Datatypes

Amazon Resource Name (ARN)

ID aws_arn

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Identifier of an AWS resource, used in IAM policies, tags and API calls: arn, the partition (aws, aws-cn, aws-us-gov and others), the service namespace, the Region, the 12-digit account ID and the resource, separated by colons. Some resources omit the Region, the account ID or both, and the resource part may contain a type, a path and, in policies, wildcards. AWS does not consider ARNs secret.

Categories
Universal unique identifiers
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
85/100 · missing: mapping (Wikidata, Schema.org, ...), translation
Metacrafter rules
no detection rule yet
Supported by tools
pyWhat

Regular expression

^arn:aws(?:-[a-z]+)*:[a-z0-9-]+:[a-z0-9-]*:(?:[0-9]{12}|aws)?:\S+$

Python re syntax.

Examples

ValueDescription
arn:aws:iam::aws:contextProvider/IdentityCenterARN of the IAM Identity Center context provider from the AWS documentation
arn:aws:s3:::amzn-s3-demo-bucket/Development/*ARN of S3 objects under a prefix from the AWS documentation
arn:aws:iam invalidFewer than six fields

Sources

Use this record