Last active
March 17, 2025 22:41
-
Star
(863)
You must be signed in to star a gist -
Fork
(147)
You must be signed in to fork a gist
-
-
Save shortjared/4c1e3fe52bdfa47522cfe5b41e5d6f22 to your computer and use it in GitHub Desktop.
List of AWS Service Principals
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| a4b.amazonaws.com | |
| access-analyzer.amazonaws.com | |
| account.amazonaws.com | |
| acm-pca.amazonaws.com | |
| acm.amazonaws.com | |
| airflow-env.amazonaws.com | |
| airflow.amazonaws.com | |
| alexa-appkit.amazon.com | |
| alexa-connectedhome.amazon.com | |
| amazonmq.amazonaws.com | |
| amplify.amazonaws.com | |
| apigateway.amazonaws.com | |
| appflow.amazonaws.com | |
| application-autoscaling.amazonaws.com | |
| application-insights.amazonaws.com | |
| appstream.amazonaws.com | |
| appstream.application-autoscaling.amazonaws.com | |
| appsync.amazonaws.com | |
| athena.amazonaws.com | |
| automation.amazonaws.com | |
| autoscaling.amazonaws.com | |
| aws-artifact-account-sync.amazonaws.com | |
| backup.amazonaws.com | |
| batch.amazonaws.com | |
| billingconsole.amazonaws.com | |
| braket.amazonaws.com | |
| budgets.amazonaws.com | |
| ce.amazonaws.com | |
| channels.lex.amazonaws.com | |
| chatbot.amazonaws.com | |
| chime.amazonaws.com | |
| cloud9.amazonaws.com | |
| clouddirectory.amazonaws.com | |
| cloudformation.amazonaws.com | |
| cloudfront.amazonaws.com | |
| cloudhsm.amazonaws.com | |
| cloudsearch.amazonaws.com | |
| cloudtrail.amazonaws.com | |
| cloudwatch-crossaccount.amazonaws.com | |
| codebuild.amazonaws.com | |
| codecommit.amazonaws.com | |
| codedeploy.${aws::region}.amazonaws.com | |
| codedeploy.amazonaws.com | |
| codeguru-reviewer.amazonaws.com | |
| codepipeline.amazonaws.com | |
| codestar-notifications.amazonaws.com | |
| codestar.amazonaws.com | |
| cognito-identity.amazonaws.com | |
| cognito-idp.amazonaws.com | |
| cognito-sync.amazonaws.com | |
| comprehend.amazonaws.com | |
| config-conforms.amazonaws.com | |
| config-multiaccountsetup.amazonaws.com | |
| config.amazonaws.com | |
| connect.amazonaws.com | |
| continuousexport.discovery.amazonaws.com | |
| costalerts.amazonaws.com | |
| custom-resource.application-autoscaling.amazonaws.com | |
| databrew.amazonaws.com | |
| datapipeline.amazonaws.com | |
| datasync.amazonaws.com | |
| dax.amazonaws.com | |
| deeplens.amazonaws.com | |
| delivery.logs.amazonaws.com | |
| diode.amazonaws.com | |
| directconnect.amazonaws.com | |
| discovery.amazonaws.com | |
| dlm.amazonaws.com | |
| dms.amazonaws.com | |
| ds.amazonaws.com | |
| dynamodb.amazonaws.com | |
| dynamodb.application-autoscaling.amazonaws.com | |
| ec.amazonaws.com | |
| ec2.amazonaws.com | |
| ec2.application-autoscaling.amazonaws.com | |
| ec2fleet.amazonaws.com | |
| ec2scheduled.amazonaws.com | |
| ecr.amazonaws.com | |
| ecs-tasks.amazonaws.com | |
| ecs.amazonaws.com | |
| ecs.application-autoscaling.amazonaws.com | |
| edgelambda.amazonaws.com | |
| eks-fargate-pods.amazonaws.com | |
| eks-fargate.amazonaws.com | |
| eks-nodegroup.amazonaws.com | |
| eks.amazonaws.com | |
| elasticache.amazonaws.com | |
| elasticbeanstalk.amazonaws.com | |
| elasticfilesystem.amazonaws.com | |
| elasticloadbalancing.amazonaws.com | |
| elasticmapreduce.amazonaws.com | |
| elastictranscoder.amazonaws.com | |
| email.cognito-idp.amazonaws.com | |
| emr-containers.amazonaws.com | |
| es.amazonaws.com | |
| events.amazonaws.com | |
| firehose.amazonaws.com | |
| fms.amazonaws.com | |
| forecast.amazonaws.com | |
| freertos.amazonaws.com | |
| fsx.amazonaws.com | |
| galaxy.amazonaws.com | |
| gamelift.amazonaws.com | |
| glacier.amazonaws.com | |
| globalaccelerator.amazonaws.com | |
| glue.amazonaws.com | |
| greengrass.amazonaws.com | |
| guardduty.amazonaws.com | |
| health.amazonaws.com | |
| honeycode.amazonaws.com | |
| iam.amazonaws.com | |
| imagebuilder.amazonaws.com | |
| importexport.amazonaws.com | |
| inspector.amazonaws.com | |
| iot.amazonaws.com | |
| iotanalytics.amazonaws.com | |
| iotevents.amazonaws.com | |
| iotsitewise.amazonaws.com | |
| iotthingsgraph.amazonaws.com | |
| ivs.amazonaws.com | |
| jellyfish.amazonaws.com | |
| kafka.amazonaws.com | |
| kinesis.amazonaws.com | |
| kinesis.{us-gov-region}.amazonaws.com | |
| kinesisanalytics.amazonaws.com | |
| kms.amazonaws.com | |
| lakeformation.amazonaws.com | |
| lambda.amazonaws.com | |
| lex.amazonaws.com | |
| license-manager.amazonaws.com | |
| lightsail.amazonaws.com | |
| logger.cloudfront.amazonaws.com | |
| logs.amazonaws.com | |
| machinelearning.amazonaws.com | |
| macie.amazonaws.com | |
| managedblockchain.amazonaws.com | |
| managedservices.amazonaws.com | |
| mediaconnect.amazonaws.com | |
| mediaconvert.amazonaws.com | |
| mediapackage.amazonaws.com | |
| mediastore.amazonaws.com | |
| mediatailor.amazonaws.com | |
| meetings.chime.amazonaws.com | |
| member.org.stacksets.cloudformation.amazonaws.com | |
| metering-marketplace.amazonaws.com | |
| mgn.amazonaws.com | |
| migrationhub.amazonaws.com | |
| mobileanalytics.amazonaws.com | |
| mobilehub.amazonaws.com | |
| monitoring.amazonaws.com | |
| monitoring.rds.amazonaws.com | |
| mq.amazonaws.com | |
| network-firewall.amazonaws.com | |
| ops.apigateway.amazonaws.com | |
| opsworks-cm.amazonaws.com | |
| opsworks.amazonaws.com | |
| organizations.amazonaws.com | |
| personalize.amazonaws.com | |
| pinpoint.amazonaws.com | |
| polly.amazonaws.com | |
| purchaseorders.amazonaws.com | |
| qldb.amazonaws.com | |
| quicksight.amazonaws.com | |
| ram.amazonaws.com | |
| rds-preview.amazonaws.com | |
| rds.amazonaws.com | |
| redshift.amazonaws.com | |
| rekognition.amazonaws.com | |
| replication.dynamodb.amazonaws.com | |
| replicator.lambda.amazonaws.com | |
| resource-groups.amazonaws.com | |
| robomaker.amazonaws.com | |
| route53.amazonaws.com | |
| route53domains.amazonaws.com | |
| route53resolver.amazonaws.com | |
| s3.amazonaws.com | |
| sagemaker.amazonaws.com | |
| secretsmanager.amazonaws.com | |
| securityhub.amazonaws.com | |
| serverlessrepo.amazonaws.com | |
| servicecatalog-appregistry.amazonaws.com | |
| servicecatalog.amazonaws.com | |
| servicediscovery.amazonaws.com | |
| ses.amazonaws.com | |
| shield.amazonaws.com | |
| signer.amazonaws.com | |
| signin.amazonaws.com | |
| sms.amazonaws.com | |
| sns.amazonaws.com | |
| spotfleet.amazonaws.com | |
| sqs.amazonaws.com | |
| ssm-incidents.amazonaws.com | |
| ssm.amazonaws.com | |
| sso.amazonaws.com | |
| states.amazonaws.com | |
| storagegateway.amazonaws.com | |
| streams.metrics.cloudwatch.amazonaws.com | |
| sts.amazonaws.com | |
| support.amazonaws.com | |
| swf.amazonaws.com | |
| tagging.amazonaws.com | |
| tagpolicies.tag.amazonaws.com | |
| textract.amazonaws.com | |
| timestream.amazonaws.com | |
| transcribe.amazonaws.com | |
| transfer.amazonaws.com | |
| transitgateway.amazonaws.com | |
| translate.amazonaws.com | |
| trustedadvisor.amazonaws.com | |
| tts.amazonaws.com | |
| vmie.amazonaws.com | |
| vpc-flow-logs.amazonaws.com | |
| waf-regional.amazonaws.com | |
| waf.amazonaws.com | |
| wam.amazonaws.com | |
| workdocs.amazonaws.com | |
| worklink.amazonaws.com | |
| workmail.amazonaws.com | |
| workspaces.amazonaws.com | |
| xray.amazonaws.com | |
| {region}.elasticache-snapshot.amazonaws.com |
@shortjared I have updated your gist with by adding the service name (note, there are 3 I could not find). Would you consider adding this to your gist to provide some more useful information to people who may not know which service these relate to?
https://gist.github.com/reidca/382d842018953bde3764d43822bdf452
This is a really useful list, it would be great if we could make it into a http enabled service with the human readable "name" of the service as well as the service principal. Or even better if AWS just documented it properly.
@reidca I had exactly the same thoughts some time ago, about maybe tapping on the great content that lives on this gist and turning it into an easier-to-find list. Would you be interested in contributing?
And @shortjared would you be happy with the content of your gist being used for that?
I always come back to this list and look for the right service principal, although it's great to have it listed in this gist it sometimes takes me out of my flow when I'm inside vs code.
So I'd figure I create a vscode extension that provides autocompletion of all AWS services that can be used as Service Principals. To do that I had to create a scraper that scrapes part of the aws docs and the s3 policy gen that was mentioned in here to find listed service principals and then use that as input to provide autocompletion snippets.
The extension works with terraform, cloudformation and aws cdk (ts & python) and can be downloaded from the vscode marketplace.
or if you use vscodium, the openvsx extension is found over here.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This is a really useful list, it would be great if we could make it into a http enabled service with the human readable "name" of the service as well as the service principal. Or even better if AWS just documented it properly.