Serverless Developer Guide
arn:partition:service:region:account-id:resource-id
arn:partition:service:region:account-id:resource-type/resource-id
arn:partition:service:region:account-id:resource-type:resource-id
• arn: literally, the string "arn"
• partition is one of the three partitions: AWS Regions, AWS China Regions, or AWS GovCloud 
(US) Regions
• service is the speciﬁc service such as Amazon EC2 or DynamoDB
• region is the AWS region like us-east-1 (North Virginia)
• account-id is the AWS account ID
• resource-id is the unique resource ID. Other forms for resource IDs like resource-type/
resource-id, are used by services like IAM where IAM users have resource-type of user and
resource-id a username like MyUsername,
Try to identify the service, region, and resource for the following example ARNs:
arn:aws::dynamodb:us-west-2:123456789012:table/myDynamoDBTable
arn:aws::lambda:us-east-2:123456789012:function:my-function:1
If you are interested in learning more, check out a map of Regions and Availability Zones, a view of 
our data centers, and the complete list of regional service endpoints.
Security model
Security is a top priority for AWS. Before you start building serverless solutions, you need to know 
how security factors into AWS solutions.
Amazon Web Services has a shared responsibility model:
Security model 15