simple Email Service

Syntax:

arn:aws-us-gov:email:region:account:identity/identity

Example:

arn:aws-us-gov:email:us-gov-west-1:123456789012:identity/example.com arn:aws-us-gov:email:us-gov-west-1:123456789012:identity/sender@example.com

Amazon Simple Notification Service

Syntax:

arn:aws-us-gov:sns:region:account:topicname arn:aws-us-gov:sns:region:account:topicname:subscriptionid

Examples:

arn:aws-us-gov:sns:us-gov-west-1:123456789012:my_corporate_topic arn:aws-us-gov:sns:us-gov-west-1:123456789012:my_corporate_topic:02034b43-fefa-4e07-a5eb-3be56f8c54ce
arn:aws-us-gov:sns:us-gov-west-1:123456789012:my_corporate_topic arn:aws-us-gov:sns:us-gov-east-1:123456789012:my_corporate_topic:02034b43-fefa-4e07-a5eb-3be56f8c54ce

Amazon Simple Queue Service

Syntax:

arn:aws-us-gov:sqs:region:account:queuename

Examples:

arn:aws-us-gov:sqs:us-gov-west-1:123456789012:queue1
arn:aws-us-gov:sqs:us-gov-east-1:123456789012:queue1

Amazon Simple Storage Service

Syntax:

arn:aws-us-gov:s3:::bucketname arn:aws-us-gov:s3:::bucketname/objectpath

Amazon S3 does not require an account number or region in ARNs.

Examples:

arn:aws-us-gov:s3:::my_corporate_bucket arn:aws-us-gov:s3:::my_corporate_bucket/* arn:aws-us-gov:s3:::my_corporate_bucket/Development/*

Amazon Simple Workflow Service

Syntax:

arn:aws-us-gov:swf:region:account:domain/domainname

Examples:

arn:aws-us-gov:swf:us-gov-west-1:123456789012:domain/department1 arn:aws-us-gov:swf:us-gov-west-1:123456789012:/domain/*
arn:aws-us-gov:swf:us-gov-west-1:123456789012:domain/department1 arn:aws-us-gov:swf:us-gov-east-1:123456789012:/domain/*

AWS Step Functions

Syntax:

arn:aws-us-gov:states:aws-us-gov:account-id:activity:activityName arn:aws-us-gov:states:aws-us-gov:account-id:stateMachine:stateMachineName arn:aws-us-gov:states:aws-us-gov:account-id:execution:stateMachineName:executionName

Examples:

arn:aws-us-gov:states:us-gov-west-1:123456789012:activity:HelloActivity arn:aws-us-gov:states:us-gov-west-1:123456789012:activity:stateMachine:HelloStateMachine arn:aws-us-gov:states:us-gov-west-1:123456789012:execution:HelloStateMachine:HelloStateMachineExecution arn:aws-us-gov:iam:aws:policy/AdministratorAccess
arn:aws-us-gov:states:us-gov-east-1:123456789012:activity:HelloActivity arn:aws-us-gov:states:us-gov-east-1:123456789012:activity:stateMachine:HelloStateMachine arn:aws-us-gov:states:us-gov-east-1:123456789012:execution:HelloStateMachine:HelloStateMachineExecution arn:aws-us-gov:iam:aws:policy/AdministratorAccess

AWS Storage Gateway

Syntax:

arn:aws:storagegateway:aws-us-gov:account-id:gateway/gateway-id arn:aws:storagegateway:aws-us-gov:account-id:share/share-id arn:aws:storagegateway:aws-us-gov:account-id:gateway/gateway-id/volume/volume-id arn:aws:storagegateway:aws-us-gov:account-id:tape/tapebarcode arn:aws:storagegateway:aws-us-gov:account-id:gateway/gateway-id/target/iSCSItarget arn:aws:storagegateway:aws-us-gov:account-id:gateway/gateway-id/device/vtldevice

Examples:

arn:aws:storagegateway:us-gov-west-1:123456789012:gateway/sgw-0021C461 arn:aws:storagegateway:us-gov-west-1:123456789012:share/share-7E52E414 arn:aws:storagegateway:us-gov-west-1:123456789012:gateway/gateway-id/volume/vol-004b446472f121a0a arn:aws:storagegateway:us-gov-west-1:1234567890122:tape/AZAAF31B12 arn:aws:storagegateway:us-gov-west-1:123456789012:gateway/sgw-C0ED0111/target/iqn.1998-03.com.abc:sgw-c0ed01a8-tapedrive-02 arn:aws:storagegateway:us-gov-west-1:123456789012:gateway/sgw-C0ED0222/device/mytarget

AWS Systems Manager

Syntax:

arn:aws-us-gov:ssm:us-gov-west-1:* arn:aws-us-gov:ssm:region:account-id:* arn:aws-us-gov:ssm:region:account-id:automation-execution/automation-execution-id arn:aws-us-gov:ssm:region:account-id:automation-definition/automation-definition-id:version-id arn:aws-us-gov:ssm:region:account-id:document/document-name arn:aws-us-gov:ssm:region:account-id:maintenancewindow/window-execution-id arn:aws-us-gov:ssm:region:account-id:windowtarget/window-target-id arn:aws-us-gov:ssm:region:account-id:windowtask/window-task-id arn:aws-us-gov:ssm:region:account-id:managed-instance/managed-instance-id arn:aws-us-gov:ssm:region:account-id:managed-instance-inventory/managed-instance-id arn:aws-us-gov:ssm:region:account-id:parameter/parameter-name/ arn:aws-us-gov:ssm:region:account-id:patchbaseline/patch-baseline-id

AWS WAF

Syntax:

arn:aws-us-gov:waf-regional:account-id:resource-type/resource-id

Examples:

arn:aws-us-gov:waf-regional:us-east-1:123456789012:rule/41b5b052-1e4a-426b-8149-3595be6342c2 arn:aws-us-gov:waf-regional:us-east-1:123456789012:webacl/3bffd3ed-fa2e-445e-869f-a6a7cf153fd3 arn:aws-us-gov:waf-regional:us-east-1:123456789012:ipset/3f74bd8c-f046-4970-a1a7-41aa52e05480 arn:aws-us-gov:waf-regional:us-east-1:123456789012:bytematchset/d131bc0b-57be-4536-af1d-4894fd28acc4

Amazon WorkSpaces

Syntax:

arn:aws:workspaces:region:account_id:workspace/workspace_identifier arn:aws:workspaces:region:account_id:workspace/workspacebundle/bundle_identifier

Examples:

arn:aws:workspaces:us-gov-west-1:123456789012:workspace/ws-0123456789 arn:aws:workspaces:us-gov-west-1:123456789012:workspacebundle/wsb-0123456789

AWS X-Ray

Syntax:

arn:aws-us-gov:xray:region:account_id:sampling-rule/rule-name arn:aws-us-gov:xray:region:account_id:group/group-name/id

Examples:

arn:aws-us-gov:xray:us-gov-west-1:123456789012:sampling-rule/base-scorekeep arn:aws-us-gov:xray:us-gov-west-1:123456789012:group/TestGroup/123456789ABCDEFGHIJ123456789ABCDEFGHI123456789876543