AWS Resource Groups - docs.aws.amazon.com

1 AWS Resource GroupsUser GuideAWS Resource Groups User GuideAWS Resource Groups : User GuideCopyright 2020 Amazon Web Services, Inc. and/or its affiliates. All rights 's trademarks and trade dress may not be used in connection with any product or service that is notAmazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages ordiscredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who mayor may not be affiliated with, connected to, or sponsored by Resource Groups User GuideTable of ContentsWhat is AWS Resource Groups ? .. 1 What are Resource Groups ? .. 1 Use cases for Resource Groups .. 2 AWS Resource Groups and permissions .. 2 AWS Resource Groups resources.

2 3 How tagging works .. 3 AWS services that work with AWS Resource Groups .. 3 Supported resources .. 5 Amazon API Gateway .. 6 Amazon AppStream .. 6 AWS AppSync .. 6 AWS Certificate Manager .. 7 AWS Certificate Manager Private Certificate Authority .. 7 AWS Cloud9 .. 7 AWS CloudFormation .. 7 Amazon CloudFront .. 7 AWS CloudTrail .. 8 Amazon CloudWatch .. 8 Amazon CloudWatch Logs .. 8 AWS CodeBuild .. 9 AWS CodeCommit .. 9 AWS CodeDeploy .. 9 AWS CodePipeline .. 9 Amazon Cognito .. 10 Amazon Comprehend .. 10 AWS Config .. 10 AWS Data Exchange .. 10 AWS Data Pipeline .. 11 AWS Database Migration Service .. 11 Amazon DynamoDB .. 11 Amazon EMR .. 11 Amazon ElastiCache .. 12 AWS Elastic Beanstalk .. 12 Amazon Elastic Compute Cloud (Amazon EC2).

3 12 Amazon Elastic Container Registry .. 13 Amazon Elastic Container Service .. 14 Amazon Elastic File System .. 14 Elastic Load 14 Amazon Elasticsearch Service .. 14 Amazon CloudWatch Events .. 15 Amazon FSx .. 15 AWS Glue .. 15 AWS Identity and Access Management .. 15 Amazon Inspector .. 16 AWS IoT .. 16 AWS IoT Analytics .. 16 AWS IoT Events .. 16 AWS IoT Greengrass .. 17 AWS Key Management Service .. 17 Amazon Kinesis .. 17 Amazon Kinesis Data Analytics .. 18 Amazon Kinesis Data Firehose .. 18 AWS Lambda .. 18 Amazon MQ .. 18iiiAWS Resource Groups User GuideAmazon Managed Streaming for Apache Kafka .. 19 AWS OpsWorks .. 19 AWS Organizations .. 19 Amazon Quantum Ledger Database (Amazon QLDB) .. 19 Amazon Redshift .. 20 Amazon Relational Database Service (Amazon RDS).

4 20 AWS Resource Access Manager .. 21 AWS Resource Groups .. 21 AWS Robomaker .. 21 Amazon Route 53 .. 21 Amazon Route 53 Resolver .. 22 Amazon S3 Glacier .. 22 Amazon SageMaker .. 23 AWS Secrets Manager .. 23 AWS Service Catalog .. 23 Amazon Simple Notification Service .. 24 Amazon Simple Queue Service .. 24 Amazon Simple Storage Service (Amazon S3) .. 24 AWS Step Functions .. 24 AWS Storage Gateway .. 25 AWS Systems Manager .. 25 Amazon WorkSpaces .. 25 Getting started .. 25 Prerequisites .. 26 Create Groups .. 30 Build a query and create a group (console) .. 30 Build a query and create a group (AWS CLI) .. 34 Update Groups .. 35 Update Groups (console) .. 36 Update Groups (AWS CLI) .. 39 Delete Groups .. 40 Tag Editor .. 41 Find resources to tag.

5 42 Manage 46 Troubleshooting tag changes .. 52 Tag policies .. 53 Prerequisites and permissions .. 53 Evaluating compliance for an account .. 55 Evaluating organization-wide compliance .. 57 Security .. 58 Data Protection .. 59 Identity and Access Management .. 60 Logging and 70 Compliance Validation .. 72 Resilience .. 73 Infrastructure Security .. 73 Security Best Practices .. 74 Document history .. 75 Earlier 78 AWS glossary .. 79ivAWS Resource Groups User GuideWhat are Resource Groups ?What is AWS Resource Groups ?You can use Resource Groups to organize your AWS resources. Resource Groups make it easier to manageand automate tasks on large numbers of resources at one time. This guide shows you how to create andmanage Resource Groups in AWS Resource can access Resource Groups through any of the following entry points.

6 On the navigation bar of the AWS Management Console. In the AWS Systems Manager console, from the left navigation pane entry for Resource Groups . By using the Resource Groups API, in AWS CLI commands or AWS SDK programming work with Resource Groups on the AWS Management Console home1. Sign in to the AWS Management On the navigation bar, choose Resource Choose a Resource group from Saved Groups , or choose Create a are Resource Groups ?In AWS, a Resource is an entity that you can work with. Examples include an Amazon EC2 instance, anAWS CloudFormation stack, or an Amazon S3 bucket. If you work with multiple resources, you might findit useful to manage them as a group rather than move from one AWS service to another for each task. Ifyou manage large numbers of related resources, such as EC2 instances that make up an application layer,you likely need to perform bulk actions on these resources at one time.

7 Examples of bulk actions include: Applying updates or security patches. Upgrading applications. Opening or closing ports to network traffic. Collecting specific log and monitoring data from your fleet of Resource group is a collection of AWS resources that are all in the same AWS region, and that matchcriteria provided in a query. In Resource Groups , there are two types of queries on which you can build agroup. Both query types include resources that are specified in the format AWS:: Resource Groups User GuideUse cases for Resource Groups Tag-basedTag-based queries include lists of resources and tags. Tags are keys that help identify and sort yourresources within your organization. Optionally, tags include values for not store personally identifiable information (PII) or other confidential or sensitiveinformation in tags.

8 We use tags to provide you with billing and administration services. Tagsare not intended to be used for private or sensitive data. AWS CloudFormation stack-basedIn an AWS CloudFormation stack-based query, you choose an AWS CloudFormation stack in youraccount in the current region, and then choose Resource types within the stack that you want to be inthe group . You can base your query on only one AWS CloudFormation Groups can be nested; a Resource group can contain existing Resource Groups in the same cases for Resource groupsBy default, the AWS Management Console is organized by AWS service. But with Resource Groups , youcan create a custom console that organizes and consolidates information based on criteria specified intags, or the resources in an AWS CloudFormation stack.

9 The following list describes some of the cases inwhich Resource grouping can help organize your resources. An application that has different phases, such as development, staging, and production. Projects managed by multiple departments or individuals. A set of AWS resources that you use together for a common project or that you want to manage ormonitor as a group . A set of resources related to applications that run on a specific platform, such as Android or example, you are developing a web application, and you are maintaining separate sets of resourcesfor your alpha, beta, and release stages. Each version runs on Amazon EC2 with an Amazon Elastic BlockStore storage volume. You use Elastic Load Balancing to manage traffic and Route 53 to manage yourdomain.

10 Without Resource Groups , you might have to access multiple consoles just to check the status ofyour services or modify the settings for one version of your Resource Groups , you use a single page to view and manage your resources. For example, let ssay you use the tool to create a Resource group for each version alpha, beta, and release of yourapplication. To check your resources for the alpha version of your application, open your Resource view the consolidated information on your Resource group page. To modify a specific Resource ,choose the Resource 's links on your Resource group page to access the service console that has thesettings that you Resource Groups and permissionsResource Groups feature permissions are at the account level. As long as users who are sharing youraccount have the correct IAM permissions, they can work with Resource Groups that you create.