aws

Cloud services from AWS.

Provider Summary (v24.05.00228)

total services: 220
total methods: 7,597

total resources: 2,269
total selectable resources: 2,161

See also:
[SHOW] [DESCRIBE] [REGISTRY]

---

Installation

To pull the latest version of the aws provider, run the following command:

REGISTRY PULL aws;

To view previous provider versions or to pull a specific provider version, see here.

Authentication

The following system environment variables are used for authentication by default:

• AWS_ACCESS_KEY_ID - AWS Access Key ID (see How to Create AWS Credentials)
• AWS_SECRET_ACCESS_KEY - AWS Secret Access Key (see How to Create AWS Credentials)
• AWS_SESSION_TOKEN - [OPTIONAL: only required if using aws sts assume-role] AWS Session Token (see Temporary security credentials in IAM)

These variables are sourced at runtime (from the local machine or as CI variables/secrets).

Using different environment variables

To use different environment variables (instead of the defaults), use the --auth flag of the stackql program. For example:

AUTH='{ "aws": { "type": "aws_signing_v4", "keyIDenvvar": "YOUR_ACCESS_KEY_ID_VAR", "credentialsenvvar": "YOUR_SECRET_KEY_VAR" }}'
stackql shell --auth="${AUTH}"

or using PowerShell:

$Auth = "{ 'aws': { 'type': 'aws_signing_v4',  'keyIDenvvar': 'YOUR_ACCESS_KEY_ID_VAR', 'credentialsenvvar': 'YOUR_SECRET_KEY_VAR' }}"
stackql.exe shell --auth=$Auth

Server Parameters

The following parameter is required for the aws provider:

• region - AWS region (e.g. us-east-1)

This parameter must be supplied to the WHERE clause of each SELECT statement.

Services

accessanalyzer
acmpca
amplify
amplifyuibuilder
apigateway
apigatewayv2
appconfig
appflow
appintegrations
applicationautoscaling
applicationinsights
apprunner
appstream
appsync
aps
arczonalshift
athena
auditmanager
autoscaling
b2bi
backup
backupgateway
batch
bcmdataexports
bedrock
billingconductor
budgets
cassandra
ce
certificatemanager
chatbot
cleanrooms
cleanroomsml
cloud_control
cloudformation
cloudfront
cloudhsm
cloudtrail
cloudwatch
cloudwatch_api
codeartifact
codebuild
codeconnections
codedeploy
codeguruprofiler
codegurureviewer
codepipeline
codestarconnections
codestarnotifications
cognito
comprehend
config
connect
connectcampaigns
controltower
cur
customerprofiles
databrew
datapipeline
datasync
datazone
deadline
detective
devopsguru
directoryservice
dms
docdbelastic
dynamodb
ec2
ec2_api
ecr
ecs
efs
eks
elasticache
elasticbeanstalk
elasticloadbalancingv2
emr
emrcontainers
emrserverless
entityresolution
events
eventschemas
evidently
finspace
fis
fms
forecast
frauddetector
fsx
gamelift
globalaccelerator
glue
grafana
greengrassv2
groundstation
guardduty
healthimaging
healthlake
iam
iam_api
identitystore
imagebuilder
inspector
inspectorv2
internetmonitor
iot
iotanalytics
iotcoredeviceadvisor
iotevents

iotfleethub
iotfleetwise
iotsitewise
iottwinmaker
iotwireless
ivs
ivschat
kafkaconnect
kendra
kendraranking
kinesis
kinesisanalyticsv2
kinesisfirehose
kinesisvideo
kms
lakeformation
lambda
lex
licensemanager
lightsail
location
logs
lookoutequipment
lookoutmetrics
lookoutvision
m2
macie
managedblockchain
mediaconnect
medialive
mediapackage
mediapackagev2
mediatailor
memorydb
msk
mwaa
neptune
neptunegraph
networkfirewall
networkmanager
nimblestudio
oam
omics
opensearchserverless
opensearchservice
opsworkscm
organizations
osis
panorama
pcaconnectorad
personalize
pinpoint
pipes
proton
qldb
quicksight
ram
rds
redshift
redshiftserverless
refactorspaces
rekognition
resiliencehub
resourceexplorer2
resourcegroups
robomaker
rolesanywhere
route53
route53recoverycontrol
route53recoveryreadiness
route53resolver
rum
s3
s3_api
s3express
s3objectlambda
s3outposts
sagemaker
scheduler
secretsmanager
securityhub
securitylake
servicecatalog
servicecatalogappregistry
ses
shield
signer
simspaceweaver
sns
sqs
ssm
ssmcontacts
ssmincidents
sso
stepfunctions
supportapp
synthetics
systemsmanagersap
timestream
transfer
transfer_api
verifiedpermissions
voiceid
vpclattice
wafv2
wisdom
workspaces
workspacesthinclient
workspacesweb
xray