tessl/npm-pulumi--aws
A Pulumi package for creating and managing Amazon Web Services (AWS) cloud resources with infrastructure-as-code.
—
Quality
Pending
Does it follow best practices?
Impact
Pending
No eval scenarios have been run
services-detailed.mddocs/reference/
All AWS Services (A-Z)
Complete alphabetical listing of all 229 AWS service modules available in @pulumi/aws.
Quick Navigation
A | B | C | D | E | F | G | H | I | K | L | M | N | O | P | Q | R | S | T | V | W | X
A
accessanalyzer
IAM Access Analyzer - Analyze resource policies for external access.
Import: import { accessanalyzer } from "@pulumi/aws";
Resources: Analyzer, ArchiveRule
account
AWS Account management.
Import: import { account } from "@pulumi/aws";
Resources: AlternativeContact, PrimaryContact, Region
Data Sources: getPrimaryContact()
acm
AWS Certificate Manager - Provision and manage SSL/TLS certificates.
Import: import { acm } from "@pulumi/aws";
Resources: Certificate, CertificateValidation
Data Sources: getCertificate()
acmpca
AWS Certificate Manager Private Certificate Authority.
Import: import { acmpca } from "@pulumi/aws";
Resources: Certificate, CertificateAuthority, CertificateAuthorityCertificate, Permission, Policy
Data Sources: getCertificate(), getCertificateAuthority()
alb
Application Load Balancer - Layer 7 load balancing.
Import: import { alb } from "@pulumi/aws";
Resources: Listener, ListenerCertificate, ListenerRule, LoadBalancer, TargetGroup, TargetGroupAttachment
Data Sources: getListener(), getLoadBalancer(), getTargetGroup()
amp
Amazon Managed Service for Prometheus.
Import: import { amp } from "@pulumi/aws";
Resources: AlertManagerDefinition, QueryLoggingConfiguration, ResourcePolicy, RuleGroupNamespace, Scraper, Workspace, WorkspaceConfiguration
Data Sources: getDefaultScraperConfiguration(), getWorkspace(), getWorkspaces()
amplify
AWS Amplify - Full-stack web and mobile application platform.
Import: import { amplify } from "@pulumi/aws";
Resources: App, BackendEnvironment, Branch, DomainAssociation, Webhook
apigateway
Amazon API Gateway - Create, deploy, and manage RESTful APIs.
Import: import { apigateway } from "@pulumi/aws";
Resources: Account, ApiKey, Authorizer, BasePathMapping, ClientCertificate, Deployment, DocumentationPart, DocumentationVersion, DomainName, DomainNameAccessAssociation, Integration, IntegrationResponse, Method, MethodResponse, MethodSettings, Model, RequestValidator, Resource, Response, RestApi, RestApiPolicy, RestApiPut, Stage, UsagePlan, UsagePlanKey, VpcLink
Data Sources: getApiKeys(), getAuthorizer(), getAuthorizers(), getDomainName(), getExport(), getKey(), getResource(), getRestApi(), getSdk(), getVpcLink()
apigatewayv2
Amazon API Gateway v2 - HTTP and WebSocket APIs.
Import: import { apigatewayv2 } from "@pulumi/aws";
Resources: Api, ApiMapping, Authorizer, Deployment, DomainName, Integration, IntegrationResponse, Model, Route, RouteResponse, Stage, VpcLink
Data Sources: getApi(), getApis(), getExport(), getVpcLink()
appautoscaling
Application Auto Scaling - Automatic scaling for various AWS services.
Import: import { appautoscaling } from "@pulumi/aws";
Resources: Policy, ScheduledAction, Target
appconfig
AWS AppConfig - Feature flags and configuration management.
Import: import { appconfig } from "@pulumi/aws";
Resources: Application, ConfigurationProfile, Deployment, DeploymentStrategy, Environment, EventIntegration, Extension, ExtensionAssociation, HostedConfigurationVersion
Data Sources: getApplication(), getConfigurationProfile(), getConfigurationProfiles(), getEnvironment(), getEnvironments()
appfabric
AWS AppFabric - SaaS application integration and security.
Import: import { appfabric } from "@pulumi/aws";
Resources: AppAuthorization, AppAuthorizationConnection, AppBundle, Ingestion, IngestionDestination
appflow
Amazon AppFlow - Secure data transfer between SaaS applications and AWS.
Import: import { appflow } from "@pulumi/aws";
Resources: ConnectorProfile, Flow
appintegrations
Amazon AppIntegrations - Application integration service.
Import: import { appintegrations } from "@pulumi/aws";
Resources: DataIntegration
Data Sources: getEventIntegration()
applicationinsights
Amazon CloudWatch Application Insights.
Import: import { applicationinsights } from "@pulumi/aws";
Resources: Application
appmesh
AWS App Mesh - Service mesh for microservices.
Import: import { appmesh } from "@pulumi/aws";
Resources: GatewayRoute, Mesh, Route, VirtualGateway, VirtualNode, VirtualRouter, VirtualService
Data Sources: getGatewayRoute(), getMesh(), getRoute(), getVirtualGateway(), getVirtualNode(), getVirtualRouter(), getVirtualService()
apprunner
AWS App Runner - Deploy containerized web applications.
Import: import { apprunner } from "@pulumi/aws";
Resources: AutoScalingConfigurationVersion, Connection, CustomDomainAssociation, DefaultAutoScalingConfigurationVersion, Deployment, ObservabilityConfiguration, Service, VpcConnector, VpcIngressConnection
Data Sources: getHostedZoneId()
appstream
Amazon AppStream 2.0 - Application streaming service.
Import: import { appstream } from "@pulumi/aws";
Resources: DirectoryConfig, Fleet, FleetStackAssociation, ImageBuilder, Stack, User, UserStackAssociation
Data Sources: getImage()
appsync
AWS AppSync - Managed GraphQL API service.
Import: import { appsync } from "@pulumi/aws";
Resources: Api, ApiCache, ApiKey, ChannelNamespace, DataSource, DomainName, DomainNameApiAssociation, Function, GraphQLApi, Resolver, SourceApiAssociation, Type
athena
Amazon Athena - Serverless SQL query service for S3 data.
Import: import { athena } from "@pulumi/aws";
Resources: CapacityReservation, DataCatalog, Database, NamedQuery, PreparedStatement, Workgroup
Data Sources: getNamedQuery()
auditmanager
AWS Audit Manager - Continuous auditing and compliance.
Import: import { auditmanager } from "@pulumi/aws";
Resources: AccountRegistration, Assessment, AssessmentDelegation, AssessmentReport, Control, Framework, FrameworkShare, OrganizationAdminAccountRegistration
Data Sources: getControl(), getFramework()
autoscaling
Amazon EC2 Auto Scaling - Automatic capacity management.
Import: import { autoscaling } from "@pulumi/aws";
Resources: Attachment, Group, LifecycleHook, Notification, Policy, Schedule, Tag, TrafficSourceAttachment
Data Sources: getAmiIds(), getGroup()
autoscalingplans
AWS Auto Scaling Plans - Unified auto scaling for multiple resources.
Import: import { autoscalingplans } from "@pulumi/aws";
Resources: ScalingPlan
B
backup
AWS Backup - Centralized backup management.
Import: import { backup } from "@pulumi/aws";
Resources: Framework, GlobalSettings, LogicallyAirGappedVault, Plan, RegionSettings, ReportPlan, RestoreTestingPlan, RestoreTestingSelection, Selection, Vault, VaultLockConfiguration, VaultNotifications, VaultPolicy
Data Sources: getFramework(), getPlan(), getReportPlan(), getSelection(), getVault()
batch
AWS Batch - Run batch computing jobs.
Import: import { batch } from "@pulumi/aws";
Resources: ComputeEnvironment, JobDefinition, JobQueue, SchedulingPolicy
Data Sources: getComputeEnvironment(), getJobDefinition(), getJobQueue(), getSchedulingPolicy()
bcmdata
AWS Billing and Cost Management Data Exports.
Import: import { bcmdata } from "@pulumi/aws";
Resources: Export
bedrock
Amazon Bedrock - Foundation models and generative AI.
Import: import { bedrock } from "@pulumi/aws";
Resources: AgentAgent, AgentAgentActionGroup, AgentAgentAlias, AgentAgentCollaborator, AgentAgentKnowledgeBaseAssociation, AgentDataSource, AgentFlow, AgentKnowledgeBase, AgentPrompt, AgentcoreAgentRuntime, AgentcoreAgentRuntimeEndpoint, AgentcoreApiKeyCredentialProvider, AgentcoreBrowser, AgentcoreCodeInterpreter, AgentcoreGateway, AgentcoreGatewayTarget, AgentcoreMemory, AgentcoreMemoryStrategy, AgentcoreOauth2CredentialProvider, AgentcoreTokenVaultCmk, AgentcoreWorkloadIdentity, CustomModel, Guardrail, GuardrailVersion, InferenceProfile, ProvisionedModelThroughput
Data Sources: getAgentAgentVersions(), getCustomModel(), getCustomModels(), getInferenceProfile(), getInferenceProfiles()
bedrockfoundation
Amazon Bedrock Foundation Models.
Import: import { bedrockfoundation } from "@pulumi/aws";
Data Sources: getModel(), getModels()
bedrockmodel
Amazon Bedrock Model Configuration.
Import: import { bedrockmodel } from "@pulumi/aws";
Resources: InvocationLoggingConfiguration
billing
AWS Billing.
Import: import { billing } from "@pulumi/aws";
Resources: View
Data Sources: getViews()
budgets
AWS Budgets - Cost and usage budgets.
Import: import { budgets } from "@pulumi/aws";
Resources: Budget, BudgetAction
Data Sources: getBudget()
C
cfg
AWS Config - Resource configuration tracking.
Import: import { cfg } from "@pulumi/aws";
Resources: AggregateAuthorization, ConfigurationAggregator, ConformancePack, DeliveryChannel, OrganizationConformancePack, OrganizationCustomPolicyRule, OrganizationCustomRule, OrganizationManagedRule, Recorder, RecorderStatus, RemediationConfiguration, RetentionConfiguration, Rule
chatbot
AWS Chatbot - ChatOps for AWS services.
Import: import { chatbot } from "@pulumi/aws";
Resources: SlackChannelConfiguration, TeamsChannelConfiguration
Data Sources: getSlackWorkspace()
chime
Amazon Chime SDK - Communication services.
Import: import { chime } from "@pulumi/aws";
Resources: SdkvoiceGlobalSettings, SdkvoiceSipMediaApplication, SdkvoiceSipRule, SdkvoiceVoiceProfileDomain, VoiceConnector, VoiceConnectorGroup, VoiceConnectorLogging, VoiceConnectorOrigination, VoiceConnectorStreaming, VoiceConnectorTermination, VoiceConnectorTerminationCredentials
chimesdkmediapipelines
Amazon Chime SDK Media Pipelines.
Import: import { chimesdkmediapipelines } from "@pulumi/aws";
Resources: MediaInsightsPipelineConfiguration
cleanrooms
AWS Clean Rooms - Secure data collaboration.
Import: import { cleanrooms } from "@pulumi/aws";
Resources: Collaboration, ConfiguredTable, Membership
cloud9
AWS Cloud9 - Cloud IDE.
Import: import { cloud9 } from "@pulumi/aws";
Resources: EnvironmentEC2, EnvironmentMembership
cloudcontrol
AWS Cloud Control API - Unified resource management.
Import: import { cloudcontrol } from "@pulumi/aws";
Resources: Resource
Data Sources: getResource()
cloudformation
AWS CloudFormation - Infrastructure as code templates.
Import: import { cloudformation } from "@pulumi/aws";
Resources: CloudFormationType, Stack, StackInstances, StackSet, StackSetInstance
Data Sources: getCloudFormationType(), getExport(), getStack()
cloudfront
Amazon CloudFront - Content delivery network (CDN).
Import: import { cloudfront } from "@pulumi/aws";
Resources: CachePolicy, ConnectionFunction, ConnectionGroup, ContinuousDeploymentPolicy, Distribution, DistributionTenant, FieldLevelEncryptionConfig, FieldLevelEncryptionProfile, Function, KeyGroup, KeyValueStore, KeyvaluestoreKey, KeyvaluestoreKeysExclusive, MonitoringSubscription, MultitenantDistribution, OriginAccessControl, OriginAccessIdentity, OriginRequestPolicy, PublicKey, RealtimeLogConfig, ResponseHeadersPolicy, TrustStore, VpcOrigin
Data Sources: getCachePolicy(), getConnectionGroup(), getDistribution(), getDistributionTenant(), getFunction(), getLogDeliveryCanonicalUserId(), getOriginAccessControl(), getOriginAccessIdentities(), getOriginAccessIdentity(), getOriginRequestPolicy(), getRealtimeLogConfig(), getResponseHeadersPolicy()
cloudhsmv2
AWS CloudHSM - Hardware security modules.
Import: import { cloudhsmv2 } from "@pulumi/aws";
Resources: Cluster, Hsm
Data Sources: getCluster()
cloudsearch
Amazon CloudSearch - Managed search service.
Import: import { cloudsearch } from "@pulumi/aws";
Resources: Domain, DomainServiceAccessPolicy
cloudtrail
AWS CloudTrail - API activity logging.
Import: import { cloudtrail } from "@pulumi/aws";
Resources: EventDataStore, OrganizationDelegatedAdminAccount, Trail
Data Sources: getServiceAccount()
cloudwatch
Amazon CloudWatch - Monitoring, logging, and alarms.
Import: import { cloudwatch } from "@pulumi/aws";
Resources: CompositeAlarm, ContributorInsightRule, ContributorManagedInsightRule, Dashboard, EventApiDestination, EventArchive, EventBus, EventBusPolicy, EventConnection, EventEndpoint, EventPermission, EventRule, EventTarget, InternetMonitor, LogAccountPolicy, LogAnomalyDetector, LogDataProtectionPolicy, LogDelivery, LogDeliveryDestination, LogDeliveryDestinationPolicy, LogDeliverySource, LogDestination, LogDestinationPolicy, LogGroup, LogIndexPolicy, LogMetricFilter, LogResourcePolicy, LogStream, LogSubscriptionFilter, LogTransformer, MetricAlarm, MetricStream, QueryDefinition
Data Sources: getContributorManagedInsightRules(), getEventBus(), getEventBuses(), getEventConnection(), getEventSource(), getLogDataProtectionPolicyDocument(), getLogGroup(), getLogGroups()
codeartifact
AWS CodeArtifact - Software package management.
Import: import { codeartifact } from "@pulumi/aws";
Resources: Domain, DomainPermissions, Repository, RepositoryPermissionsPolicy
Data Sources: getAuthorizationToken(), getRepositoryEndpoint()
codebuild
AWS CodeBuild - Build and test code.
Import: import { codebuild } from "@pulumi/aws";
Resources: Fleet, Project, ReportGroup, ResourcePolicy, SourceCredential, Webhook
Data Sources: getFleet()
codecatalyst
Amazon CodeCatalyst - Unified software development service.
Import: import { codecatalyst } from "@pulumi/aws";
Resources: DevEnvironment, Project, SourceRepository
Data Sources: getDevEnvironment()
codecommit
AWS CodeCommit - Git repository hosting.
Import: import { codecommit } from "@pulumi/aws";
Resources: ApprovalRuleTemplate, ApprovalRuleTemplateAssociation, Repository, Trigger
Data Sources: getApprovalRuleTemplate(), getRepository()
codeconnections
AWS CodeConnections - Third-party repository connections.
Import: import { codeconnections } from "@pulumi/aws";
Resources: Connection, Host
codedeploy
AWS CodeDeploy - Automated application deployments.
Import: import { codedeploy } from "@pulumi/aws";
Resources: Application, DeploymentConfig, DeploymentGroup
codeguruprofiler
Amazon CodeGuru Profiler - Application performance profiling.
Import: import { codeguruprofiler } from "@pulumi/aws";
Resources: ProfilingGroup
Data Sources: getProfilingGroup()
codegurureviewer
Amazon CodeGuru Reviewer - Automated code reviews.
Import: import { codegurureviewer } from "@pulumi/aws";
Resources: RepositoryAssociation
codepipeline
AWS CodePipeline - Continuous delivery pipelines.
Import: import { codepipeline } from "@pulumi/aws";
Resources: CustomActionType, Pipeline, Webhook
codestarconnections
AWS CodeStar Connections - Third-party source code connections.
Import: import { codestarconnections } from "@pulumi/aws";
Resources: Connection, Host
Data Sources: getConnection()
codestarnotifications
AWS CodeStar Notifications - Development event notifications.
Import: import { codestarnotifications } from "@pulumi/aws";
Resources: NotificationRule
cognito
Amazon Cognito - User authentication and authorization.
Import: import { cognito } from "@pulumi/aws";
Resources: IdentityPool, IdentityPoolProviderPrincipalTag, IdentityPoolRoleAttachment, IdentityProvider, LogDeliveryConfiguration, ManagedLoginBranding, ManagedUserPoolClient, ResourceServer, RiskConfiguration, User, UserGroup, UserInGroup, UserPool, UserPoolClient, UserPoolDomain, UserPoolUICustomization
Data Sources: getIdentityPool(), getUserGroup(), getUserGroups(), getUserPool(), getUserPoolClient(), getUserPoolClients(), getUserPoolSigningCertificate(), getUserPools()
comprehend
Amazon Comprehend - Natural language processing.
Import: import { comprehend } from "@pulumi/aws";
Resources: DocumentClassifier, EntityRecognizer
computeoptimizer
AWS Compute Optimizer - Resource optimization recommendations.
Import: import { computeoptimizer } from "@pulumi/aws";
Resources: EnrollmentStatus, RecommendationPreferences
connect
Amazon Connect - Cloud contact center.
Import: import { connect } from "@pulumi/aws";
Resources: BotAssociation, ContactFlow, ContactFlowModule, HoursOfOperation, Instance, InstanceStorageConfig, LambdaFunctionAssociation, PhoneNumber, PhoneNumberContactFlowAssociation, Queue, QuickConnect, RoutingProfile, SecurityProfile, User, UserHierarchyGroup, UserHierarchyStructure, Vocabulary
Data Sources: getBotAssociation(), getContactFlow(), getContactFlowModule(), getHoursOfOperation(), getInstance(), getInstanceStorageConfig(), getLambdaFunctionAssociation(), getPrompt(), getQueue(), getQuickConnect(), getRoutingProfile(), getSecurityProfile(), getUser(), getUserHierarchyGroup(), getUserHierarchyStructure(), getVocabulary()
controltower
AWS Control Tower - Multi-account governance.
Import: import { controltower } from "@pulumi/aws";
Resources: Baseline, ControlTowerControl, LandingZone
Data Sources: getControls()
costexplorer
AWS Cost Explorer - Cost and usage analytics.
Import: import { costexplorer } from "@pulumi/aws";
Resources: AnomalyMonitor, AnomalySubscription, CostAllocationTag, CostCategory
Data Sources: getCostCategory(), getTags()
costoptimizationhub
AWS Cost Optimization Hub - Cost optimization recommendations.
Import: import { costoptimizationhub } from "@pulumi/aws";
Resources: EnrollmentStatus, Preferences
cur
AWS Cost and Usage Report.
Import: import { cur } from "@pulumi/aws";
Resources: ReportDefinition
Data Sources: getReportDefinition()
customerprofiles
Amazon Connect Customer Profiles.
Import: import { customerprofiles } from "@pulumi/aws";
Resources: Domain, Profile
D
dataexchange
AWS Data Exchange - Data marketplace.
Import: import { dataexchange } from "@pulumi/aws";
Resources: DataSet, EventAction, Revision, RevisionAssets
datapipeline
AWS Data Pipeline - Data workflow orchestration.
Import: import { datapipeline } from "@pulumi/aws";
Resources: Pipeline, PipelineDefinition
Data Sources: getPipeline(), getPipelineDefinition()
datasync
AWS DataSync - Data transfer service.
Import: import { datasync } from "@pulumi/aws";
Resources: Agent, EfsLocation, FsxOpenZfsFileSystem, LocationAzureBlob, LocationFsxLustre, LocationFsxOntapFileSystem, LocationFsxWindows, LocationHdfs, LocationObjectStorage, LocationSmb, NfsLocation, S3Location, Task
datazone
Amazon DataZone - Data management and governance.
Import: import { datazone } from "@pulumi/aws";
Resources: AssetType, Domain, Environment, EnvironmentBlueprintConfiguration, EnvironmentProfile, FormType, Glossary, GlossaryTerm, Project, UserProfile
Data Sources: getDomain(), getEnvironmentBlueprint()
dax
Amazon DynamoDB Accelerator (DAX) - In-memory cache for DynamoDB.
Import: import { dax } from "@pulumi/aws";
Resources: Cluster, ParameterGroup, SubnetGroup
detective
Amazon Detective - Security investigation service.
Import: import { detective } from "@pulumi/aws";
Resources: Graph, InvitationAccepter, Member, OrganizationAdminAccount, OrganizationConfiguration
devicefarm
AWS Device Farm - Mobile app testing.
Import: import { devicefarm } from "@pulumi/aws";
Resources: DevicePool, InstanceProfile, NetworkProfile, Project, TestGridProject, Upload
devopsguru
Amazon DevOps Guru - ML-powered operational insights.
Import: import { devopsguru } from "@pulumi/aws";
Resources: EventSourcesConfig, NotificationChannel, ResourceCollection, ServiceIntegration
Data Sources: getNotificationChannel(), getResourceCollection()
directconnect
AWS Direct Connect - Dedicated network connection to AWS.
Import: import { directconnect } from "@pulumi/aws";
Resources: BgpPeer, Connection, ConnectionAssociation, ConnectionConfirmation, Gateway, GatewayAssociation, GatewayAssociationProposal, HostedConnection, HostedPrivateVirtualInterface, HostedPrivateVirtualInterfaceAccepter, HostedPublicVirtualInterface, HostedPublicVirtualInterfaceAccepter, HostedTransitVirtualInterface, HostedTransitVirtualInterfaceAcceptor, LinkAggregationGroup, MacsecKeyAssociation, PrivateVirtualInterface, PublicVirtualInterface, TransitVirtualInterface
Data Sources: getConnection(), getGateway(), getLocation(), getLocations(), getRouterConfiguration()
directoryservice
AWS Directory Service - Managed Microsoft Active Directory.
Import: import { directoryservice } from "@pulumi/aws";
Resources: ConditionalForwarder, Directory, LogSubscription, RadiusSettings, ServiceRegion, SharedDirectory, SharedDirectoryAccepter, Trust
Data Sources: getDirectory()
dlm
Amazon Data Lifecycle Manager - EBS snapshot lifecycle policies.
Import: import { dlm } from "@pulumi/aws";
Resources: LifecyclePolicy
dms
AWS Database Migration Service - Database migration.
Import: import { dms } from "@pulumi/aws";
Resources: Certificate, Endpoint, EventSubscription, ReplicationConfig, ReplicationInstance, ReplicationSubnetGroup, ReplicationTask, S3Endpoint
Data Sources: getCertificate(), getEndpoint(), getReplicationInstance(), getReplicationSubnetGroup(), getReplicationTask()
docdb
Amazon DocumentDB - MongoDB-compatible document database.
Import: import { docdb } from "@pulumi/aws";
Resources: Cluster, ClusterInstance, ClusterParameterGroup, ClusterSnapshot, ElasticCluster, EventSubscription, GlobalCluster, SubnetGroup
Data Sources: getEngineVersion(), getOrderableDbInstance()
drs
AWS Elastic Disaster Recovery - Disaster recovery service.
Import: import { drs } from "@pulumi/aws";
Resources: ReplicationConfigurationTemplate
dsql
Amazon DSQL - Distributed SQL database.
Import: import { dsql } from "@pulumi/aws";
Resources: Cluster, ClusterPeering
dynamodb
Amazon DynamoDB - NoSQL database service.
Import: import { dynamodb } from "@pulumi/aws";
Resources: ContributorInsights, GlobalSecondaryIndex, GlobalTable, KinesisStreamingDestination, ResourcePolicy, Table, TableExport, TableItem, TableReplica, Tag
Data Sources: getTable(), getTableItem(), getTables()
E
ebs
Amazon Elastic Block Store - Block storage volumes.
Import: import { ebs } from "@pulumi/aws";
Resources: DefaultKmsKey, EncryptionByDefault, FastSnapshotRestore, Snapshot, SnapshotBlockPublicAccess, SnapshotCopy, SnapshotImport, Volume
Data Sources: getDefaultKmsKey(), getEbsVolumes(), getEncryptionByDefault(), getSnapshot(), getSnapshotIds(), getVolume()
ec2
Amazon Elastic Compute Cloud - Virtual servers and networking.
Import: import { ec2 } from "@pulumi/aws";
Resources: AllowedImagesSettings, Ami, AmiCopy, AmiFromInstance, AmiLaunchPermission, AvailabilityZoneGroup, CapacityBlockReservation, CapacityReservation, CarrierGateway, CustomerGateway, DedicatedHost, DefaultCreditSpecification, DefaultNetworkAcl, DefaultRouteTable, DefaultSecurityGroup, DefaultSubnet, DefaultVpc, DefaultVpcDhcpOptions, EgressOnlyInternetGateway, Eip, EipAssociation, EipDomainName, EncryptionControl, Fleet, FlowLog, ImageBlockPublicAccess, Instance, InstanceMetadataDefaults, InternetGateway, InternetGatewayAttachment, KeyPair, LaunchConfiguration, LaunchTemplate, LocalGatewayRoute, LocalGatewayRouteTableVpcAssociation, MainRouteTableAssociation, ManagedPrefixList, ManagedPrefixListEntry, NatGateway, NatGatewayEipAssociation, NetworkAcl, NetworkAclAssociation, NetworkAclRule, NetworkInsightsAnalysis, NetworkInsightsPath, NetworkInterface, NetworkInterfaceAttachment, NetworkInterfacePermission, NetworkInterfaceSecurityGroupAttachment, PeeringConnectionOptions, PlacementGroup, ProxyProtocolPolicy, Route, RouteTable, RouteTableAssociation, SecurityGroup, SecurityGroupAssociation, SecurityGroupRule, SerialConsoleAccess, SnapshotCreateVolumePermission, SpotDatafeedSubscription, SpotFleetRequest, SpotInstanceRequest, Subnet, SubnetCidrReservation, Tag, TrafficMirrorFilter, TrafficMirrorFilterRule, TrafficMirrorSession, TrafficMirrorTarget, VolumeAttachment, Vpc, VpcBlockPublicAccessExclusion, VpcBlockPublicAccessOptions, VpcDhcpOptions, VpcDhcpOptionsAssociation, VpcEncryptionControl, VpcEndpoint, VpcEndpointConnectionAccepter, VpcEndpointConnectionNotification, VpcEndpointPolicy, VpcEndpointRouteTableAssociation, VpcEndpointService, VpcEndpointServiceAllowedPrinciple, VpcEndpointSubnetAssociation, VpcIpam, VpcIpamOrganizationAdminAccount, VpcIpamPool, VpcIpamPoolCidr, VpcIpamPoolCidrAllocation, VpcIpamPreviewNextCidr, VpcIpamResourceDiscovery, VpcIpamResourceDiscoveryAssociation, VpcIpamScope, VpcIpv4CidrBlockAssociation, VpcIpv6CidrBlockAssociation, VpcNetworkPerformanceMetricSubscription, VpcPeeringConnection, VpcPeeringConnectionAccepter, VpnConcentrator, VpnConnection, VpnConnectionRoute, VpnGateway, VpnGatewayAttachment, VpnGatewayRoutePropagation
Data Sources: 64 data sources for querying EC2 instances, AMIs, VPCs, subnets, security groups, and networking components
ec2clientvpn
AWS Client VPN - Remote access VPN.
Import: import { ec2clientvpn } from "@pulumi/aws";
Resources: AuthorizationRule, Endpoint, NetworkAssociation, Route
Data Sources: getEndpoint()
ec2transitgateway
AWS Transit Gateway - Network transit hub.
Import: import { ec2transitgateway } from "@pulumi/aws";
Resources: Connect, ConnectPeer, DefaultRouteTableAssociation, DefaultRouteTablePropagation, InstanceConnectEndpoint, InstanceState, MulticastDomain, MulticastDomainAssociation, MulticastGroupMember, MulticastGroupSource, PeeringAttachment, PeeringAttachmentAccepter, PolicyTable, PolicyTableAssociation, PrefixListReference, Route, RouteTable, RouteTableAssociation, RouteTablePropagation, TransitGateway, VpcAttachment, VpcAttachmentAccepter
Data Sources: 16 data sources for querying transit gateway information
ecr
Amazon Elastic Container Registry - Docker container registry.
Import: import { ecr } from "@pulumi/aws";
Resources: AccountSetting, LifecyclePolicy, PullThroughCacheRule, PullTimeUpdateExclusion, RegistryPolicy, RegistryScanningConfiguration, ReplicationConfiguration, Repository, RepositoryCreationTemplate, RepositoryPolicy
Data Sources: getAuthorizationToken(), getImage(), getImages(), getLifecyclePolicyDocument(), getPullThroughCacheRule(), getRepositories(), getRepository(), getRepositoryCreationTemplate()
ecrpublic
Amazon ECR Public - Public container registry.
Import: import { ecrpublic } from "@pulumi/aws";
Resources: Repository, RepositoryPolicy
Data Sources: getAuthorizationToken(), getImages()
ecs
Amazon Elastic Container Service - Container orchestration.
Import: import { ecs } from "@pulumi/aws";
Resources: AccountSettingDefault, CapacityProvider, Cluster, ClusterCapacityProviders, ExpressGatewayService, Service, Tag, TaskDefinition, TaskSet
Data Sources: getCluster(), getClusters(), getContainerDefinition(), getService(), getTaskDefinition(), getTaskExecution()
efs
Amazon Elastic File System - Managed file storage.
Import: import { efs } from "@pulumi/aws";
Resources: AccessPoint, BackupPolicy, FileSystem, FileSystemPolicy, MountTarget, ReplicationConfiguration
Data Sources: getAccessPoint(), getAccessPoints(), getFileSystem(), getMountTarget()
eks
Amazon Elastic Kubernetes Service - Managed Kubernetes.
Import: import { eks } from "@pulumi/aws";
Resources: AccessEntry, AccessPolicyAssociation, Addon, Capability, Cluster, FargateProfile, IdentityProviderConfig, NodeGroup, PodIdentityAssociation
Data Sources: getAccessEntry(), getAddon(), getAddonVersion(), getCluster(), getClusterAuth(), getClusterVersions(), getClusters(), getNodeGroup(), getNodeGroups()
elasticache
Amazon ElastiCache - In-memory caching (Redis, Memcached).
Import: import { elasticache } from "@pulumi/aws";
Resources: Cluster, GlobalReplicationGroup, ParameterGroup, ReplicationGroup, ReservedCacheNode, ServerlessCache, SubnetGroup, User, UserGroup, UserGroupAssociation
Data Sources: getCluster(), getReplicationGroup(), getReservedCacheNodeOffering(), getServerlessCache(), getSubnetGroup(), getUser()
elasticbeanstalk
AWS Elastic Beanstalk - Application deployment platform.
Import: import { elasticbeanstalk } from "@pulumi/aws";
Resources: Application, ApplicationVersion, ConfigurationTemplate, Environment
Data Sources: getApplication(), getHostedZone(), getSolutionStack()
elasticsearch
Amazon Elasticsearch Service (deprecated, use opensearch).
Import: import { elasticsearch } from "@pulumi/aws";
Resources: Domain, DomainPolicy, DomainSamlOptions, VpcEndpoint
Data Sources: getDomain()
elastictranscoder
Amazon Elastic Transcoder - Media transcoding.
Import: import { elastictranscoder } from "@pulumi/aws";
Resources: Pipeline, Preset
elb
Elastic Load Balancing - Classic Load Balancer.
Import: import { elb } from "@pulumi/aws";
Resources: AppCookieStickinessPolicy, Attachment, ListenerPolicy, LoadBalancer, LoadBalancerBackendServerPolicy, LoadBalancerCookieStickinessPolicy, LoadBalancerPolicy, SslNegotiationPolicy
Data Sources: getHostedZoneId(), getLoadBalancer(), getServiceAccount()
emr
Amazon EMR - Big data processing with Hadoop/Spark.
Import: import { emr } from "@pulumi/aws";
Resources: BlockPublicAccessConfiguration, Cluster, InstanceFleet, InstanceGroup, ManagedScalingPolicy, SecurityConfiguration, Studio, StudioSessionMapping
Data Sources: getReleaseLabels(), getSupportedInstanceTypes()
emrcontainers
Amazon EMR on EKS - Run Spark on Kubernetes.
Import: import { emrcontainers } from "@pulumi/aws";
Resources: JobTemplate, VirtualCluster
Data Sources: getVirtualCluster()
emrserverless
Amazon EMR Serverless - Serverless big data processing.
Import: import { emrserverless } from "@pulumi/aws";
Resources: Application
evidently
Amazon CloudWatch Evidently - A/B testing and feature flags.
Import: import { evidently } from "@pulumi/aws";
Resources: Feature, Launch, Project, Segment
F
finspace
Amazon FinSpace - Financial services data management.
Import: import { finspace } from "@pulumi/aws";
Resources: KxCluster, KxDatabase, KxDataview, KxEnvironment, KxScalingGroup, KxUser, KxVolume
fis
AWS Fault Injection Simulator - Chaos engineering.
Import: import { fis } from "@pulumi/aws";
Resources: ExperimentTemplate, TargetAccountConfiguration
Data Sources: getExperimentTemplates()
fms
AWS Firewall Manager - Centralized firewall management.
Import: import { fms } from "@pulumi/aws";
Resources: AdminAccount, Policy, ResourceSet
fsx
Amazon FSx - Managed file systems (Lustre, Windows, ONTAP, OpenZFS).
Import: import { fsx } from "@pulumi/aws";
Resources: Backup, DataRepositoryAssociation, FileCache, LustreFileSystem, OntapFileSystem, OntapStorageVirtualMachine, OntapVolume, OpenZfsFileSystem, OpenZfsSnapshot, OpenZfsVolume, S3AccessPointAttachment, WindowsFileSystem
Data Sources: getOntapFileSystem(), getOntapStorageVirtualMachine(), getOntapStorageVirtualMachines(), getOpenZfsSnapshot(), getWindowsFileSystem()
G
gamelift
Amazon GameLift - Game server hosting.
Import: import { gamelift } from "@pulumi/aws";
Resources: Alias, Build, Fleet, GameServerGroup, GameSessionQueue, Script
glacier
Amazon S3 Glacier - Long-term archive storage.
Import: import { glacier } from "@pulumi/aws";
Resources: Vault, VaultLock
globalaccelerator
AWS Global Accelerator - Improve application availability and performance.
Import: import { globalaccelerator } from "@pulumi/aws";
Resources: Accelerator, CrossAccountAttachment, CustomRoutingAccelerator, CustomRoutingEndpointGroup, CustomRoutingListener, EndpointGroup, Listener
Data Sources: getAccelerator(), getCustomRoutingAccelerator()
glue
AWS Glue - ETL and data catalog service.
Import: import { glue } from "@pulumi/aws";
Resources: CatalogDatabase, CatalogTable, CatalogTableOptimizer, Classifier, Connection, Crawler, DataCatalogEncryptionSettings, DataQualityRuleset, DevEndpoint, Job, MLTransform, Partition, PartitionIndex, Registry, ResourcePolicy, Schema, SecurityConfiguration, Trigger, UserDefinedFunction, Workflow
Data Sources: getCatalogTable(), getConnection(), getDataCatalogEncryptionSettings(), getRegistry(), getScript()
grafana
Amazon Managed Grafana - Visualization and analytics.
Import: import { grafana } from "@pulumi/aws";
Resources: LicenseAssociation, RoleAssociation, Workspace, WorkspaceApiKey, WorkspaceSamlConfiguration, WorkspaceServiceAccount, WorkspaceServiceAccountToken
Data Sources: getWorkspace()
guardduty
Amazon GuardDuty - Threat detection service.
Import: import { guardduty } from "@pulumi/aws";
Resources: Detector, DetectorFeature, Filter, IPSet, InviteAccepter, MalwareProtectionPlan, Member, MemberDetectorFeature, OrganizationAdminAccount, OrganizationConfiguration, OrganizationConfigurationFeature, PublishingDestination, ThreatIntelSet
Data Sources: getDetector(), getFindingIds()
H-I
iam
AWS Identity and Access Management - Users, roles, policies, permissions.
Import: import { iam } from "@pulumi/aws";
Resources: AccessKey, AccountAlias, AccountPasswordPolicy, Group, GroupMembership, GroupPoliciesExclusive, GroupPolicy, GroupPolicyAttachment, GroupPolicyAttachmentsExclusive, InstanceProfile, OpenIdConnectProvider, OrganizationsFeatures, OutboundWebIdentityFederation, Policy, PolicyAttachment, Role, RolePoliciesExclusive, RolePolicy, RolePolicyAttachment, RolePolicyAttachmentsExclusive, SamlProvider, SecurityTokenServicePreferences, ServerCertificate, ServiceLinkedRole, ServiceSpecificCredential, SigningCertificate, SshKey, User, UserGroupMembership, UserLoginProfile, UserPoliciesExclusive, UserPolicy, UserPolicyAttachment, UserPolicyAttachmentsExclusive, VirtualMfaDevice
Data Sources: 17 data sources for querying IAM roles, users, policies, groups, and permissions
identitystore
AWS Identity Store - User and group management for AWS SSO.
Import: import { identitystore } from "@pulumi/aws";
Resources: Group, GroupMembership, User
Data Sources: getGroup(), getGroupMemberships(), getGroups(), getUser(), getUsers()
imagebuilder
EC2 Image Builder - Automated image creation.
Import: import { imagebuilder } from "@pulumi/aws";
Resources: Component, ContainerRecipe, DistributionConfiguration, Image, ImagePipeline, ImageRecipe, InfrastructureConfiguration, LifecyclePolicy, Workflow
Data Sources: getComponent(), getComponents(), getContainerRecipe(), getContainerRecipes(), getDistributionConfiguration(), getDistributionConfigurations(), getImage(), getImagePipeline(), getImagePipelines(), getImageRecipe(), getImageRecipes(), getInfrastructureConfiguration(), getInfrastructureConfigurations()
inspector
Amazon Inspector (Classic) - Security assessment service.
Import: import { inspector } from "@pulumi/aws";
Resources: AssessmentTarget, AssessmentTemplate, ResourceGroup
Data Sources: getRulesPackages()
inspector2
Amazon Inspector - Vulnerability management service.
Import: import { inspector2 } from "@pulumi/aws";
Resources: DelegatedAdminAccount, Enabler, Filter, MemberAssociation, OrganizationConfiguration
invoicing
AWS Invoicing - Billing and invoicing.
Import: import { invoicing } from "@pulumi/aws";
Resources: InvoiceUnit
iot
AWS IoT Core - Internet of Things platform.
Import: import { iot } from "@pulumi/aws";
Resources: Authorizer, BillingGroup, CaCertificate, Certificate, DomainConfiguration, EventConfigurations, IndexingConfiguration, LoggingOptions, Policy, PolicyAttachment, ProvisioningTemplate, RoleAlias, Thing, ThingGroup, ThingGroupMembership, ThingPrincipalAttachment, ThingType, TopicRule, TopicRuleDestination
Data Sources: getEndpoint(), getRegistrationCode()
ivs
Amazon Interactive Video Service - Live video streaming.
Import: import { ivs } from "@pulumi/aws";
Resources: Channel, PlaybackKeyPair, RecordingConfiguration
Data Sources: getStreamKey()
ivschat
Amazon IVS Chat - Chat for live streaming.
Import: import { ivschat } from "@pulumi/aws";
Resources: LoggingConfiguration, Room
K-L
kendra
Amazon Kendra - Enterprise search service.
Import: import { kendra } from "@pulumi/aws";
Resources: DataSource, Experience, Faq, Index, QuerySuggestionsBlockList, Thesaurus
Data Sources: getExperience(), getFaq(), getIndex(), getQuerySuggestionsBlockList(), getThesaurus()
keyspaces
Amazon Keyspaces - Managed Apache Cassandra.
Import: import { keyspaces } from "@pulumi/aws";
Resources: Keyspace, Table
kinesis
Amazon Kinesis - Real-time data streaming.
Import: import { kinesis } from "@pulumi/aws";
Resources: AnalyticsApplication, FirehoseDeliveryStream, ResourcePolicy, Stream, StreamConsumer, VideoStream
Data Sources: getFirehoseDeliveryStream(), getStream(), getStreamConsumer()
kinesisanalyticsv2
Amazon Kinesis Data Analytics - Stream processing applications.
Import: import { kinesisanalyticsv2 } from "@pulumi/aws";
Resources: Application, ApplicationSnapshot
kms
AWS Key Management Service - Encryption key management.
Import: import { kms } from "@pulumi/aws";
Resources: Alias, Ciphertext, CustomKeyStore, ExternalKey, Grant, Key, KeyPolicy, ReplicaExternalKey, ReplicaKey
Data Sources: getAlias(), getCipherText(), getCustomKeyStore(), getKey(), getPublicKey(), getSecret(), getSecrets()
lakeformation
AWS Lake Formation - Data lake management.
Import: import { lakeformation } from "@pulumi/aws";
Resources: DataCellsFilter, DataLakeSettings, IdentityCenterConfiguration, LfTag, LfTagExpression, OptIn, Permissions, Resource, ResourceLfTag, ResourceLfTags
Data Sources: getDataLakeSettings(), getPermissions(), getResource()
lambda
AWS Lambda - Serverless compute functions.
Import: import { lambda } from "@pulumi/aws";
Resources: Alias, CapacityProvider, CodeSigningConfig, EventSourceMapping, Function, FunctionEventInvokeConfig, FunctionRecursionConfig, FunctionUrl, Invocation, LayerVersion, LayerVersionPermission, Permission, ProvisionedConcurrencyConfig, RuntimeManagementConfig
Data Sources: getAlias(), getCodeSigningConfig(), getFunction(), getFunctionUrl(), getFunctions(), getInvocation(), getLayerVersion()
lb
Elastic Load Balancing - Application and Network load balancers.
Import: import { lb } from "@pulumi/aws";
Resources: Listener, ListenerCertificate, ListenerRule, LoadBalancer, TargetGroup, TargetGroupAttachment, TrustStore, TrustStoreRevocation
Data Sources: getHostedZoneId(), getLbs(), getListener(), getListenerRule(), getLoadBalancer(), getTargetGroup(), getTrustStore()
lex
Amazon Lex - Conversational AI chatbots.
Import: import { lex } from "@pulumi/aws";
Resources: Bot, BotAlias, Intent, SlotType, V2modelsBot, V2modelsBotLocale, V2modelsBotVersion, V2modelsIntent, V2modelsSlot, V2modelsSlotType
Data Sources: getBot(), getBotAlias(), getIntent(), getSlotType()
licensemanager
AWS License Manager - License tracking and management.
Import: import { licensemanager } from "@pulumi/aws";
Resources: Association, LicenseConfiguration, LicenseGrant, LicenseGrantAccepter
Data Sources: getLicenseGrants(), getReceivedLicense(), getReceivedLicenses()
lightsail
Amazon Lightsail - Simple VPS hosting.
Import: import { lightsail } from "@pulumi/aws";
Resources: Bucket, BucketAccessKey, BucketResourceAccess, Certificate, ContainerService, ContainerServiceDeploymentVersion, Database, Disk, Disk_attachment, Distribution, Domain, DomainEntry, Instance, InstancePublicPorts, KeyPair, Lb, LbAttachment, LbCertificate, LbCertificateAttachment, LbHttpsRedirectionPolicy, LbStickinessPolicy, StaticIp, StaticIpAttachment
location
Amazon Location Service - Maps and geospatial data.
Import: import { location } from "@pulumi/aws";
Resources: GeofenceCollection, Map, PlaceIndex, RouteCalculation, Tracker, TrackerAssociation
Data Sources: getGeofenceCollection(), getMap(), getPlaceIndex(), getRouteCalculator(), getTracker(), getTrackerAssociation(), getTrackerAssociations()
M-O
m2
AWS Mainframe Modernization - Mainframe application migration.
Import: import { m2 } from "@pulumi/aws";
Resources: Application, Deployment, Environment
macie
Amazon Macie (Classic).
Import: import { macie } from "@pulumi/aws";
Resources: CustomDataIdentifier, FindingsFilter
macie2
Amazon Macie - Data security and privacy service.
Import: import { macie2 } from "@pulumi/aws";
Resources: Account, ClassificationExportConfiguration, ClassificationJob, InvitationAccepter, Member, OrganizationAdminAccount, OrganizationConfiguration
mediaconvert
AWS Elemental MediaConvert - Video transcoding.
Import: import { mediaconvert } from "@pulumi/aws";
Resources: Queue
Data Sources: getQueue()
medialive
AWS Elemental MediaLive - Live video processing.
Import: import { medialive } from "@pulumi/aws";
Resources: Channel, Input, InputSecurityGroup, Multiplex, MultiplexProgram
mediapackage
AWS Elemental MediaPackage - Video origination and packaging.
Import: import { mediapackage } from "@pulumi/aws";
Resources: Channel, OriginEndpoint
mediapackagev2
AWS Elemental MediaPackage V2 - Next generation video origination.
Import: import { mediapackagev2 } from "@pulumi/aws";
Resources: ChannelGroup
mediastore
AWS Elemental MediaStore - Media storage and delivery.
Import: import { mediastore } from "@pulumi/aws";
Resources: Container, ContainerPolicy
Data Sources: getContainer()
memorydb
Amazon MemoryDB for Redis - Redis-compatible in-memory database.
Import: import { memorydb } from "@pulumi/aws";
Resources: Acl, Cluster, ParameterGroup, Snapshot, SubnetGroup, User
Data Sources: getAcl(), getCluster(), getParameterGroup(), getSnapshot(), getSubnetGroup(), getUser()
mq
Amazon MQ - Managed message broker.
Import: import { mq } from "@pulumi/aws";
Resources: Broker, Configuration
Data Sources: getBroker(), getBrokerEngineTypes(), getBrokerInstanceTypeOfferings()
msk
Amazon Managed Streaming for Kafka (MSK).
Import: import { msk } from "@pulumi/aws";
Resources: Cluster, ClusterPolicy, Configuration, Replicator, ScramSecretAssociation, ServerlessCluster, VpcConnection
Data Sources: getBrokerNodes(), getCluster(), getConfiguration(), getKafkaVersion(), getVpcConnection()
mskconnect
Amazon MSK Connect - Managed Kafka Connect.
Import: import { mskconnect } from "@pulumi/aws";
Resources: Connector, CustomPlugin, WorkerConfiguration
Data Sources: getConnector(), getCustomPlugin(), getWorkerConfiguration()
mwaa
Amazon Managed Workflows for Apache Airflow.
Import: import { mwaa } from "@pulumi/aws";
Resources: Environment
neptune
Amazon Neptune - Graph database.
Import: import { neptune } from "@pulumi/aws";
Resources: Cluster, ClusterEndpoint, ClusterInstance, ClusterParameterGroup, ClusterSnapshot, EventSubscription, GlobalCluster, ParameterGroup, SubnetGroup
Data Sources: getEngineVersion(), getOrderableDbInstance()
neptunegraph
Amazon Neptune Analytics.
Import: import { neptunegraph } from "@pulumi/aws";
Resources: Graph, PrivateGraphEndpoint
networkfirewall
AWS Network Firewall - Network protection.
Import: import { networkfirewall } from "@pulumi/aws";
Resources: Firewall, FirewallPolicy, LoggingConfiguration, ResourcePolicy, RuleGroup, TlsInspectionConfiguration
Data Sources: getFirewall(), getFirewallPolicy(), getResourcePolicy()
networkflowmonitor
AWS Network Flow Monitor - Network flow monitoring.
Import: import { networkflowmonitor } from "@pulumi/aws";
Resources: Monitor, Scope
networkmanager
AWS Network Manager - Global network management.
Import: import { networkmanager } from "@pulumi/aws";
Resources: AttachmentAccepter, ConnectAttachment, ConnectPeer, Connection, CoreNetwork, CoreNetworkPolicyAttachment, CustomerGatewayAssociation, Device, GlobalNetwork, Link, LinkAssociation, Site, SiteToSiteVpnAttachment, TransitGatewayConnectPeerAssociation, TransitGatewayPeering, TransitGatewayRegistration, TransitGatewayRouteTableAttachment, VpcAttachment
Data Sources: getConnection(), getConnections(), getCoreNetwork(), getCoreNetworkPolicyDocument(), getDevice(), getDevices(), getGlobalNetwork(), getGlobalNetworks(), getLink(), getLinks(), getSite(), getSites()
networkmonitor
AWS Network Monitor - Network connectivity monitoring.
Import: import { networkmonitor } from "@pulumi/aws";
Resources: Monitor, Probe
notifications
AWS User Notifications - Centralized notification management.
Import: import { notifications } from "@pulumi/aws";
Resources: ChannelAssociation, ContactsEmailContact, EventRule, NotificationConfiguration
oam
AWS CloudWatch Observability Access Manager - Cross-account observability.
Import: import { oam } from "@pulumi/aws";
Resources: Link, Sink
Data Sources: getLink(), getLinks(), getSink(), getSinks()
observabilityadmin
AWS Observability Admin - Centralized observability management.
Import: import { observabilityadmin } from "@pulumi/aws";
Resources: CentralizationRuleForOrganization
odb
AWS Database for Oracle - Oracle database on AWS.
Import: import { odb } from "@pulumi/aws";
Resources: CloudAutonomousVmCluster, CloudExadataInfrastructure, CloudVmCluster
Data Sources: getCloudAutonomousVmCluster(), getCloudAutonomousVmClusters(), getCloudExadataInfrastructure(), getCloudExadataInfrastructures(), getCloudVmCluster(), getCloudVmClusters()
opensearch
Amazon OpenSearch Service - Search and analytics engine.
Import: import { opensearch } from "@pulumi/aws";
Resources: ApplicationVersion, ComposableTemplate, Domain, DomainPolicy, DomainSamlOptions, InboundConnectionAccepter, OutboundConnection, Package, PackageAssociation, ServerlessAccessPolicy, ServerlessCollection, ServerlessLifecyclePolicy, ServerlessSecurityConfig, ServerlessSecurityPolicy, ServerlessVpcEndpoint, VpcEndpoint
Data Sources: getAccessPolicy(), getDomain(), getDomainDataSource(), getServerlessCollection(), getServerlessSecurityPolicy()
opensearchingest
Amazon OpenSearch Ingestion.
Import: import { opensearchingest } from "@pulumi/aws";
Resources: Pipeline
opensearchserverless
Amazon OpenSearch Serverless.
Import: import { opensearchserverless } from "@pulumi/aws";
Resources: AccessPolicy, Collection, LifecyclePolicy, SecurityConfig, SecurityPolicy, VpcEndpoint
Data Sources: getAccessPolicy(), getCollection(), getLifecyclePolicy(), getSecurityConfig(), getSecurityPolicy()
opsworks
AWS OpsWorks - Configuration management.
Import: import { opsworks } from "@pulumi/aws";
Resources: Application, CustomLayer, EcsClusterLayer, GangliaLayer, HaproxyLayer, Instance, JavaAppLayer, MemcachedLayer, MysqlLayer, NodejsAppLayer, Permission, PhpAppLayer, RailsAppLayer, RdsDbInstance, Stack, StaticWebLayer, UserProfile
Data Sources: getStack(), getUserProfile()
organizations
AWS Organizations - Multi-account management.
Import: import { organizations } from "@pulumi/aws";
Resources: Account, DelegatedAdministrator, Organization, OrganizationalUnit, Policy, PolicyAttachment, ResourcePolicy
Data Sources: getDelegatedAdministrator(), getDelegatedServices(), getOrganization(), getOrganizationalUnit(), getOrganizationalUnitChildAccounts(), getOrganizationalUnitDescendantAccounts(), getOrganizationalUnits(), getOrganizationalUnitsForParent(), getPolicy(), getResourceTags()
outposts
AWS Outposts - On-premises AWS infrastructure.
Import: import { outposts } from "@pulumi/aws";
Resources: OutpostAsset
Data Sources: getAsset(), getAssets(), getOutpost(), getOutpostAsset(), getOutpostInstanceType(), getOutpostInstanceTypes(), getOutposts(), getSite(), getSites()
P-R
paymentcryptography
AWS Payment Cryptography - Payment security and key management.
Import: import { paymentcryptography } from "@pulumi/aws";
Resources: Key, KeyAlias
pinpoint
Amazon Pinpoint - Customer engagement messaging.
Import: import { pinpoint } from "@pulumi/aws";
Resources: AdmChannel, ApnsChannel, ApnsSandboxChannel, ApnsVoipChannel, ApnsVoipSandboxChannel, App, BaiduChannel, EmailChannel, EmailTemplate, EventStream, GcmChannel, SmsChannel
Data Sources: getApp()
pipes
Amazon EventBridge Pipes - Event routing.
Import: import { pipes } from "@pulumi/aws";
Resources: Pipe
polly
Amazon Polly - Text-to-speech service.
Import: import { polly } from "@pulumi/aws";
Data Sources: getVoices()
pricing
AWS Pricing - Product pricing information.
Import: import { pricing } from "@pulumi/aws";
Data Sources: getProduct()
qbusiness
Amazon Q Business - Generative AI-powered assistant for business.
Import: import { qbusiness } from "@pulumi/aws";
Resources: Application, DataSource, Index, Plugin, Retriever, WebExperience
qldb
Amazon QLDB - Ledger database.
Import: import { qldb } from "@pulumi/aws";
Resources: Ledger, Stream
quicksight
Amazon QuickSight - Business intelligence service.
Import: import { quicksight } from "@pulumi/aws";
Resources: AccountSubscription, Analysis, Dashboard, DataSet, DataSource, Folder, FolderMembership, Group, GroupMembership, IamPolicyAssignment, Ingestion, IpRestriction, KeyRegistration, Namespace, RefreshSchedule, RoleCustomPermission, RoleMembership, Template, TemplateAlias, Theme, User, UserCustomPermission, VpcConnection
Data Sources: getDataSet(), getQuicksightAnalysis(), getQuicksightGroup(), getQuicksightUser(), getTheme()
ram
AWS Resource Access Manager - Share AWS resources.
Import: import { ram } from "@pulumi/aws";
Resources: PrincipalAssociation, ResourceAssociation, ResourceShare, ResourceShareAccepter, SharingWithOrganization
Data Sources: getResourceShare()
rbin
Amazon Recycle Bin - Deleted resource recovery.
Import: import { rbin } from "@pulumi/aws";
Resources: Rule
rds
Amazon RDS - Relational database service.
Import: import { rds } from "@pulumi/aws";
Resources: Certificate, Cluster, ClusterActivityStream, ClusterEndpoint, ClusterInstance, ClusterParameterGroup, ClusterRoleAssociation, ClusterSnapshot, ClusterSnapshotCopy, CustomDbEngineVersion, EventSubscription, ExportTask, GlobalCluster, Instance, InstanceAutomatedBackupsReplication, InstanceDesiredState, Integration, OptionGroup, ParameterGroup, Proxy, ProxyDefaultTargetGroup, ProxyEndpoint, ProxyTarget, ReservedInstance, RoleAssociation, ShardGroup, Snapshot, SnapshotCopy, SubnetGroup
Data Sources: 16 data sources for querying RDS instances, clusters, snapshots, and configuration
redshift
Amazon Redshift - Data warehouse.
Import: import { redshift } from "@pulumi/aws";
Resources: AuthenticationProfile, Cluster, ClusterIamRoles, ClusterSnapshot, DataShareAuthorization, DataShareConsumerAssociation, EndpointAccess, EndpointAuthorization, EventSubscription, HsmClientCertificate, HsmConfiguration, IdcApplication, Integration, Logging, ParameterGroup, Partner, ResourcePolicy, ScheduledAction, SnapshotCopy, SnapshotCopyGrant, SnapshotSchedule, SnapshotScheduleAssociation, SubnetGroup, UsageLimit
Data Sources: 6 data sources for Redshift information
redshiftdata
Amazon Redshift Data API.
Import: import { redshiftdata } from "@pulumi/aws";
Resources: Statement
redshiftserverless
Amazon Redshift Serverless.
Import: import { redshiftserverless } from "@pulumi/aws";
Resources: CustomDomainAssociation, EndpointAccess, Namespace, ResourcePolicy, Snapshot, UsageLimit, Workgroup
Data Sources: getCredentials(), getNamespace(), getWorkgroup()
rekognition
Amazon Rekognition - Image and video analysis.
Import: import { rekognition } from "@pulumi/aws";
Resources: Collection, Project, StreamProcessor
resiliencehub
AWS Resilience Hub - Application resilience management.
Import: import { resiliencehub } from "@pulumi/aws";
Resources: ResiliencyPolicy
resourceexplorer
AWS Resource Explorer - Resource search and discovery.
Import: import { resourceexplorer } from "@pulumi/aws";
Resources: Index, View
resourcegroups
AWS Resource Groups - Organize AWS resources.
Import: import { resourcegroups } from "@pulumi/aws";
Resources: Group, Resource
resourcegroupstaggingapi
AWS Resource Groups Tagging API.
Import: import { resourcegroupstaggingapi } from "@pulumi/aws";
Data Sources: getResources()
rolesanywhere
AWS IAM Roles Anywhere - Workload identity.
Import: import { rolesanywhere } from "@pulumi/aws";
Resources: Profile, TrustAnchor
route53
Amazon Route 53 - DNS and domain management.
Import: import { route53 } from "@pulumi/aws";
Resources: 29 resources including Zone, Record, HealthCheck, and resolver resources
Data Sources: 15 data sources for DNS and resolver information
route53domains
Amazon Route 53 Domains - Domain registration.
Import: import { route53domains } from "@pulumi/aws";
Resources: DelegationSignerRecord, Domain, RegisteredDomain
route53recoverycontrol
Amazon Route 53 Application Recovery Controller.
Import: import { route53recoverycontrol } from "@pulumi/aws";
Resources: Cluster, ControlPanel, RoutingControl, SafetyRule
route53recoveryreadiness
Amazon Route 53 Application Recovery Controller - Readiness checks.
Import: import { route53recoveryreadiness } from "@pulumi/aws";
Resources: Cell, ReadinessCheck, RecoveryGroup, ResourceSet
rum
Amazon CloudWatch RUM - Real user monitoring.
Import: import { rum } from "@pulumi/aws";
Resources: AppMonitor, MetricsDestination
S
s3
Amazon S3 - Simple Storage Service (Object storage).
Import: import { s3 } from "@pulumi/aws";
Resources: AccessPoint, AccountPublicAccessBlock, AnalyticsConfiguration, Bucket, BucketAbac, BucketAccelerateConfiguration, BucketAccelerateConfigurationV2, BucketAcl, BucketAclV2, BucketCorsConfiguration, BucketCorsConfigurationV2, BucketIntelligentTieringConfiguration, BucketLifecycleConfiguration, BucketLifecycleConfigurationV2, BucketLogging, BucketLoggingV2, BucketMetadataConfiguration, BucketMetric, BucketNotification, BucketObject, BucketObjectLockConfiguration, BucketObjectLockConfigurationV2, BucketObjectv2, BucketOwnershipControls, BucketPolicy, BucketPublicAccessBlock, BucketReplicationConfig, BucketRequestPaymentConfiguration, BucketRequestPaymentConfigurationV2, BucketServerSideEncryptionConfiguration, BucketServerSideEncryptionConfigurationV2, BucketV2, BucketVersioning, BucketVersioningV2, BucketWebsiteConfiguration, BucketWebsiteConfigurationV2, DirectoryBucket, Inventory, ObjectCopy, VectorsIndex, VectorsVectorBucket, VectorsVectorBucketPolicy
Data Sources: 10 data sources for querying S3 buckets, objects, and access points
s3control
Amazon S3 Control - Advanced S3 features.
Import: import { s3control } from "@pulumi/aws";
Resources: AccessGrant, AccessGrantsInstance, AccessGrantsInstanceResourcePolicy, AccessGrantsLocation, AccessPointPolicy, Bucket, BucketLifecycleConfiguration, BucketPolicy, DirectoryBucketAccessPointScope, MultiRegionAccessPoint, MultiRegionAccessPointPolicy, ObjectLambdaAccessPoint, ObjectLambdaAccessPointPolicy, StorageLensConfiguration
Data Sources: getMultiRegionAccessPoint()
s3outposts
Amazon S3 on Outposts.
Import: import { s3outposts } from "@pulumi/aws";
Resources: Endpoint
s3tables
Amazon S3 Tables (Apache Iceberg tables).
Import: import { s3tables } from "@pulumi/aws";
Resources: Namespace, Table, TableBucket, TableBucketPolicy, TableBucketReplication, TablePolicy, TableReplication
sagemaker
Amazon SageMaker - Machine learning platform.
Import: import { sagemaker } from "@pulumi/aws";
Resources: App, AppImageConfig, CodeRepository, DataQualityJobDefinition, Device, DeviceFleet, Domain, Endpoint, EndpointConfiguration, FeatureGroup, FlowDefinition, Hub, HumanTaskUI, Image, ImageVersion, MlflowTrackingServer, Model, ModelPackageGroup, ModelPackageGroupPolicy, MonitoringSchedule, NotebookInstance, NotebookInstanceLifecycleConfiguration, Pipeline, Project, ServicecatalogPortfolioStatus, Space, StudioLifecycleConfig, UserProfile, Workforce, Workteam
Data Sources: getPrebuiltEcrImage()
scheduler
Amazon EventBridge Scheduler - Scheduled tasks.
Import: import { scheduler } from "@pulumi/aws";
Resources: Schedule, ScheduleGroup
schemas
Amazon EventBridge Schema Registry.
Import: import { schemas } from "@pulumi/aws";
Resources: Discoverer, Registry, RegistryPolicy, Schema
secretsmanager
AWS Secrets Manager - Secrets storage and rotation.
Import: import { secretsmanager } from "@pulumi/aws";
Resources: Secret, SecretPolicy, SecretRotation, SecretVersion, Tag
Data Sources: getRandomPassword(), getSecret(), getSecretRotation(), getSecretVersion(), getSecretVersions(), getSecrets()
securityhub
AWS Security Hub - Security posture management.
Import: import { securityhub } from "@pulumi/aws";
Resources: Account, ActionTarget, AutomationRule, ConfigurationPolicy, ConfigurationPolicyAssociation, FindingAggregator, Insight, InviteAccepter, Member, OrganizationAdminAccount, OrganizationConfiguration, ProductSubscription, StandardsControl, StandardsControlAssociation, StandardsSubscription
Data Sources: getStandardsControlAssociations()
securitylake
Amazon Security Lake - Security data lake.
Import: import { securitylake } from "@pulumi/aws";
Resources: AwsLogSource, CustomLogSource, DataLake, Subscriber, SubscriberNotification
serverlessrepository
AWS Serverless Application Repository.
Import: import { serverlessrepository } from "@pulumi/aws";
Resources: CloudFormationStack
Data Sources: getApplication()
servicecatalog
AWS Service Catalog - IT service management.
Import: import { servicecatalog } from "@pulumi/aws";
Resources: AppregistryApplication, AppregistryAttributeGroup, AppregistryAttributeGroupAssociation, BudgetResourceAssociation, Constraint, OrganizationsAccess, Portfolio, PortfolioShare, PrincipalPortfolioAssociation, Product, ProductPortfolioAssociation, ProvisionedProduct, ProvisioningArtifact, ServiceAction, TagOption, TagOptionResourceAssociation
Data Sources: 9 data sources for Service Catalog information
servicediscovery
AWS Cloud Map - Service discovery.
Import: import { servicediscovery } from "@pulumi/aws";
Resources: HttpNamespace, Instance, PrivateDnsNamespace, PublicDnsNamespace, Service
Data Sources: getDnsNamespace(), getHttpNamespace(), getService()
servicequotas
AWS Service Quotas - Service limit management.
Import: import { servicequotas } from "@pulumi/aws";
Resources: ServiceQuota, Template, TemplateAssociation
Data Sources: getService(), getServiceQuota(), getTemplates()
ses
Amazon SES - Simple Email Service.
Import: import { ses } from "@pulumi/aws";
Resources: ActiveReceiptRuleSet, ConfigurationSet, DomainDkim, DomainIdentity, DomainIdentityVerification, EmailIdentity, EventDestination, IdentityNotificationTopic, IdentityPolicy, MailFrom, ReceiptFilter, ReceiptRule, ReceiptRuleSet, Template
Data Sources: getActiveReceiptRuleSet(), getDomainIdentity(), getEmailIdentity()
sesv2
Amazon SES v2 - Simple Email Service v2.
Import: import { sesv2 } from "@pulumi/aws";
Resources: AccountSuppressionAttributes, AccountVdmAttributes, ConfigurationSet, ConfigurationSetEventDestination, ContactList, DedicatedIpAssignment, DedicatedIpPool, EmailIdentity, EmailIdentityFeedbackAttributes, EmailIdentityMailFromAttributes, EmailIdentityPolicy, Tenant
Data Sources: getConfigurationSet(), getDedicatedIpPool(), getEmailIdentity(), getEmailIdentityMailFromAttributes()
sfn
AWS Step Functions - Workflow orchestration.
Import: import { sfn } from "@pulumi/aws";
Resources: Activity, Alias, StateMachine
Data Sources: getActivity(), getAlias(), getStateMachine(), getStateMachineVersions()
shield
AWS Shield - DDoS protection.
Import: import { shield } from "@pulumi/aws";
Resources: ApplicationLayerAutomaticResponse, DrtAccessLogBucketAssociation, DrtAccessRoleArnAssociation, ProactiveEngagement, Protection, ProtectionGroup, ProtectionHealthCheckAssociation, Subscription
Data Sources: getProtection()
signer
AWS Signer - Code signing.
Import: import { signer } from "@pulumi/aws";
Resources: SigningJob, SigningProfile, SigningProfilePermission
Data Sources: getSigningJob(), getSigningProfile()
sns
Amazon SNS - Simple Notification Service (Pub/sub messaging).
Import: import { sns } from "@pulumi/aws";
Resources: DataProtectionPolicy, PlatformApplication, SmsPreferences, Topic, TopicPolicy, TopicSubscription
Data Sources: getTopic()
sqs
Amazon SQS - Simple Queue Service (Message queuing).
Import: import { sqs } from "@pulumi/aws";
Resources: Queue, QueuePolicy, RedriveAllowPolicy, RedrivePolicy
Data Sources: getQueue(), getQueues()
ssm
AWS Systems Manager - Operations management.
Import: import { ssm } from "@pulumi/aws";
Resources: Activation, Association, ContactsRotation, DefaultPatchBaseline, Document, MaintenanceWindow, MaintenanceWindowTarget, MaintenanceWindowTask, Parameter, PatchBaseline, PatchGroup, QuicksetupConfigurationManager, ResourceDataSync, ServiceSetting
Data Sources: 8 data sources for SSM information
ssmcontacts
AWS Systems Manager Incident Manager Contacts.
Import: import { ssmcontacts } from "@pulumi/aws";
Resources: Contact, ContactChannel, Plan
Data Sources: getContact(), getContactChannel(), getPlan()
ssmincidents
AWS Systems Manager Incident Manager.
Import: import { ssmincidents } from "@pulumi/aws";
Resources: ReplicationSet, ResponsePlan
Data Sources: getReplicationSet(), getResponsePlan()
ssoadmin
AWS IAM Identity Center (SSO) Administration.
Import: import { ssoadmin } from "@pulumi/aws";
Resources: AccountAssignment, Application, ApplicationAccessScope, ApplicationAssignment, ApplicationAssignmentConfiguration, CustomerManagedPolicyAttachment, InstanceAccessControlAttributes, ManagedPolicyAttachment, PermissionSet, PermissionSetInlinePolicy, PermissionsBoundaryAttachment, TrustedTokenIssuer
Data Sources: 7 data sources for SSO information
storagegateway
AWS Storage Gateway - Hybrid cloud storage.
Import: import { storagegateway } from "@pulumi/aws";
Resources: Cache, CachesIscsiVolume, FileSystemAssociation, Gateway, NfsFileShare, SmbFileShare, StoredIscsiVolume, TapePool, UploadBuffer, WorkingStorage
Data Sources: getLocalDisk()
swf
Amazon SWF - Simple Workflow Service.
Import: import { swf } from "@pulumi/aws";
Resources: Domain
synthetics
Amazon CloudWatch Synthetics - Monitoring with canaries.
Import: import { synthetics } from "@pulumi/aws";
Resources: Canary, Group, GroupAssociation
Data Sources: getRuntimeVersion(), getRuntimeVersions()
T-V
timestreaminfluxdb
Amazon Timestream for InfluxDB.
Import: import { timestreaminfluxdb } from "@pulumi/aws";
Resources: DbCluster, DbInstance
timestreamquery
Amazon Timestream - Query service.
Import: import { timestreamquery } from "@pulumi/aws";
Resources: ScheduledQuery
timestreamwrite
Amazon Timestream - Write service.
Import: import { timestreamwrite } from "@pulumi/aws";
Resources: Database, Table
Data Sources: getDatabase(), getTable()
transcribe
Amazon Transcribe - Speech-to-text service.
Import: import { transcribe } from "@pulumi/aws";
Resources: LanguageModel, MedicalVocabulary, Vocabulary, VocabularyFilter
transfer
AWS Transfer Family - File transfer service (SFTP, FTPS, FTP).
Import: import { transfer } from "@pulumi/aws";
Resources: Access, Agreement, Certificate, Connector, Profile, Server, SshKey, Tag, User, Workflow
Data Sources: getAgreement(), getConnector(), getProfile(), getServer()
verifiedaccess
AWS Verified Access - Zero-trust network access.
Import: import { verifiedaccess } from "@pulumi/aws";
Resources: Endpoint, Group, Instance, InstanceLoggingConfiguration, InstanceTrustProviderAttachment, TrustProvider
Data Sources: getEndpoint(), getGroup(), getInstance(), getInstanceLoggingConfiguration(), getTrustProvider()
verifiedpermissions
Amazon Verified Permissions - Application authorization.
Import: import { verifiedpermissions } from "@pulumi/aws";
Resources: IdentitySource, Policy, PolicyStore, PolicyTemplate, Schema
Data Sources: getPolicyStore()
vpc
Amazon VPC - Virtual Private Cloud resources (part of ec2 module).
See VPC Documentation and EC2 Documentation
vpclattice
Amazon VPC Lattice - Service-to-service connectivity.
Import: import { vpclattice } from "@pulumi/aws";
Resources: AccessLogSubscription, AuthPolicy, Listener, ListenerRule, ResourceConfiguration, ResourceGateway, Service, ServiceNetwork, ServiceNetworkResourceAssociation, ServiceNetworkServiceAssociation, ServiceNetworkVpcAssociation, TargetGroup, TargetGroupAttachment
Data Sources: getAuthPolicy(), getListener(), getResourceConfiguration(), getResourceGateway(), getService(), getServiceNetwork()
vpn
AWS VPN - Virtual Private Network (part of ec2 module).
W-X
waf
AWS WAF Classic - Web Application Firewall.
Import: import { waf } from "@pulumi/aws";
Resources: ByteMatchSet, GeoMatchSet, IpSet, RateBasedRule, RegexMatchSet, RegexPatternSet, Rule, RuleGroup, SizeConstraintSet, SqlInjectionMatchSet, WebAcl, XssMatchSet
Data Sources: getIpSet(), getRate Based Rule(), getRule(), getSubscribedRuleGroup(), getWebAcl()
wafregional
AWS WAF Regional - Regional Web Application Firewall.
Import: import { wafregional } from "@pulumi/aws";
Resources: ByteMatchSet, GeoMatchSet, IpSet, RateBasedRule, RegexMatchSet, RegexPatternSet, Rule, RuleGroup, SizeConstraintSet, SqlInjectionMatchSet, WebAcl, WebAclAssociation, XssMatchSet
Data Sources: getIpSet(), getRate BasedRule(), getRule(), getSubscribedRuleGroup(), getWebAcl()
wafv2
AWS WAF v2 - Web Application Firewall v2.
Import: import { wafv2 } from "@pulumi/aws";
Resources: IpSet, RegexPatternSet, RuleGroup, WebAcl, WebAclAssociation, WebAclLoggingConfiguration
Data Sources: getIpSet(), getRegexPatternSet(), getRuleGroup(), getWebAcl()
worklink
Amazon WorkLink (deprecated) - Secure mobile access.
Import: import { worklink } from "@pulumi/aws";
Resources: Fleet, WebsiteCertificateAuthorityAssociation
workspaces
Amazon WorkSpaces - Virtual desktops.
Import: import { workspaces } from "@pulumi/aws";
Resources: ConnectionAlias, Directory, IpGroup, Workspace
Data Sources: getBundle(), getDirectory(), getImage(), getWorkspace()
workspacesweb
Amazon WorkSpaces Web - Browser-based secure access.
Import: import { workspacesweb } from "@pulumi/aws";
Resources: BrowserSettings, IdentityProvider, IpAccessSettings, NetworkSettings, Portal, TrustStore, UserAccessLoggingSettings, UserSettings
xray
AWS X-Ray - Distributed tracing.
Import: import { xray } from "@pulumi/aws";
Resources: EncryptionConfig, Group, SamplingRule
Data Sources: getEncryptionConfig()
Install with Tessl CLI
npx tessl i tessl/npm-pulumi--aws@7.16.0