AWS ARN (Amazon Resource Name) Regex for JavaScript

What this pattern does

This page provides a comprehensive, battle-tested regular expression for matching aws arn (amazon resource name), ported and verified for JavaScript. A rigorously tested regex reduces debugging time and protects your application from edge-case failures. The snippet below is ready to drop into your JavaScript project — whether you're validating in an Express middleware, a Next.js API route, or a client-side form.

Javascript Implementation

// AWS ARN (Amazon Resource Name)
// ReDoS-safe | RegexVault — Dev & Systems > Environment

const awsArnAmazonResourceNameRegex = /^arn:(?:aws|aws-cn|aws-us-gov|aws-iso(?:-[a-z])?):([a-z0-9\-]+):([a-z0-9\-]*):([0-9]{12}|):([a-zA-Z0-9\-_\/:.]+)$/;

function validateAwsArnAmazonResourceName(input: string): boolean {
  return awsArnAmazonResourceNameRegex.test(input);
}

// Example
console.log(validateAwsArnAmazonResourceName("arn:aws:s3:::my-bucket")); // true

Test Cases

When to use this pattern

This pattern is drawn from the Dev & Systems > Environment category and carries a ReDoS-safe certification. That matters for JavaScript developers because especially critical in long-running Node.js event loops where a ReDoS vulnerability can block the entire process. RegexVault audits patterns against known backtracking attack vectors, ensuring you have the necessary context before using this regex in a high-stakes production environment.

Common Pitfalls

Technical Notes

Groups: 1=service, 2=region (empty for IAM/S3), 3=account ID (empty for some services), 4=resource. S3 ARNs omit region and account. IAM ARNs include account but not region. Lambda ARNs include both.