---
id: "aws_arn"
kind: "datatype"
status: "draft"
is_pii: false
categories: ["identifiers"]
langs: ["common"]
quality: 85
url: "https://registry.apicrafter.io/datatype/aws_arn"
---

# Amazon Resource Name (ARN) (`aws_arn`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

Identifier of an AWS resource, used in IAM policies, tags and API calls: arn, the partition (aws, aws-cn, aws-us-gov and others), the service namespace, the Region, the 12-digit account ID and the resource, separated by colons. Some resources omit the Region, the account ID or both, and the resource part may contain a type, a path and, in policies, wildcards. AWS does not consider ARNs secret.

- Personal data (PII): no
- Categories: Universal unique identifiers (identifiers)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Detection

Regular expression (Python `re`):

```
^arn:aws(?:-[a-z]+)*:[a-z0-9-]+:[a-z0-9-]*:(?:[0-9]{12}|aws)?:\S+$
```

## Examples

- `arn:aws:iam::aws:contextProvider/IdentityCenter` — ARN of the IAM Identity Center context provider from the AWS documentation
- `arn:aws:s3:::amzn-s3-demo-bucket/Development/*` — ARN of S3 objects under a prefix from the AWS documentation
- `arn:aws:iam` (invalid example) — Fewer than six fields

## Supported by tools

- `pywhat`

## Sources

- doc: <https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html>
- doc: <https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html>

## Quality

Score 85/100. Missing: mapping (Wikidata, Schema.org, ...), translation.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/aws_arn.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/identifiers/aws_arn.yaml>