AWS resource catalog

One lifecycle across 51 resource kinds.

Every driver uses the same generic provision, import, delete, observe, lookup, and reconcile contract. Browse human-readable schemas and examples by service or infrastructure domain.

51 resources19 AWS services51 read-only lookups
View
ACMRegional

ACMCertificate

Provision and reconcile public or private TLS certificates.

SchemaExamplesLookup
CloudWatchGlobal

Dashboard

Manage CloudWatch dashboard bodies as declared infrastructure.

SchemaExamplesLookup
CloudWatchRegional

LogGroup

Manage log groups, retention, encryption, and tags.

SchemaExamplesLookup
CloudWatchRegional

MetricAlarm

Declare metric alarms and their evaluation behavior.

SchemaExamplesLookup
DynamoDBRegional

DynamoDBTable

Manage DynamoDB tables, keys, billing, indexes, and protection.

SchemaExamplesLookup
EC2Regional

EBSVolume

Provision and reconcile EBS block volumes.

SchemaExamplesLookup
EC2Regional

AMI

Create and track Amazon Machine Images.

SchemaExamplesLookup
EC2Regional

EC2Instance

Manage EC2 instances and their declared runtime configuration.

SchemaExamplesLookup
EC2Regional

ElasticIP

Allocate and associate Elastic IP addresses.

SchemaExamplesLookup
EC2Regional

KeyPair

Manage EC2 key pairs for instance access.

SchemaExamplesLookup
EC2Composite

SecurityGroup

Manage VPC security groups and ingress or egress rules.

SchemaExamplesLookup
ECRRegional

ECRLifecyclePolicy

Attach declarative image retention policies to ECR repositories.

SchemaExamplesLookup
ECRRegional

ECRRepository

Manage container registries, encryption, scanning, and tags.

SchemaExamplesLookup
ECSRegional

ECSCluster

Create and reconcile ECS clusters and settings.

SchemaExamplesLookup
EKSRegional

EKSCluster

Manage the lifecycle and configuration of EKS clusters.

SchemaExamplesLookup
Elastic Load BalancingRegional

ALB

Manage Application Load Balancers and network placement.

SchemaExamplesLookup
Elastic Load BalancingComposite

Listener

Declare load balancer listeners and default actions.

SchemaExamplesLookup
Elastic Load BalancingComposite

ListenerRule

Manage listener routing rules, conditions, and priority.

SchemaExamplesLookup
Elastic Load BalancingRegional

NLB

Manage Network Load Balancers and network placement.

SchemaExamplesLookup
Elastic Load BalancingRegional

TargetGroup

Declare target groups, protocols, ports, and health checks.

SchemaExamplesLookup
IAMGlobal

IAMGroup

Manage IAM groups and policy attachments.

SchemaExamplesLookup
IAMGlobal

IAMInstanceProfile

Manage instance profiles and their associated role.

SchemaExamplesLookup
IAMGlobal

IAMPolicy

Manage customer-managed IAM policies and policy documents.

SchemaExamplesLookup
IAMGlobal

IAMRole

Manage IAM roles, trust policies, permissions, and tags.

SchemaExamplesLookup
IAMGlobal

IAMUser

Manage IAM users, tags, groups, and policy attachments.

SchemaExamplesLookup
VPCRegional

InternetGateway

Create internet gateways and attach them to VPCs.

SchemaExamplesLookup
KMSRegional

KMSKey

Manage KMS keys, policies, rotation, and lifecycle controls.

SchemaExamplesLookup
LambdaComposite

EventSourceMapping

Connect Lambda functions to streams and queues.

SchemaExamplesLookup
LambdaRegional

LambdaFunction

Manage Lambda code, runtime configuration, roles, and networking.

SchemaExamplesLookup
LambdaRegional

LambdaLayer

Publish and track reusable Lambda layers.

SchemaExamplesLookup
LambdaComposite

LambdaPermission

Manage resource-based invocation permissions for functions.

SchemaExamplesLookup
VPCRegional

NetworkACL

Manage VPC network ACLs, associations, and entries.

SchemaExamplesLookup
VPCRegional

NATGateway

Provision NAT gateways in declared subnets.

SchemaExamplesLookup
RDSRegional

AuroraCluster

Manage Aurora database clusters and core configuration.

SchemaExamplesLookup
RDSRegional

DBParameterGroup

Manage database parameter groups and declared parameters.

SchemaExamplesLookup
RDSRegional

DBSubnetGroup

Manage database subnet groups across availability zones.

SchemaExamplesLookup
RDSRegional

RDSInstance

Manage relational database instances and lifecycle settings.

SchemaExamplesLookup
Route 53Global

Route53HealthCheck

Manage Route 53 endpoint and calculated health checks.

SchemaExamplesLookup
Route 53Global

Route53HostedZone

Manage public and private DNS hosted zones.

SchemaExamplesLookup
Route 53Composite

Route53Record

Manage DNS record sets inside a hosted zone.

SchemaExamplesLookup
VPCRegional

RouteTable

Manage routes and subnet associations for a VPC.

SchemaExamplesLookup
S3Global

S3Bucket

Manage S3 buckets, encryption, versioning, ACLs, and tags.

SchemaExamplesLookup
Secrets ManagerRegional

SecretsManagerSecret

Manage secret metadata, encryption, recovery, and tags.

SchemaExamplesLookup
SNSComposite

SNSSubscription

Connect SNS topics to HTTP, queue, email, or Lambda endpoints.

SchemaExamplesLookup
SNSRegional

SNSTopic

Manage notification topics, encryption, policies, and tags.

SchemaExamplesLookup
SQSRegional

SQSQueue

Manage queues, delivery behavior, encryption, and dead letters.

SchemaExamplesLookup
SQSComposite

SQSQueuePolicy

Attach declarative access policies to SQS queues.

SchemaExamplesLookup
Systems ManagerRegional

SSMParameter

Manage Parameter Store values, types, tiers, and tags.

SchemaExamplesLookup
VPCComposite

Subnet

Manage VPC subnets, availability zones, IP behavior, and tags.

SchemaExamplesLookup
VPCRegional

VPC

Manage VPC address space, DNS settings, tenancy, and tags.

SchemaExamplesLookup
VPCComposite

VPCPeeringConnection

Manage peering connections between VPCs.

SchemaExamplesLookup