syntax arn:aws:service:[region]:[account]:name S3 arn:aws:s3:::bucket-name e.g. arn:aws:s3:::broccolifly.com/* Route 53 arn:route53:::hostedzone/id e.g. arn:route53:::hostedzone/ZVIKMFE47S7N6 - branches.io