Cloud Resource Attributes

Attributes that can be referenced in a policy in Panther


When you first connect to Panther, all resources are scanned and evaluated against the defined policies.

See the list of supported resources here. Each documentation page for a supported resource includes its schema and a description of each attribute. You can reference the common fields below in any policy, as they are shared across all resources.

To submit a feature request for a new resource, please contact Panther Support.

A resource is an entity within your AWS account, such as an EC2 Instance, S3 Bucket, IAM User, and more.

A meta resource provides context on a given service for an entire account, which is useful in understanding whether or not it is configured. For example, the CloudTrail meta resource allows you to ensure at least one CloudTrail is set up in an account.

Common fields

The following attributes are shared across all resources and can be referenced in any policy in Panther:

Field Name



The ID of the AWS Account the resource resides in


The fully qualified Amazon Resource Name, if one exists


The AWS unique identifier, if one exists


The AWS name, if one exists


The region the resource exists in, with a value of GLOBAL_REGION if the resource is not regional


The Panther unique identifier


The categorization of the resource, such as AWS.EC2.Instance


A map of key/value pair labels that may be assigned to an AWS resource, when any exist


An RFC3339 timestamp of when the resource was created. This is not set if the information is not provided by the AWS API or if not applicable, such as in Meta resources

Last updated