AWS uses Amazon Resource Names (ARNs) for many things, including the IAM permissions system, where they are used to whitelist access to specific AWS resources rather than giving service-wide access. In general, they’re a unique account-wide identifier for any service.