Title here
Summary here
September 3, 2020 in References12 minutes
AWS Service Prefix is a prefix or namespace used by AWS service. Service Prefix groups IAM related action for specific service. For example, Amazon S3 has service prefix S3
. Under this prefix, there is action like s3:GetObject
.
We can use service prefix on IAM policy or another AWS Organization policy like Service Control Policy (SCP) or Tag Policy.
In the table below you can find a complete list of AWS service prefix. On the right column there is also link to AWS documentation that contain action and condition for each service.
Service Name | Service Prefix | Documentation |
---|---|---|
AWS Account Management | account | AWS Account Management |
AWS Activate | activate | AWS Activate |
Alexa for Business | a4b | Alexa for Business |
AmazonMediaImport | mediaimport | AmazonMediaImport |
AWS Amplify | amplify | AWS Amplify |
AWS Amplify Admin | amplifybackend | AWS Amplify Admin |
AWS Amplify UI Builder | amplifyuibuilder | AWS Amplify UI Builder |
Apache Kafka APIs for Amazon MSK clusters | kafka-cluster | Apache Kafka APIs for Amazon MSK clusters |
Amazon API Gateway | execute-api | Amazon API Gateway |
Amazon API Gateway Management | apigateway | Amazon API Gateway Management |
Amazon API Gateway Management V2 | apigateway | Amazon API Gateway Management V2 |
AWS App Mesh | appmesh | AWS App Mesh |
AWS App Mesh Preview | appmesh-preview | AWS App Mesh Preview |
AWS App Runner | apprunner | AWS App Runner |
AWS AppConfig | appconfig | AWS AppConfig |
Amazon AppFlow | appflow | Amazon AppFlow |
Amazon AppIntegrations | app-integrations | Amazon AppIntegrations |
AWS Application Auto Scaling | application-autoscaling | AWS Application Auto Scaling |
AWS Application Cost Profiler Service | application-cost-profiler | AWS Application Cost Profiler Service |
Application Discovery | discovery | Application Discovery |
Application Discovery Arsenal | arsenal | Application Discovery Arsenal |
AWS Application Migration Service | mgn | AWS Application Migration Service |
Amazon AppStream 2.0 | appstream | Amazon AppStream 2.0 |
AWS AppSync | appsync | AWS AppSync |
AWS Artifact | artifact | AWS Artifact |
Amazon Athena | athena | Amazon Athena |
AWS Audit Manager | auditmanager | AWS Audit Manager |
AWS Auto Scaling | autoscaling-plans | AWS Auto Scaling |
AWSDataSync | datasync | AWSDataSync |
AWS Backup | backup | AWS Backup |
AWS Backup Gateway | backup-gateway | AWS Backup Gateway |
AWS Backup storage | backup-storage | AWS Backup storage |
AWS Batch | batch | AWS Batch |
AWS Billing and Cost Management | aws-portal | AWS Billing and Cost Management |
AWS Billing and Cost Management Conductor | billingconductor | AWS Billing and Cost Management Conductor |
Amazon Braket | braket | Amazon Braket |
AWS Budget Service | budgets | AWS Budget Service |
AWS BugBust | bugbust | AWS BugBust |
AWS Certificate Manager | acm | AWS Certificate Manager |
AWS Certificate Manager Private Certificate Authority | acm-pca | AWS Certificate Manager Private Certificate Authority |
AWS Chatbot | chatbot | AWS Chatbot |
Amazon Chime | chime | Amazon Chime |
AWS Cloud Control API | cloudformation | AWS Cloud Control API |
Amazon Cloud Directory | clouddirectory | Amazon Cloud Directory |
AWS Cloud Map | servicediscovery | AWS Cloud Map |
AWS Cloud9 | cloud9 | AWS Cloud9 |
AWS CloudFormation | cloudformation | AWS CloudFormation |
Amazon CloudFront | cloudfront | Amazon CloudFront |
AWS CloudHSM | cloudhsm | AWS CloudHSM |
Amazon CloudSearch | cloudsearch | Amazon CloudSearch |
AWS CloudShell | cloudshell | AWS CloudShell |
AWS CloudTrail | cloudtrail | AWS CloudTrail |
Amazon CloudWatch | cloudwatch | Amazon CloudWatch |
CloudWatch Application Insights | applicationinsights | CloudWatch Application Insights |
Amazon CloudWatch Evidently | evidently | Amazon CloudWatch Evidently |
Amazon CloudWatch Logs | logs | Amazon CloudWatch Logs |
AWS CloudWatch RUM | rum | AWS CloudWatch RUM |
Amazon CloudWatch Synthetics | synthetics | Amazon CloudWatch Synthetics |
AWS CodeArtifact | codeartifact | AWS CodeArtifact |
AWS CodeBuild | codebuild | AWS CodeBuild |
AWS CodeCommit | codecommit | AWS CodeCommit |
AWS CodeDeploy | codedeploy | AWS CodeDeploy |
AWS CodeDeploy secure host commands service | codedeploy-commands-secure | AWS CodeDeploy secure host commands service |
Amazon CodeGuru | codeguru | Amazon CodeGuru |
Amazon CodeGuru Profiler | codeguru-profiler | Amazon CodeGuru Profiler |
Amazon CodeGuru Reviewer | codeguru-reviewer | Amazon CodeGuru Reviewer |
AWS CodePipeline | codepipeline | AWS CodePipeline |
AWS CodeStar | codestar | AWS CodeStar |
AWS CodeStar Connections | codestar-connections | AWS CodeStar Connections |
AWS CodeStar Notifications | codestar-notifications | AWS CodeStar Notifications |
Amazon Cognito Identity | cognito-identity | Amazon Cognito Identity |
Amazon Cognito Sync | cognito-sync | Amazon Cognito Sync |
Amazon Cognito User Pools | cognito-idp | Amazon Cognito User Pools |
Amazon Comprehend | comprehend | Amazon Comprehend |
Amazon Comprehend Medical | comprehendmedical | Amazon Comprehend Medical |
AWS Compute Optimizer | compute-optimizer | AWS Compute Optimizer |
AWS Config | config | AWS Config |
Amazon Connect | connect | Amazon Connect |
Amazon Connect Customer Profiles | profile | Amazon Connect Customer Profiles |
Amazon Connect Voice ID | voiceid | Amazon Connect Voice ID |
Amazon Connect Wisdom | wisdom | Amazon Connect Wisdom |
AWS Connector Service | awsconnector | AWS Connector Service |
AWS Control Tower | controltower | AWS Control Tower |
AWS Cost and Usage Report | cur | AWS Cost and Usage Report |
AWS Cost Explorer Service | ce | AWS Cost Explorer Service |
AWS Data Exchange | dataexchange | AWS Data Exchange |
Amazon Data Lifecycle Manager | dlm | Amazon Data Lifecycle Manager |
Data Pipeline | datapipeline | Data Pipeline |
AWS Database Migration Service | dms | AWS Database Migration Service |
Database Query Metadata Service | dbqms | Database Query Metadata Service |
AWS DeepComposer | deepcomposer | AWS DeepComposer |
AWS DeepLens | deeplens | AWS DeepLens |
AWS DeepRacer | deepracer | AWS DeepRacer |
Amazon Detective | detective | Amazon Detective |
AWS Device Farm | devicefarm | AWS Device Farm |
Amazon DevOps Guru | devops-guru | Amazon DevOps Guru |
AWS Direct Connect | directconnect | AWS Direct Connect |
AWS Directory Service | ds | AWS Directory Service |
Amazon DynamoDB | dynamodb | Amazon DynamoDB |
Amazon DynamoDB Accelerator (DAX) | dax | Amazon DynamoDB Accelerator (DAX) |
Amazon EC2 | ec2 | Amazon EC2 |
Amazon EC2 Auto Scaling | autoscaling | Amazon EC2 Auto Scaling |
Amazon EC2 Image Builder | imagebuilder | Amazon EC2 Image Builder |
Amazon EC2 Instance Connect | ec2-instance-connect | Amazon EC2 Instance Connect |
AWS Elastic Beanstalk | elasticbeanstalk | AWS Elastic Beanstalk |
Amazon Elastic Block Store | ebs | Amazon Elastic Block Store |
Amazon Elastic Container Registry | ecr | Amazon Elastic Container Registry |
Amazon Elastic Container Registry Public | ecr-public | Amazon Elastic Container Registry Public |
Amazon Elastic Container Service | ecs | Amazon Elastic Container Service |
AWS Elastic Disaster Recovery | drs | AWS Elastic Disaster Recovery |
Amazon Elastic File System | elasticfilesystem | Amazon Elastic File System |
Amazon Elastic Inference | elastic-inference | Amazon Elastic Inference |
Amazon Elastic Kubernetes Service | eks | Amazon Elastic Kubernetes Service |
Elastic Load Balancing | elasticloadbalancing | Elastic Load Balancing |
Elastic Load Balancing V2 | elasticloadbalancing | Elastic Load Balancing V2 |
Amazon Elastic MapReduce | elasticmapreduce | Amazon Elastic MapReduce |
Amazon Elastic Transcoder | elastictranscoder | Amazon Elastic Transcoder |
Amazon ElastiCache | elasticache | Amazon ElastiCache |
AWS Elemental Appliances and Software | elemental-appliances-software | AWS Elemental Appliances and Software |
AWS Elemental Appliances and Software Activation Service | elemental-activations | AWS Elemental Appliances and Software Activation Service |
AWS Elemental MediaConnect | mediaconnect | AWS Elemental MediaConnect |
AWS Elemental MediaConvert | mediaconvert | AWS Elemental MediaConvert |
AWS Elemental MediaLive | medialive | AWS Elemental MediaLive |
AWS Elemental MediaPackage | mediapackage | AWS Elemental MediaPackage |
AWS Elemental MediaPackage VOD | mediapackage-vod | AWS Elemental MediaPackage VOD |
AWS Elemental MediaStore | mediastore | AWS Elemental MediaStore |
AWS Elemental MediaTailor | mediatailor | AWS Elemental MediaTailor |
Elemental Support Cases | elemental-support-cases | Elemental Support Cases |
Elemental Support Content | elemental-support-content | Elemental Support Content |
Amazon EMR on EKS (EMR Containers) | emr-containers | Amazon EMR on EKS (EMR Containers) |
Amazon EventBridge | events | Amazon EventBridge |
Amazon EventBridge Schemas | schemas | Amazon EventBridge Schemas |
AWS Fault Injection Simulator | fis | AWS Fault Injection Simulator |
Amazon FinSpace | finspace | Amazon FinSpace |
AWS Firewall Manager | fms | AWS Firewall Manager |
Amazon Forecast | forecast | Amazon Forecast |
Amazon Fraud Detector | frauddetector | Amazon Fraud Detector |
Amazon FreeRTOS | freertos | Amazon FreeRTOS |
Amazon FSx | fsx | Amazon FSx |
Amazon GameLift | gamelift | Amazon GameLift |
Amazon GameSparks | gamesparks | Amazon GameSparks |
Amazon Glacier | glacier | Amazon Glacier |
AWS Global Accelerator | globalaccelerator | AWS Global Accelerator |
AWS Glue | glue | AWS Glue |
AWS Glue DataBrew | databrew | AWS Glue DataBrew |
AWS Ground Station | groundstation | AWS Ground Station |
Amazon GroundTruth Labeling | groundtruthlabeling | Amazon GroundTruth Labeling |
Amazon GuardDuty | guardduty | Amazon GuardDuty |
AWS Health APIs and Notifications | health | AWS Health APIs and Notifications |
Amazon HealthLake | healthlake | Amazon HealthLake |
High-volume outbound communications | connect-campaigns | High-volume outbound communications |
Amazon Honeycode | honeycode | Amazon Honeycode |
AWS IAM Access Analyzer | access-analyzer | AWS IAM Access Analyzer |
Identity And Access Management | iam | Identity And Access Management |
AWS Identity Store | identitystore | AWS Identity Store |
AWS Identity Synchronization Service | identity-sync | AWS Identity Synchronization Service |
AWS Import Export Disk Service | importexport | AWS Import Export Disk Service |
Amazon Inspector | inspector | Amazon Inspector |
Amazon Inspector2 | inspector2 | Amazon Inspector2 |
Amazon Interactive Video Service | ivs | Amazon Interactive Video Service |
AWS IoT | iot | AWS IoT |
AWS IoT 1-Click | iot1click | AWS IoT 1-Click |
AWS IoT Analytics | iotanalytics | AWS IoT Analytics |
AWS IoT Core Device Advisor | iotdeviceadvisor | AWS IoT Core Device Advisor |
AWS IoT Core for LoRaWAN | iotwireless | AWS IoT Core for LoRaWAN |
AWS IoT Device Tester | iot-device-tester | AWS IoT Device Tester |
AWS IoT Events | iotevents | AWS IoT Events |
AWS IoT Fleet Hub for Device Management | iotfleethub | AWS IoT Fleet Hub for Device Management |
AWS IoT FleetWise | iotfleetwise | AWS IoT FleetWise |
AWS IoT Greengrass | greengrass | AWS IoT Greengrass |
AWS IoT Greengrass V2 | greengrass | AWS IoT Greengrass V2 |
AWS IoT RoboRunner | iotroborunner | AWS IoT RoboRunner |
AWS IoT SiteWise | iotsitewise | AWS IoT SiteWise |
AWS IoT Things Graph | iotthingsgraph | AWS IoT Things Graph |
AWS IoT TwinMaker | iottwinmaker | AWS IoT TwinMaker |
AWS IQ | iq | AWS IQ |
AWS IQ Permissions | iq-permission | AWS IQ Permissions |
Amazon Kendra | kendra | Amazon Kendra |
AWS Key Management Service | kms | AWS Key Management Service |
Amazon Keyspaces (for Apache Cassandra) | cassandra | Amazon Keyspaces (for Apache Cassandra) |
Amazon Kinesis | kinesis | Amazon Kinesis |
Amazon Kinesis Analytics | kinesisanalytics | Amazon Kinesis Analytics |
Amazon Kinesis Analytics V2 | kinesisanalytics | Amazon Kinesis Analytics V2 |
Amazon Kinesis Firehose | firehose | Amazon Kinesis Firehose |
Amazon Kinesis Video Streams | kinesisvideo | Amazon Kinesis Video Streams |
AWS Lake Formation | lakeformation | AWS Lake Formation |
AWS Lambda | lambda | AWS Lambda |
Launch Wizard | launchwizard | Launch Wizard |
Amazon Lex | lex | Amazon Lex |
Amazon Lex V2 | lex | Amazon Lex V2 |
AWS License Manager | license-manager | AWS License Manager |
Amazon Lightsail | lightsail | Amazon Lightsail |
Amazon Location | geo | Amazon Location |
Amazon Lookout for Equipment | lookoutequipment | Amazon Lookout for Equipment |
Amazon Lookout for Metrics | lookoutmetrics | Amazon Lookout for Metrics |
Amazon Lookout for Vision | lookoutvision | Amazon Lookout for Vision |
Amazon Machine Learning | machinelearning | Amazon Machine Learning |
Amazon Macie | macie2 | Amazon Macie |
Amazon Macie Classic | macie | Amazon Macie Classic |
Amazon Managed Blockchain | managedblockchain | Amazon Managed Blockchain |
Amazon Managed Grafana | grafana | Amazon Managed Grafana |
Amazon Managed Service for Prometheus | aps | Amazon Managed Service for Prometheus |
Amazon Managed Streaming for Apache Kafka | kafka | Amazon Managed Streaming for Apache Kafka |
Amazon Managed Streaming for Kafka Connect | kafkaconnect | Amazon Managed Streaming for Kafka Connect |
Amazon Managed Workflows for Apache Airflow | airflow | Amazon Managed Workflows for Apache Airflow |
AWS Marketplace | aws-marketplace | AWS Marketplace |
AWS Marketplace Catalog | aws-marketplace | AWS Marketplace Catalog |
AWS Marketplace Commerce Analytics Service | marketplacecommerceanalytics | AWS Marketplace Commerce Analytics Service |
AWS Marketplace Entitlement Service | aws-marketplace | AWS Marketplace Entitlement Service |
AWS Marketplace Image Building Service | aws-marketplace | AWS Marketplace Image Building Service |
AWS Marketplace Management Portal | aws-marketplace-management | AWS Marketplace Management Portal |
AWS Marketplace Metering Service | aws-marketplace | AWS Marketplace Metering Service |
AWS Marketplace Private Marketplace | aws-marketplace | AWS Marketplace Private Marketplace |
AWS Marketplace Procurement Systems Integration | aws-marketplace | AWS Marketplace Procurement Systems Integration |
Amazon Mechanical Turk | mechanicalturk | Amazon Mechanical Turk |
Amazon MemoryDB | memorydb | Amazon MemoryDB |
Amazon Message Delivery Service | ec2messages | Amazon Message Delivery Service |
AWS Microservice Extractor for .NET | serviceextract | AWS Microservice Extractor for .NET |
AWS Migration Hub | mgh | AWS Migration Hub |
AWS Migration Hub Refactor Spaces | refactor-spaces | AWS Migration Hub Refactor Spaces |
AWS Migration Hub Strategy Recommendations. | migrationhub-strategy | AWS Migration Hub Strategy Recommendations. |
Amazon Mobile Analytics | mobileanalytics | Amazon Mobile Analytics |
AWS Mobile Hub | mobilehub | AWS Mobile Hub |
Amazon Monitron | monitron | Amazon Monitron |
Amazon MQ | mq | Amazon MQ |
Amazon Neptune | neptune-db | Amazon Neptune |
AWS Network Firewall | network-firewall | AWS Network Firewall |
Network Manager | networkmanager | Network Manager |
Amazon Nimble Studio | nimble | Amazon Nimble Studio |
Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) | es | Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) |
AWS OpsWorks | opsworks | AWS OpsWorks |
AWS OpsWorks Configuration Management | opsworks-cm | AWS OpsWorks Configuration Management |
AWS Organizations | organizations | AWS Organizations |
AWS Outposts | outposts | AWS Outposts |
AWS Panorama | panorama | AWS Panorama |
AWS Performance Insights | pi | AWS Performance Insights |
Amazon Personalize | personalize | Amazon Personalize |
Amazon Pinpoint | mobiletargeting | Amazon Pinpoint |
Amazon Pinpoint Email Service | ses | Amazon Pinpoint Email Service |
Amazon Pinpoint SMS and Voice Service | sms-voice | Amazon Pinpoint SMS and Voice Service |
Amazon Pinpoint SMS Voice V2 | sms-voice | Amazon Pinpoint SMS Voice V2 |
Amazon Polly | polly | Amazon Polly |
AWS Price List | pricing | AWS Price List |
AWS Proton | proton | AWS Proton |
AWS Purchase Orders Console | purchase-orders | AWS Purchase Orders Console |
Amazon QLDB | qldb | Amazon QLDB |
Amazon QuickSight | quicksight | Amazon QuickSight |
Amazon RDS | rds | Amazon RDS |
Amazon RDS Data API | rds-data | Amazon RDS Data API |
Amazon RDS IAM Authentication | rds-db | Amazon RDS IAM Authentication |
Recycle Bin | rbin | Recycle Bin |
Amazon Redshift | redshift | Amazon Redshift |
Amazon Redshift Data API | redshift-data | Amazon Redshift Data API |
Amazon Rekognition | rekognition | Amazon Rekognition |
AWS Resilience Hub Service | resiliencehub | AWS Resilience Hub Service |
AWS Resource Access Manager | ram | AWS Resource Access Manager |
Amazon Resource Group Tagging API | tag | Amazon Resource Group Tagging API |
AWS Resource Groups | resource-groups | AWS Resource Groups |
Amazon RHEL Knowledgebase Portal | rhelkb | Amazon RHEL Knowledgebase Portal |
AWS RoboMaker | robomaker | AWS RoboMaker |
Amazon Route 53 | route53 | Amazon Route 53 |
Amazon Route 53 Domains | route53domains | Amazon Route 53 Domains |
Amazon Route 53 Recovery Cluster | route53-recovery-cluster | Amazon Route 53 Recovery Cluster |
Amazon Route 53 Recovery Controls | route53-recovery-control-config | Amazon Route 53 Recovery Controls |
Amazon Route 53 Recovery Readiness | route53-recovery-readiness | Amazon Route 53 Recovery Readiness |
Amazon Route 53 Resolver | route53resolver | Amazon Route 53 Resolver |
Amazon S3 | s3 | Amazon S3 |
Amazon S3 Object Lambda | s3-object-lambda | Amazon S3 Object Lambda |
Amazon S3 on Outposts | s3-outposts | Amazon S3 on Outposts |
Amazon SageMaker | sagemaker | Amazon SageMaker |
AWS Savings Plans | savingsplans | AWS Savings Plans |
AWS Secrets Manager | secretsmanager | AWS Secrets Manager |
AWS Security Hub | securityhub | AWS Security Hub |
AWS Security Token Service | sts | AWS Security Token Service |
AWS Server Migration Service | sms | AWS Server Migration Service |
AWS Serverless Application Repository | serverlessrepo | AWS Serverless Application Repository |
AWS Service Catalog | servicecatalog | AWS Service Catalog |
Service Quotas | servicequotas | Service Quotas |
Amazon SES | ses | Amazon SES |
Amazon Session Manager Message Gateway Service | ssmmessages | Amazon Session Manager Message Gateway Service |
AWS Shield | shield | AWS Shield |
AWS Signer | signer | AWS Signer |
Amazon Simple Email Service v2 | ses | Amazon Simple Email Service v2 |
Amazon Simple Workflow Service | swf | Amazon Simple Workflow Service |
Amazon SimpleDB | sdb | Amazon SimpleDB |
AWS Snow Device Management | snow-device-management | AWS Snow Device Management |
AWS Snowball | snowball | AWS Snowball |
Amazon SNS | sns | Amazon SNS |
AWS SQL Workbench | sqlworkbench | AWS SQL Workbench |
Amazon SQS | sqs | Amazon SQS |
AWS SSO | sso | AWS SSO |
AWS SSO Directory | sso-directory | AWS SSO Directory |
AWS Step Functions | states | AWS Step Functions |
Amazon Storage Gateway | storagegateway | Amazon Storage Gateway |
Amazon Sumerian | sumerian | Amazon Sumerian |
AWS Support | support | AWS Support |
AWS Sustainability | sustainability | AWS Sustainability |
AWS Systems Manager | ssm | AWS Systems Manager |
AWS Systems Manager GUI Connect | ssm-guiconnect | AWS Systems Manager GUI Connect |
AWS Systems Manager Incident Manager | ssm-incidents | AWS Systems Manager Incident Manager |
AWS Systems Manager Incident Manager Contacts | ssm-contacts | AWS Systems Manager Incident Manager Contacts |
AWS Tag Editor | resource-explorer | AWS Tag Editor |
AWS Tax Settings | tax | AWS Tax Settings |
Amazon Textract | textract | Amazon Textract |
Amazon Timestream | timestream | Amazon Timestream |
AWS Tiros | tiros | AWS Tiros |
Amazon Transcribe | transcribe | Amazon Transcribe |
AWS Transfer Family | transfer | AWS Transfer Family |
Amazon Translate | translate | Amazon Translate |
AWS Trusted Advisor | trustedadvisor | AWS Trusted Advisor |
AWS WAF | waf | AWS WAF |
AWS WAF Regional | waf-regional | AWS WAF Regional |
AWS WAF V2 | wafv2 | AWS WAF V2 |
AWS Well-Architected Tool | wellarchitected | AWS Well-Architected Tool |
Amazon WorkDocs | workdocs | Amazon WorkDocs |
Amazon WorkLink | worklink | Amazon WorkLink |
Amazon WorkMail | workmail | Amazon WorkMail |
Amazon WorkMail Message Flow | workmailmessageflow | Amazon WorkMail Message Flow |
Amazon WorkSpaces | workspaces | Amazon WorkSpaces |
Amazon WorkSpaces Application Manager | wam | Amazon WorkSpaces Application Manager |
Amazon WorkSpaces Web | workspaces-web | Amazon WorkSpaces Web |
AWS X-Ray | xray | AWS X-Ray |