AWS ARN Parser
Split an AWS ARN into partition, service, region, account, resource type and resource id, with the S3, IAM, Lambda and SQS formats explained.
Free · No sign-up · Your inputs stay in your browser
Input
Parse an AWS ARN
Output
Parts
| Partition | aws |
|---|---|
| Service | lambda |
| Region | eu-west-1 |
| Account | 123456789012 |
| Resource type | function |
| Resource id | image-resize:prod |
| Console | https://eu-west-1.console.aws.amazon.com/lambda/home?region=eu-west-1 |
S3 bucket ARNs carry no region or account, and IAM is global, so those fields are empty by design. The resource part is free-form per service: some use a slash (role/name), some a colon (function:name:alias), and some both.
Runs in this browser. Nothing you paste is sent to a server.
About this tool
Method, assumptions, practical next steps, and limits.
Empty fields are normal
S3 bucket ARNs have no region or account (arn:aws:s3:::bucket/key) because bucket names are global, and IAM ARNs have no region because IAM is global. The resource part is free-form per service: role/path/name for IAM, function:name:alias for Lambda. The ARN reference has the general format.
ARNs in policies
Wildcards in the resource part (arn:aws:s3:::bucket/uploads/*) narrow a policy to a prefix, and the account field stops a policy from matching a same-named resource in another account. Keep both specific.