-
-
Save shortjared/4c1e3fe52bdfa47522cfe5b41e5d6f22 to your computer and use it in GitHub Desktop.
a4b.amazonaws.com | |
access-analyzer.amazonaws.com | |
account.amazonaws.com | |
acm-pca.amazonaws.com | |
acm.amazonaws.com | |
airflow-env.amazonaws.com | |
airflow.amazonaws.com | |
alexa-appkit.amazon.com | |
alexa-connectedhome.amazon.com | |
amazonmq.amazonaws.com | |
amplify.amazonaws.com | |
apigateway.amazonaws.com | |
appflow.amazonaws.com | |
application-autoscaling.amazonaws.com | |
application-insights.amazonaws.com | |
appstream.amazonaws.com | |
appstream.application-autoscaling.amazonaws.com | |
appsync.amazonaws.com | |
athena.amazonaws.com | |
automation.amazonaws.com | |
autoscaling.amazonaws.com | |
aws-artifact-account-sync.amazonaws.com | |
backup.amazonaws.com | |
batch.amazonaws.com | |
billingconsole.amazonaws.com | |
braket.amazonaws.com | |
budgets.amazonaws.com | |
ce.amazonaws.com | |
channels.lex.amazonaws.com | |
chatbot.amazonaws.com | |
chime.amazonaws.com | |
cloud9.amazonaws.com | |
clouddirectory.amazonaws.com | |
cloudformation.amazonaws.com | |
cloudfront.amazonaws.com | |
cloudhsm.amazonaws.com | |
cloudsearch.amazonaws.com | |
cloudtrail.amazonaws.com | |
cloudwatch-crossaccount.amazonaws.com | |
codebuild.amazonaws.com | |
codecommit.amazonaws.com | |
codedeploy.${aws::region}.amazonaws.com | |
codedeploy.amazonaws.com | |
codeguru-reviewer.amazonaws.com | |
codepipeline.amazonaws.com | |
codestar-notifications.amazonaws.com | |
codestar.amazonaws.com | |
cognito-identity.amazonaws.com | |
cognito-idp.amazonaws.com | |
cognito-sync.amazonaws.com | |
comprehend.amazonaws.com | |
config-conforms.amazonaws.com | |
config-multiaccountsetup.amazonaws.com | |
config.amazonaws.com | |
connect.amazonaws.com | |
continuousexport.discovery.amazonaws.com | |
costalerts.amazonaws.com | |
custom-resource.application-autoscaling.amazonaws.com | |
databrew.amazonaws.com | |
datapipeline.amazonaws.com | |
datasync.amazonaws.com | |
dax.amazonaws.com | |
deeplens.amazonaws.com | |
delivery.logs.amazonaws.com | |
diode.amazonaws.com | |
directconnect.amazonaws.com | |
discovery.amazonaws.com | |
dlm.amazonaws.com | |
dms.amazonaws.com | |
ds.amazonaws.com | |
dynamodb.amazonaws.com | |
dynamodb.application-autoscaling.amazonaws.com | |
ec.amazonaws.com | |
ec2.amazonaws.com | |
ec2.application-autoscaling.amazonaws.com | |
ec2fleet.amazonaws.com | |
ec2scheduled.amazonaws.com | |
ecr.amazonaws.com | |
ecs-tasks.amazonaws.com | |
ecs.amazonaws.com | |
ecs.application-autoscaling.amazonaws.com | |
edgelambda.amazonaws.com | |
eks-fargate-pods.amazonaws.com | |
eks-fargate.amazonaws.com | |
eks-nodegroup.amazonaws.com | |
eks.amazonaws.com | |
elasticache.amazonaws.com | |
elasticbeanstalk.amazonaws.com | |
elasticfilesystem.amazonaws.com | |
elasticloadbalancing.amazonaws.com | |
elasticmapreduce.amazonaws.com | |
elastictranscoder.amazonaws.com | |
email.cognito-idp.amazonaws.com | |
emr-containers.amazonaws.com | |
es.amazonaws.com | |
events.amazonaws.com | |
firehose.amazonaws.com | |
fms.amazonaws.com | |
forecast.amazonaws.com | |
freertos.amazonaws.com | |
fsx.amazonaws.com | |
galaxy.amazonaws.com | |
gamelift.amazonaws.com | |
glacier.amazonaws.com | |
globalaccelerator.amazonaws.com | |
glue.amazonaws.com | |
greengrass.amazonaws.com | |
guardduty.amazonaws.com | |
health.amazonaws.com | |
honeycode.amazonaws.com | |
iam.amazonaws.com | |
imagebuilder.amazonaws.com | |
importexport.amazonaws.com | |
inspector.amazonaws.com | |
iot.amazonaws.com | |
iotanalytics.amazonaws.com | |
iotevents.amazonaws.com | |
iotsitewise.amazonaws.com | |
iotthingsgraph.amazonaws.com | |
ivs.amazonaws.com | |
jellyfish.amazonaws.com | |
kafka.amazonaws.com | |
kinesis.amazonaws.com | |
kinesis.{us-gov-region}.amazonaws.com | |
kinesisanalytics.amazonaws.com | |
kms.amazonaws.com | |
lakeformation.amazonaws.com | |
lambda.amazonaws.com | |
lex.amazonaws.com | |
license-manager.amazonaws.com | |
lightsail.amazonaws.com | |
logger.cloudfront.amazonaws.com | |
logs.amazonaws.com | |
machinelearning.amazonaws.com | |
macie.amazonaws.com | |
managedblockchain.amazonaws.com | |
managedservices.amazonaws.com | |
mediaconnect.amazonaws.com | |
mediaconvert.amazonaws.com | |
mediapackage.amazonaws.com | |
mediastore.amazonaws.com | |
mediatailor.amazonaws.com | |
meetings.chime.amazonaws.com | |
member.org.stacksets.cloudformation.amazonaws.com | |
metering-marketplace.amazonaws.com | |
mgn.amazonaws.com | |
migrationhub.amazonaws.com | |
mobileanalytics.amazonaws.com | |
mobilehub.amazonaws.com | |
monitoring.amazonaws.com | |
monitoring.rds.amazonaws.com | |
mq.amazonaws.com | |
network-firewall.amazonaws.com | |
ops.apigateway.amazonaws.com | |
opsworks-cm.amazonaws.com | |
opsworks.amazonaws.com | |
organizations.amazonaws.com | |
personalize.amazonaws.com | |
pinpoint.amazonaws.com | |
polly.amazonaws.com | |
purchaseorders.amazonaws.com | |
qldb.amazonaws.com | |
quicksight.amazonaws.com | |
ram.amazonaws.com | |
rds-preview.amazonaws.com | |
rds.amazonaws.com | |
redshift.amazonaws.com | |
rekognition.amazonaws.com | |
replication.dynamodb.amazonaws.com | |
replicator.lambda.amazonaws.com | |
resource-groups.amazonaws.com | |
robomaker.amazonaws.com | |
route53.amazonaws.com | |
route53domains.amazonaws.com | |
route53resolver.amazonaws.com | |
s3.amazonaws.com | |
sagemaker.amazonaws.com | |
secretsmanager.amazonaws.com | |
securityhub.amazonaws.com | |
serverlessrepo.amazonaws.com | |
servicecatalog-appregistry.amazonaws.com | |
servicecatalog.amazonaws.com | |
servicediscovery.amazonaws.com | |
ses.amazonaws.com | |
shield.amazonaws.com | |
signer.amazonaws.com | |
signin.amazonaws.com | |
sms.amazonaws.com | |
sns.amazonaws.com | |
spotfleet.amazonaws.com | |
sqs.amazonaws.com | |
ssm-incidents.amazonaws.com | |
ssm.amazonaws.com | |
sso.amazonaws.com | |
states.amazonaws.com | |
storagegateway.amazonaws.com | |
streams.metrics.cloudwatch.amazonaws.com | |
sts.amazonaws.com | |
support.amazonaws.com | |
swf.amazonaws.com | |
tagging.amazonaws.com | |
tagpolicies.tag.amazonaws.com | |
textract.amazonaws.com | |
timestream.amazonaws.com | |
transcribe.amazonaws.com | |
transfer.amazonaws.com | |
transitgateway.amazonaws.com | |
translate.amazonaws.com | |
trustedadvisor.amazonaws.com | |
tts.amazonaws.com | |
vmie.amazonaws.com | |
vpc-flow-logs.amazonaws.com | |
waf-regional.amazonaws.com | |
waf.amazonaws.com | |
wam.amazonaws.com | |
workdocs.amazonaws.com | |
worklink.amazonaws.com | |
workmail.amazonaws.com | |
workspaces.amazonaws.com | |
xray.amazonaws.com | |
{region}.elasticache-snapshot.amazonaws.com |
For AWS CloudFormation StackSets there are two principals (only one listed above):
stacksets.cloudformation.amazonaws.com
(missing one)member.org.stacksets.cloudformation.amazonaws.com
The principal stacksets.cloudformation.amazonaws.com
is not recognized for me when trying to enable Trusted Access using the CLI/CDK. I get the following error:
[FAILED] from custom resource. Message returned: You specified an unrecognized service principal
This is a really useful list, it would be great if we could make it into a http enabled service with the human readable "name" of the service as well as the service principal. Or even better if AWS just documented it properly.
@shortjared I have updated your gist with by adding the service name (note, there are 3 I could not find). Would you consider adding this to your gist to provide some more useful information to people who may not know which service these relate to?
https://gist.github.com/reidca/382d842018953bde3764d43822bdf452
This is a really useful list, it would be great if we could make it into a http enabled service with the human readable "name" of the service as well as the service principal. Or even better if AWS just documented it properly.
@reidca I had exactly the same thoughts some time ago, about maybe tapping on the great content that lives on this gist and turning it into an easier-to-find list. Would you be interested in contributing?
And @shortjared would you be happy with the content of your gist being used for that?
Chime introduces a
meetings.chime.amazonaws.com
service principal according to https://docs.aws.amazon.com/chime-sdk/latest/dg/mtgs-sdk-notifications.html