Académique Documents
Professionnel Documents
Culture Documents
theburningmonk.com/cloudformation-ref-and-getatt-cheatsheet
Here’s a cheatsheet of CloudFormation resource types and their corresponding Ref and Fn::GetAtt outputs in one place.
Alexa::ASK::Skill Id
AWS::AmazonMQ::ConfigurationAssociation Id
AWS::ApiGateway::Account Id
AWS::ApiGateway::ApiKey Id
AWS::ApiGateway::Authorizer Id
AWS::ApiGateway::BasePathMapping –
AWS::ApiGateway::ClientCertificate Name
AWS::ApiGateway::Deployment Id
AWS::ApiGateway::DocumentationPart Id
AWS::ApiGateway::DocumentationVersion –
AWS::ApiGateway::GatewayResponse –
AWS::ApiGateway::Method Id
AWS::ApiGateway::Model Name
AWS::ApiGateway::RequestValidator Id
AWS::ApiGateway::Resource Id
AWS::ApiGateway::RestApi Id RootResourceId
AWS::ApiGateway::Stage Name
AWS::ApiGateway::UsagePlan Id
AWS::ApiGateway::UsagePlanKey –
AWS::ApiGateway::VpcLink Id
AWS::ApiGatewayV2::Api Id
AWS::ApiGatewayV2::ApiMapping Id
AWS::ApiGatewayV2::Authorizer Id
AWS::ApiGatewayV2::Deployment Id
1/10
AWS::ApiGatewayV2::DomainName DomainName RegionalDomainName,
RegionalHostedZoneId
AWS::ApiGatewayV2::Integration Id
AWS::ApiGatewayV2::IntegrationResponse Id
AWS::ApiGatewayV2::Model Id
AWS::ApiGatewayV2::Route Id
AWS::ApiGatewayV2::RouteResponse Id
AWS::ApiGatewayV2::Stage Name
AWS::ApplicationAutoScaling::ScalableTarget Id
AWS::ApplicationAutoScaling::ScalingPolicy Arn
AWS::AppSync::GraphQLSchema Id
AWS::Athena::NamedQuery Name
AWS::AutoScaling::AutoScalingGroup Name
AWS::AutoScaling::LaunchConfiguration Name
AWS::AutoScaling::LifecycleHook Name
AWS::AutoScaling::ScalingPolicy Arn
AWS::AutoScaling::ScheduledAction Name
AWS::AutoScalingPlans::ScalingPlan Arn
AWS::Batch::ComputeEnvironment Arn
AWS::Batch::JobDefinition Arn
AWS::Batch::JobQueue Arn
AWS::Budgets::Budget Name
AWS::CertificateManager::Certificate Arn
2/10
AWS::CloudFormation::CustomResource –
AWS::CloudFormation::Macro Name
AWS::CloudFormation::Stack Id
AWS::CloudFormation::WaitConditionHandle –
AWS::CloudFront::Distribution Id DomainName
AWS::CloudFront::StreamingDistribution Id DomainName
AWS::CloudWatch::AnomalyDetector –
AWS::CloudWatch::Dashboard Name
AWS::CodeDeploy::Application Name
AWS::CodeDeploy::DeploymentConfig Name
AWS::CodeDeploy::DeploymentGroup Name
AWS::CodePipeline::CustomActionType Name
AWS::Cognito::IdentityPool Id Name
AWS::Cognito::IdentityPoolRoleAttachment Id
AWS::Cognito::UserPoolClient Id
AWS::Cognito::UserPoolGroup Name
AWS::Cognito::UserPoolUser Name
AWS::Cognito::UserPoolUserToGroupAttachment Id
AWS::Config::AggregationAuthorization Arn
AWS::Config::ConfigurationAggregator Name
AWS::Config::ConfigurationRecorder Name
AWS::Config::DeliveryChannel Name
AWS::Config::RemediationConfiguration RemediationAction
AWS::DataPipeline::Pipeline Id
AWS::DAX::ParameterGroup Name
AWS::DAX::SubnetGroup Name
AWS::DLM::LifecyclePolicy Id Arn
AWS::DMS::Certificate Arn
3/10
AWS::DMS::Endpoint Arn ExternalId
AWS::DMS::EventSubscription Name
AWS::DMS::ReplicationSubnetGroup Name
AWS::DMS::ReplicationTask Arn
AWS::DocDB::DBClusterParameterGroup Name
AWS::DocDB::DBSubnetGroup Name
AWS::EC2::CapacityReservation Id AvailabilityZone,
AvailableInstanceCount, InstanceType,
Tenancy, TotalInstanceCount
AWS::EC2::ClientVpnAuthorizationRule –
AWS::EC2::ClientVpnEndpoint Id
AWS::EC2::ClientVpnRoute –
AWS::EC2::ClientVpnTargetNetworkAssociation Id
AWS::EC2::CustomerGateway Id
AWS::EC2::DHCPOptions Name
AWS::EC2::EC2Fleet Id
AWS::EC2::EgressOnlyInternetGateway Id
AWS::EC2::EIPAssociation Name
AWS::EC2::FlowLog Id
AWS::EC2::Host Id
AWS::EC2::InternetGateway Name
AWS::EC2::LaunchTemplate Id DefaultVersionNumber,
LatestVersionNumber
AWS::EC2::NatGateway Name
AWS::EC2::NetworkAcl Name
AWS::EC2::NetworkAclEntry Name
AWS::EC2::NetworkInterfaceAttachment Name
AWS::EC2::NetworkInterfacePermission Name
AWS::EC2::PlacementGroup Name
AWS::EC2::Route Id
AWS::EC2::RouteTable Id
4/10
AWS::EC2::SecurityGroup Name GroupId, VpcId
AWS::EC2::SecurityGroupEgress RuleName
AWS::EC2::SecurityGroupIngress –
AWS::EC2::SpotFleet Id
AWS::EC2::SubnetCidrBlock CidrBlock
AWS::EC2::SubnetNetworkAclAssociation Id AssociationId
AWS::EC2::SubnetRouteTableAssociation Id
AWS::EC2::TransitGateway Id
AWS::EC2::TransitGatewayAttachment Name
AWS::EC2::TransitGatewayRoute Name
AWS::EC2::TransitGatewayRouteTable Name
AWS::EC2::TransitGatewayRouteTableAssociation Id
AWS::EC2::TransitGatewayRouteTablePropagation RouteTableId
AWS::EC2::Volume Name
AWS::EC2::VolumeAttachment –
AWS::EC2::VPCCidrBlock CidrBlock
AWS::EC2::VPCDHCPOptionsAssociation Id
AWS::EC2::VPCEndpointConnectionNotification Id
AWS::EC2::VPCEndpointService Id
AWS::EC2::VPCEndpointServicePermissions Id
AWS::EC2::VPCGatewayAttachment Id
AWS::EC2::VPCPeeringConnection Id
AWS::EC2::VPNConnection Id
AWS::EC2::VPNConnectionRoute Id
AWS::EC2::VPNGateway Id
AWS::EC2::VPNGatewayRoutePropagation VpnGatewayId
AWS::ECS::TaskDefinition Arn
AWS::EFS::FileSystem Id
AWS::EFS::MountTarget Id IpAddress
5/10
AWS::ElastiCache::CacheCluster Name ConfigurationEndpoint.Address,
ConfigurationEndpoint.Port,
RedisEndpoint.Address,
RedisEndpoint.Port
AWS::ElastiCache::ParameterGroup Name
AWS::ElastiCache::SecurityGroup Name
AWS::ElastiCache::SecurityGroupIngress Name
AWS::ElastiCache::SubnetGroup Name
AWS::ElasticBeanstalk::Application Name
AWS::ElasticBeanstalk::ApplicationVersion Name
AWS::ElasticBeanstalk::ConfigurationTemplate Name
AWS::ElasticLoadBalancingV2::Listener Arn
AWS::ElasticLoadBalancingV2::ListenerCertificate –
AWS::ElasticLoadBalancingV2::ListenerRule Arn
AWS::EMR::Cluster Id MasterPublicDNS
AWS::EMR::InstanceFleetConfig InstanceFleetId
AWS::EMR::InstanceGroupConfig InstanceGroupId
AWS::EMR::SecurityConfiguration Name
AWS::EMR::Step Id
AWS::Events::EventBusPolicy Id
AWS::Events::Rule Id Arn
AWS::Glue::Classifier Name
AWS::Glue::Connection Name
AWS::Glue::Crawler Name
AWS::Glue::Database Name
6/10
AWS::Glue::DataCatalogEncryptionSettings –
AWS::Glue::DevEndpoint Name
AWS::Glue::Job Name
AWS::Glue::Partition Name
AWS::Glue::SecurityConfiguration –
AWS::Glue::Table Name
AWS::Glue::Trigger Name
AWS::GuardDuty::Detector Id
AWS::GuardDuty::Filter Name
AWS::GuardDuty::IPSet Id
AWS::GuardDuty::Master AccountId
AWS::GuardDuty::Member AccountId
AWS::GuardDuty::ThreatIntelSet Id
AWS::IAM::ManagedPolicy Arn
AWS::IAM::Policy Name
AWS::IAM::ServiceLinkedRole –
AWS::IAM::UserToGroupAddition Name
AWS::Inspector::AssessmentTarget – Arn
AWS::Inspector::AssessmentTemplate – Arn
AWS::Inspector::ResourceGroup – Arn
AWS::IoT::Certificate Id Arn
AWS::IoT::PolicyPrincipalAttachment –
AWS::IoT::Thing Name
AWS::IoT::ThingPrincipalAttachment –
AWS::IoTAnalytics::Channel –
AWS::IoTAnalytics::Dataset –
AWS::IoTAnalytics::Datastore –
AWS::IoTAnalytics::Pipeline –
AWS::IoTEvents::DetectorModel Name
7/10
AWS::IoTEvents::Input Name
AWS::IoTThingsGraph::FlowTemplate Urn
AWS::KinesisAnalytics::Application –
AWS::KinesisAnalytics::ApplicationOutput –
AWS::KinesisAnalytics::ApplicationReferenceDataSource –
AWS::KinesisAnalyticsV2::Application –
AWS::KinesisAnalyticsV2::ApplicationCloudWatchLoggingOption –
AWS::KinesisAnalyticsV2::ApplicationOutput –
AWS::KinesisAnalyticsV2::ApplicationReferenceDataSource –
AWS::KMS::Alias Name
AWS::KMS::Key Id Arn
AWS::Lambda::Alias Arn
AWS::Lambda::EventSourceMapping Name
AWS::Lambda::LayerVersion Arn
AWS::Lambda::LayerVersionPermission Arn
AWS::Lambda::Permission –
AWS::Logs::LogStream Name
AWS::Logs::MetricFilter –
AWS::Logs::SubscriptionFilter Name
AWS::RDS::DBClusterParameterGroup Name
AWS::RDS::DBParameterGroup Name
AWS::RDS::DBSecurityGroup Name
AWS::RDS::DBSecurityGroupIngress DBSecurityGroup
AWS::RDS::DBSubnetGroup Name
AWS::RDS::EventSubscription Name
AWS::RDS::OptionGroup Name
AWS::Route53::HealthCheck HealthCheckId
8/10
AWS::Route53::HostedZone HosteadZoneId NameServers
AWS::Route53::RecordSet DomainName
AWS::Route53::RecordSetGroup Name
AWS::SecretsManager::ResourcePolicy Arn
AWS::SecretsManager::RotationSchedule Arn
AWS::SecretsManager::Secret Arn
AWS::SecretsManager::SecretTargetAttachment Arn
AWS::ServiceDiscovery::HttpNamespace Id Arn, Id
AWS::ServiceDiscovery::Instance Id
AWS::ServiceDiscovery::PrivateDnsNamespace Id Arn, Id
AWS::ServiceDiscovery::PublicDnsNamespace Id Arn, Id
AWS::SES::ConfigurationSet Name
AWS::SES::ConfigurationSetEventDestination –
AWS::SES::ReceiptFilter –
AWS::SES::ReceiptRule Name
AWS::SES::ReceiptRuleSet Name
AWS::SES::Template –
AWS::SSM::Association –
AWS::SSM::Document Name
AWS::SSM::MaintenanceWindow Id
AWS::SSM::MaintenanceWindowTarget Id
AWS::SSM::MaintenanceWindowTask Id
9/10
AWS::SSM::Parameter Name Type, Value
AWS::SSM::PatchBaseline Id
AWS::SSM::ResourceDataSync Name
AWS::WAF::ByteMatchSet Id
AWS::WAF::IPSet Id
AWS::WAF::Rule Id
AWS::WAF::SizeConstraintSet Id
AWS::WAF::SqlInjectionMatchSet Id
AWS::WAF::WebACL Name
AWS::WAF::XssMatchSet Id
AWS::WAFRegional::ByteMatchSet Id
AWS::WAFRegional::GeoMatchSet Id
AWS::WAFRegional::IPSet Id
AWS::WAFRegional::RateBasedRule Id
AWS::WAFRegional::RegexPatternSet Id
AWS::WAFRegional::Rule Id
AWS::WAFRegional::SizeConstraintSet Id
AWS::WAFRegional::SqlInjectionMatchSet Id
AWS::WAFRegional::WebACL Name
AWS::WAFRegional::WebACLAssociation –
AWS::WAFRegional::XssMatchSet Id
Please let me know if there are missing resources or incorrect information on this page.
10/10