> For the complete documentation index, see [llms.txt](https://docs.panther.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.panther.com/cloud-scanning/cloud-resource-attributes.md).

# Cloud Resource Attributes

## Overview

When you first connect your AWS account to Panther, all resources are scanned and evaluated against the defined [policies](/detections/policies.md).

See the [list of supported resources here](/cloud-scanning/cloud-resource-attributes/aws.md). Each documentation page for a supported resource includes its schema and a description of each attribute. You can reference the [common fields](#common-fields) below in any policy, as they are shared across all resources.

To submit a feature request for a new resource, please contact Panther Support.

{% hint style="info" %}
A **resource** is an entity within your AWS account, such as an EC2 Instance, S3 Bucket, IAM User, and more.

A **meta resource** provides context on a given service for an entire account, which is useful in understanding whether or not it is configured. For example, the CloudTrail meta resource allows you to ensure at least one CloudTrail is set up in an account.
{% endhint %}

{% hint style="warning" %}
Each resource is limited to 400 KB. Resources exceeding this limit will not be saved.
{% endhint %}

## Common fields

The following attributes are shared across all resources and can be referenced in any policy in Panther:

| Field Name     | Description                                                                                                                                                                                                     |
| -------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `AccountId`    | The ID of the AWS Account the resource resides in                                                                                                                                                               |
| `Arn`          | The fully qualified Amazon Resource Name, if one exists                                                                                                                                                         |
| `Id`           | The AWS unique identifier, if one exists                                                                                                                                                                        |
| `Name`         | The AWS name, if one exists                                                                                                                                                                                     |
| `Region`       | The region the resource exists in, with a value of `GLOBAL_REGION` if the resource is not regional                                                                                                              |
| `ResourceId`   | The Panther unique identifier                                                                                                                                                                                   |
| `ResourceType` | The categorization of the resource, such as `AWS.EC2.Instance`                                                                                                                                                  |
| `Tags`         | A map of key/value pair labels that may be assigned to an AWS resource, when any exist                                                                                                                          |
| `TimeCreated`  | An [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp of when the resource was created. This is not set if the information is not provided by the AWS API or if not applicable, such as in Meta resources |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.panther.com/cloud-scanning/cloud-resource-attributes.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.