Parse AWS Amazon Resource Names and inspect their partition, service, region, account ID, resource type, and resource name components.
Enter an Amazon Resource Name to inspect its components.
Load a common AWS ARN format to see how its components are parsed.
Your support helps us build more tools and improve the ones you already use.
More tools you may find useful.
Analyze AWS IAM policies for wildcard permissions, overly broad access, potentially risky actions, and common policy configuration issues.
Format, validate, and inspect JSON data with syntax highlighting, detailed validation errors, and an easy-to-read structured output.
Analyze Terraform plan JSON to inspect infrastructure changes, resource actions, configuration differences, and potential risks before applying changes.
Convert JSON objects and arrays to CSV or transform CSV data into formatted JSON with support for quoted fields and special characters.
AWS ARN Parser is a browser-based tool for inspecting Amazon Resource Names. It breaks an AWS ARN into its partition, service, region, account ID, resource type, resource name, and resource path so you can quickly understand which AWS resource an identifier represents.
An Amazon Resource Name (ARN) is a standardized identifier used by AWS to uniquely identify resources across AWS services.
ARNs are used throughout the AWS ecosystem, including IAM policies, resource-based policies, Terraform configurations, CloudFormation templates, AWS CLI commands, SDK integrations, and automation scripts.
The parser separates an ARN into its major components and displays each component individually. This makes long or unfamiliar ARNs easier to inspect and understand.
The tool also attempts to identify the resource type, resource name, and resource path based on common slash- and colon-based AWS resource formats.
A common ARN structure is arn:partition:service:region:account-id:resource. Some components can be empty depending on the AWS service.
For example, an S3 bucket ARN can use an empty region and account field, while an EC2 instance ARN normally includes both a region and account ID.
Not every AWS resource is associated with a Region. Some services and resource types use global identifiers, which means the region component of their ARN can be empty.
The parser displays an empty region as Global to make this distinction easier to understand. This is a presentation choice and does not mean every resource from that service is necessarily global.
AWS services do not all use exactly the same resource naming convention. Resource identifiers can use slashes, colons, or service-specific formats.
This parser uses the general ARN structure and common resource separators to identify resource details. It does not contain a service-specific database for every ARN format used by AWS.
A syntactically valid ARN may therefore contain a resource structure that cannot be fully interpreted by the generic parser.
ARNs commonly contain AWS account IDs and infrastructure identifiers, so they should still be handled according to your organization's security policies.
ToolTunnel parses the ARN locally in your browser. The ARN does not need to be uploaded to a ToolTunnel backend for parsing.
An Amazon Resource Name (ARN) is a standardized AWS identifier used to uniquely identify a resource.
A common ARN contains the arn prefix, partition, service, region, account ID, and resource. Some components can be empty depending on the service.
Yes. Some AWS resources use global identifiers and therefore do not include a Region in their ARN.
No. Some AWS services and resource types use ARNs where the account ID component is empty.
ARNs are commonly used in IAM policies, Terraform, CloudFormation, AWS CLI commands, SDKs, resource policies, and automation.
It validates the general ARN structure and parses common components, but AWS services can use service-specific resource formats that require additional knowledge to interpret completely.
No. The parser performs its analysis locally and does not need to query AWS to split the ARN into its components.
An ARN can contain information such as an AWS account ID, resource names, and infrastructure details. Treat ARNs according to your organization's security and information-sharing policies.