AWS ARN Generator
Build a valid AWS ARN from a service, region, account ID, and resource identifier.
Choose a service and fill in the region, account ID, and resource - this tool assembles a correctly-formatted ARN.
Use the AWS ARN Parser to check an existing ARN's structure, or the AWS IAM Policy Generator to use a generated ARN directly in a policy Resource field.
What Does This Tool Generate?
A correctly-formatted Amazon Resource Name for common services - S3, IAM, Lambda, EC2, DynamoDB, and others - following each service's specific ARN convention (some omit region, some omit account ID, some use different resource-part separators).
Why Use This Tool?
Getting an ARN's exact punctuation right (a colon vs. a slash before the resource, whether region/account are present) matters because IAM policies match ARNs exactly - a malformed ARN in a policy simply won't match the intended resource.
How to Use It
- Choose a service (e.g. S3, IAM, Lambda).
- Fill in the region and account ID if that service's ARN format requires them.
- Enter the resource name/path.
- Copy the generated ARN.
Limitations
This covers common, well-documented ARN formats for frequently-used services - always double check against AWS's own ARN documentation for a less common service or resource type.