Skip to content
Docs
Theory, Analysis
AWS ARN

AWS ARN

Organize AWS ARN (Amazon Resource Name).

1. AWS ARN 

arn:[Partition]:[Service]:[Region]:[Account-ID]:[Resource-ID]
arn:[Partition]:[Service]:[Region]:[Account-ID]:[Resource-Type]/[Resource-ID]
arn:[Partition]:[Service]:[Region]:[Account-ID]:[Resource-Type]:[Resource-ID]
[Text 1] AWS ARN Format

AWS ARN represents the name of resources managed by AWS. [Text 1] shows the formats of AWS ARN. There are a total of 3 formats: one format with only Resource-ID and two formats with Resource-Type and Resource-ID. Depending on the need, some ARNs may omit Region and Account-ID. Each component of the AWS ARN format is as follows.

  • Partition : Represents a group of AWS Regions. There are 3 Partitions: aws, aws-cn (China), aws-us-gov (US Government), and in most cases they belong to the aws Partition.
  • Service : Represents a Namespace for classifying AWS Services. Generally, AWS service names are converted to lowercase, such as iam, sns, ec2.
  • Region : Represents an AWS Region. Region codes such as us-east-2 are included.
  • Account-ID : Represents a unique Account ID assigned to each AWS Account.
  • Resource-Type : Represents the Type of AWS Resource. AWS resources are converted to lowercase, such as user, vpc.
  • Resource-ID : Represents a unique ID assigned to an AWS Resource.
1
2
3

IAM User : arn:aws:iam::123456789012:user/ssup2
SNS Topic : arn:aws:sns:us-east-1:123456789012:example-sns-topic-name
VPC : arn:aws:ec2:us-east-1:123456789012:vpc/vpc-0e9801d129EXAMPLE
[Text 2] AWS ARN Examples

[Text 2] shows examples of AWS ARN.

1.1. Wildcard 

1
2

ALL EC2 Volumes : arn:aws:ec2:*:*:volume/*
ALL EC2 Instances : arn:aws:ec2:*:*:instance/*
[Text 3] AWS ARN Wildcard Examples

AWS ARN supports Wildcard syntax, and multiple ARNs can be expressed through Wildcard syntax. [Text 3] shows examples of Wildcard usage. It is mainly used when configuring AWS IAM Policies. Wildcards cannot be applied to only part of a specific component, such as arn:aws:ec2:*:*:instance/s*.

2. References

ARPAWS DynamoDB