Simple Notification Service (SNS)
Kinesis + MQ
Databases & Analytics
IAM for S3 Resources

Bucket Name and Object Key Specified

  • The following ARN identifies the /developers/design_info.doc object in the examplebucket bucket.
    • arn:aws:s3:::examplebucket/developers/design_info.doc


  • You can use wildcards as part of the resource ARN.
  • You can use wildcard characters (* and ?) within any ARN segment (the parts separated by colons).

Examples of Wildcards

  • The following ARN uses the wildcard * in the relative-ID part of the ARN to identify all objects in the examplebucket bucket.
    • arn:aws:s3:::examplebucket/*
  • The following ARN uses * to indicate all S3 resources (all S3 buckets and objects in your account).
    • arn:aws:s3:::*
  • The following ARN uses both wildcards, * and ?, in the relative-ID part. It identifies all objects in buckets such as example1bucket, example2bucket, example3bucket, and so on.
    • arn:aws:s3:::example?bucket/*