| Access Analyzer | AWS::AccessAnalyzer::Analyzer |
| API Gateway API Key | AWS::ApiGateway::ApiKey |
| API Gateway REST API | AWS::ApiGateway::RestApi |
| API Gateway HTTP API | AWS::ApiGatewayV2::Api |
| AppRunner Service | AWS::AppRunner::Service |
| Athena DataCatalog | AWS::Athena::DataCatalog |
| Athena WorkGroup | AWS::Athena::WorkGroup |
| Auto Scaling Group | AWS::AutoScaling::AutoScalingGroup |
| Auto Scaling Launch Configuration | AWS::AutoScaling::LaunchConfiguration |
| Backup Plan | AWS::Backup::BackupPlan |
| Certificate Manager (ACM) Certificate | AWS::CertificateManager::Certificate |
| CloudFormation Stack | AWS::CloudFormation::Stack |
| CloudFront Distribution | AWS::CloudFront::Distribution |
| CloudTrail Trail | AWS::CloudTrail::Trail |
| CloudWatch Alarm | AWS::CloudWatch::Alarm |
| CodeBuild Project | AWS::CodeBuild::Project |
| CodeCommit Repository | AWS::CodeCommit::Repository |
| Config Configuration Recorder | AWS::Config::ConfigurationRecorder |
| DynamoDB Accelerator Cluster | AWS::DAX::Cluster |
| DynamoDB Table | AWS::DynamoDB::Table |
| EC2 Elastic IP Address (EIP) | AWS::EC2::EIP |
| EC2 Flow Log | AWS::EC2::FlowLog |
| EC2 Image | AWS::EC2::Image |
| EC2 Instance | AWS::EC2::Instance |
| EC2 Network ACL | AWS::EC2::NetworkAcl |
| EC2 Network Interface | AWS::EC2::NetworkInterface |
| EC2 Route Table | AWS::EC2::RouteTable |
| EC2 Security Group | AWS::EC2::SecurityGroup |
| EC2 Service Configuration | AWS::EC2::ServiceConfiguration |
| EC2 Snapshot | AWS::EC2::Snapshot |
| EC2 Subnet | AWS::EC2::Subnet |
| EC2 Transit Gateway | AWS::EC2::TransitGateway |
| EC2 Transit Gateway Attachment | AWS::EC2::TransitGatewayAttachment |
| EC2 Transit Gateway Route Table | AWS::EC2::TransitGatewayRouteTable |
| EC2 Volume | AWS::EC2::Volume |
| EC2 VPC | AWS::EC2::VPC |
| EC2 VPC Endpoint | AWS::EC2::VpcEndpoint |
| EC2 VPC Peering Connection | AWS::EC2::VpcPeeringConnection |
| ECR Repository | AWS::ECR::Repository |
| ECS Task | AWS::ECS::Task |
| ECS Task Definition | AWS::ECS::TaskDefinition |
| EFS File System | AWS::EFS::FileSystem |
| EKS Cluster | AWS::EKS::Cluster |
| ElastiCache Replication Group | AWS::ElastiCache::ReplicationGroup |
| Elastic Load Balancer | AWS::ElasticLoadBalancing::LoadBalancer |
| Elastic Load Balancer V2 | AWS::ElasticLoadBalancingV2::LoadBalancer |
| Elastic Load Balancing V2 TargetGroup | AWS::ElasticLoadBalancingV2::TargetGroup |
| CloudWatch Events Rule | AWS::Events::Rule |
| Firehose Delivery Stream | AWS::Firehose::DeliveryStream |
| Fault Injection Simulator Experiment | AWS::Fis::Experiment |
| Glue Connection | AWS::Glue::Connection |
| Glue Database | AWS::Glue::Database |
| Glue Data Catalog Encryption Settings | AWS::Glue::DataCatalogEncryptionSettings |
| Glue Dev Endpoint | AWS::Glue::DevEndpoint |
| Glue Job | AWS::Glue::Job |
| Glue Data Catalog Resource Policy | AWS::Glue::ResourcePolicy |
| Glue ML Transform | AWS::Glue::MLTransform |
| Glue Security Configuration | AWS::Glue::SecurityConfiguration |
| GuardDuty Detector | AWS::GuardDuty::Detector |
| IAM Group | AWS::IAM::Group |
| IAM Instance Profile | AWS::IAM::InstanceProfile |
| IAM Managed Policy | AWS::IAM::ManagedPolicy |
| OpenID Connect Provider | AWS::IAM::OIDCProvider |
| IAM Role | AWS::IAM::Role |
| IAM SAML Provider | AWS::IAM::SAMLProvider |
| IAM Server Certificate | AWS::IAM::ServerCertificate |
| IAM User | AWS::IAM::User |
| IAM Virtual MFA Device | AWS::IAM::VirtualMFADevice |
| Kinesis Stream | AWS::Kinesis::Stream |
| KMS Key | AWS::KMS::Key |
| Lambda Function | AWS::Lambda::Function |
| CloudWatch Log Group | AWS::Logs::LogGroup |
| Amazon Macie | AWS::Macie::Session |
| OpenSearch Domain | AWS::OpenSearch::Domain |
| RDS DB Cluster | AWS::RDS::DBCluster |
| RDS DB Cluster Snapshot | AWS::RDS::DBClusterSnapshot |
| RDS DB Instance | AWS::RDS::DBInstance |
| RDS DB Parameter Group | AWS::RDS::DBParameterGroup |
| RDS DB Snapshot | AWS::RDS::DBSnapshot |
| RDS Option Group | AWS::RDS::OptionGroup |
| Redshift Cluster | AWS::Redshift::Cluster |
| Route53 Hosted Zone | AWS::Route53::HostedZone |
| S3 Bucket | AWS::S3::Bucket |
| SageMaker Notebook Instance | AWS::SageMaker::NotebookInstance |
| Secrets Manager Secret | AWS::SecretsManager::Secret |
| Security Hub | AWS::SecurityHub::Hub |
| SNS Subscription | AWS::SNS::Subscription |
| SNS Topic | AWS::SNS::Topic |
| SQS Queue | AWS::SQS::Queue |
| SSM Document | AWS::SSM::Document |
| SSM InstanceInformation | AWS::SSM::InstanceInformation |
| WAF v2 IP Set | AWS::WAFv2::IPSet |
| WAF v2 Logging Configuration | AWS::WAFv2::LoggingConfiguration |
| WAF v2 Regex Pattern Set | AWS::WAFv2::RegexPatternSet |
| WAF v2 Rule Group | AWS::WAFv2::RuleGroup |
| WAF v2 Web ACL | AWS::WAFv2::WebACL |
| Account | Custom::AWS::Account |
| IAM Account | Custom::AWS::IAM::Account |
| IAM Identity Center | Custom::AWS::IAM::IdentityCenter |
| Amazon Inspector Covered Resource | Custom::AWS::InspectorV2::CoveredResource |
| Amazon Inspector | Custom::AWS::InspectorV2::Inspector |
| Region | Custom::AWS::Region |
| S3 Account | Custom::AWS::S3::Account |