An Amazon Resource Name uniquely identifies an AWS resource. The format is arn: : : : : , where the resource portion varies by service.

Cloud

AWS ARN Parser

Paste any AWS Amazon Resource Name (ARN) to see its partition, service, region, account ID, resource type, and resource ID at a glance. Malformed ARNs are flagged and, where possible, a matching AWS console URL is generated.

Tool Summary Answer Block

This tool accepts structured input and returns deterministic output in the browser with no server upload.

Tool name: AWS ARN Parser
Input intent: Provide source content to transform, validate, or analyze.
Output intent: Receive normalized output suitable for copy, reuse, or debugging.
Example input: arn:aws:lambda:us-east-1:123456789012:function:processOrders:PROD
Example output: service=lambda · region=us-east-1 · function "processOrders:PROD"

Local processing / privacy notice

Inputs are processed in your browser session.
We do not send raw input/output values to our analytics endpoint.
Use reset/clear actions when working with confidential data.

The ARN is parsed entirely in your browser.

ARNDrop file

Examples:

Partition: aws
Service: lambda
Region: us-east-1
Account ID: 123456789012
Resource type (colon): function
Resource ID: processOrders:PROD
Console: https://console.aws.amazon.com/lambda/home?region=us-east-1#/functions/processOrders%3APROD

ARN structure reference

arn:<partition>:<service>:<region>:<account-id>:<resource>
                                            └─ resource-type (: or /) + resource-id

partition is usually aws, but may be aws-cn or aws-us-gov. Services like s3, iam, and cloudfront are global and omit region / account.

Tool Introduction

Tool Overview

Every addressable AWS resource has an ARN following the format arn:partition:service:region:account-id:resource. Services use subtle variations: S3 object ARNs skip region and account, IAM uses a slash delimiter on the resource segment, and Lambda packs the function name plus optional version after a colon. Getting these segments right matters for IAM policies, CLI commands, and CloudFormation references — this tool gives you a one-shot breakdown without having to remember service-specific quirks.

Use Cases

Decode an ARN you see in a CloudTrail log, alarm, or IAM policy
Verify an ARN is well-formed before pasting it into a CloudFormation template
Copy the service, region, or account ID out of a long ARN
Open the matching AWS console page for the resource

Input/Output Examples

Input Intent

arn:aws:lambda:us-east-1:123456789012:function:processOrders:PROD

Output Intent

service=lambda · region=us-east-1 · function "processOrders:PROD"

Input Intent

arn:aws:iam::123456789012:role/CodeBuildServiceRole

Output Intent

service=iam · role "CodeBuildServiceRole" · region is empty (IAM is global)

FAQ

What is an AWS ARN?+

An Amazon Resource Name uniquely identifies an AWS resource. The format is arn:<partition>:<service>:<region>:<account-id>:<resource>, where the resource portion varies by service.

Why is the region or account empty?+

Some services (IAM, S3, CloudFront, Route 53, Organizations) are global or their ARN format intentionally omits those segments.

What are partitions?+

AWS has multiple isolated partitions: aws (commercial), aws-cn (China), aws-us-gov (GovCloud), and aws-iso / aws-iso-b (intelligence community). ARNs across partitions are distinct even if the resource name matches.

Is my ARN sent to a server?+

No. Parsing happens entirely in your browser.