ARN Parser Builder Tool - AWS ARN Parser, Builder, and Batch Analyzer

First Published:
Last Updated:

Parse, build, and batch-analyze AWS ARNs (Amazon Resource Names). All processing is performed entirely in your browser using client-side JavaScript — your input never leaves your device or gets sent to any server.

  • This tool is provided "AS IS" without any warranties of any kind.
  • The author accepts no responsibility for incorrect parsing, malformed ARNs, or downstream issues from ARN-related operations.
  • ARN validation is syntactic only — this tool does not contact AWS and cannot verify that a resource actually exists.
  • Always verify generated ARNs against the official AWS documentation for each service before use in production.
  • By using this tool, you accept full responsibility for any outcomes.

Privacy: This tool uses client-side JavaScript for all processing. No data is transmitted to servers, no files are uploaded online, all processing happens locally in your browser. Once loaded, this tool continues to work even without an internet connection. For more details, please refer to our Web Tools Disclaimer.

Supports all ARN formats: arn:partition:service:region:account:resource, resource-type/resource-id, and resource-type:resource-id.
Standard (aws), China (aws-cn), GovCloud (aws-us-gov), or ISO.
Service namespace (lowercase). Leave empty to preview the structure.
AWS Region code. Leave empty for global services like IAM, CloudFront, or Route 53.
12-digit AWS Account ID. Leave empty for S3 bucket and object ARNs.
Full resource portion. Use type/id or type:id depending on the service convention.

Features

  • Three Modes in One Tool: Parse existing ARNs, build new ARNs from a structured form, or batch-parse many ARNs at once.
  • Complete ARN Decomposition: Split any ARN into partition, service, region, account-id, resource-type, and resource-id with delimiter detection (/, :, or none).
  • Format-Aware Validation: Recognizes special ARN shapes such as s3 (empty region and account), iam/cloudfront/route53 (empty region for global services), and non-standard account IDs.
  • All Partitions Supported: aws, aws-cn, aws-us-gov, aws-iso, and aws-iso-b.
  • Sample ARN Presets: One-click samples for S3, IAM, Lambda, DynamoDB, SQS, SNS, KMS, CloudWatch Logs, Step Functions, and ECR.
  • Service and Region Autocomplete: Build form includes datalist suggestions for 30+ common AWS services and 25+ AWS Regions.
  • Real-Time ARN Preview: The Build tab updates the generated ARN as you type and surfaces validation notes immediately.
  • Bulk JSON Output: Parse dozens of ARNs at once and get a structured JSON array you can copy or download.
  • Warning Explanations: Clear, actionable warnings for invalid partitions, non-12-digit account IDs, and unexpected region/account combinations.
  • 100% Client-Side: No network requests, no AWS credentials, no data transmission. Works offline after the first load.

How to Use

  1. Parse a Single ARN: On the Parse tab, paste an ARN into the input box and click Parse (or press Enter). Components and warnings appear in a table, and a JSON representation is shown for copying.
  2. Try a Sample: Click any sample button (S3 Bucket, IAM Role, Lambda, etc.) to instantly load and parse a valid example ARN.
  3. Build an ARN: Open the Build tab. Select a partition, choose a service (autocomplete helps), optionally pick a region and enter an account ID, then enter the resource portion. The generated ARN updates in real time.
  4. Handle Global Services: For IAM, CloudFront, or Route 53, leave the Region field empty. For S3 bucket/object ARNs, leave both Region and Account ID empty.
  5. Batch-Parse ARNs: On the Batch tab, paste one ARN per line and click Parse All. Every ARN is parsed independently and collected into a JSON array with per-entry warnings and errors.
  6. Copy or Download: Use the Copy JSON or Download JSON buttons to export the results of any tab.

Important Notes

  • An AWS ARN always has the form arn:partition:service:region:account-id:resource with six colon-separated segments (the resource portion may itself contain additional colons).
  • Resource encoding varies by service: Lambda functions use function:MyFn, IAM roles use role/MyRole, DynamoDB tables use table/MyTable, and SQS queues use just the queue name.
  • S3 bucket ARNs omit both the region and the account-id segments: arn:aws:s3:::my-bucket.
  • Global services (IAM, CloudFront, Route 53, STS in most cases) omit the region segment.
  • Account IDs in AWS are always 12 numeric digits. Non-numeric or variable-length values trigger a warning.
  • Validation is syntactic only — this tool does not query AWS and cannot tell whether the resource exists.
  • For additional AWS service-specific ARN formats, refer to the official AWS documentation on ARNs.

References:
Tech Blog with curated related content
Web Tools Collection

Written by Hidekazu Konishi