AWS resource reference
Supporting data and reference types
Understand reference destinations and nested attachment data that have no public physical creation prefab.
Reference-only destinations
| Target type | Where it is referenced | AWS meaning / current editor limit |
|---|---|---|
| Elastic IP | NAT Gateway. | AWS Elastic IP guide. Public NAT creation may create data-only design data; no physical prefab or generic public Elastic IP authoring action. |
| ACM certificate | Listener Certificates. | AWS ACM guide. Stored certificate association; Atlas does not request/import a live certificate. |
| KMS key | RDS Kms Key. | AWS KMS guide. Stored encryption-key association; no physical prefab. |
| IAM instance profile / IAM role | EC2 Instance Profile; RDS Monitoring Role and Feature Roles. | AWS instance profiles. Reference data does not create an IAM grant. |
| Network interface / EBS volume | EC2 attachment data and Route targets. | AWS network interfaces and EBS volumes. No physical creation prefabs for these destinations. |
| Transit gateway / VPC peering connection | Route target data. | AWS transit gateways and VPC peering. Stored target possibilities, not public creation actions. |
| Lambda / Alb target | TargetGroup registration types. | AWS Lambda targets. A target-type enum does not imply a public Lambda creation workflow. |
Existing EC2 attachment records
| Stored field | Meaning / visibility | Bare defaults / constraints |
|---|---|---|
| Network Interface Attachment.Network Interface | Canonical Atlas network-interface reference. Existing inline record, not a generic attachment creation workflow. | Required; null. |
| Network Interface Attachment.Device Index | Scalar embedded key/index in an existing record. | 0; range 0–31. |
| Network Interface Attachment.Delete On Termination | Scalar lifecycle design flag. | False. |
| EBS Attachment.Volume | Canonical Atlas EBS-volume reference. | Required; null. |
| EBS Attachment.Device Name | Scalar device text and embedded key. | Required, max 255; empty. |
| EBS Attachment.Delete On Termination | Scalar lifecycle design flag. | False. |
Secret references
RDS Master Credentials is a stored secret-reference value, not a plaintext password field and not a live credential connection. The current generic inspector summarises it; it does not provide a complete credential or secret-manager workflow. Do not place real secrets in Names, Tags, Ai Hint, screenshots or support reports.