arn

func Build ¶

func Build(service, region, accountID, resource string) string

Build constructs an AWS ARN from the given components. For IAM (service == "iam"), the region is omitted as IAM is a global service. The partition is derived from the region so GovCloud, China, and ISO regions produce wire-correct ARNs. Format: arn:{partition}:{service}:{region}:{accountID}:{resource}.

func BuildGlobal ¶ added in v1.2.0

func BuildGlobal(service, region, accountID, resource string) string

BuildGlobal constructs an AWS ARN for a resource kind that is global (no region segment) even though the owning service is otherwise regional -- e.g. Direct Connect's DirectConnectGateway (confirmed via the real Terraform AWS provider source: `c.GlobalARN(ctx, "directconnect", "dx-gateway/"+id)`, gateway.go's gatewayARN). This differs from Build's existing service==\"iam\" special case, which is a whole-service exception: BuildGlobal is for services that are region-scoped for every OTHER resource kind but have one specific global resource kind, so the caller opts in per call site rather than the region omission being baked into the service name. The partition is still derived from region (regional resources of the same service may need it for GovCloud/China/ISO callers), even though region itself is omitted from the resulting ARN. Format: arn:{partition}:{service}::{accountID}:{resource}.

func BuildS3 ¶

func BuildS3(resource string) string

BuildS3 constructs an ARN for an S3 resource. S3 ARNs have no region or account ID component. Format: arn:aws:s3:::{resource}.

func PartitionForRegion ¶

func PartitionForRegion(region string) string

PartitionForRegion returns the AWS partition (e.g. "aws", "aws-us-gov", "aws-cn", "aws-iso", "aws-iso-b") for the given region. Empty or unknown regions resolve to the standard "aws" partition.

Real AWS resources living in GovCloud or China use distinct ARN partitions and clients reject cross-partition ARNs. Use this helper when constructing ARNs from a region whose partition is not known a priori.