AWS deployment guide
Deploy production-ready applications on AWS
Use the sidebar to open a dedicated category page, or search across all AWS service guidance from this overview.
Plan, compare, and launch with fewer gaps
This guide now includes decision support, architecture templates, a stack planner, learning paths, a glossary, and a browser-saved production checklist.
Cloudflare-ready static guide
No backend, no database, no build pipeline required for Pages. Every feature is static HTML and client-side JavaScript.
Compare services
Review fit, tradeoffs, and common pairings.
Architecture templates
Start from common production patterns.
Production checklist
Track launch readiness in the browser.
Stack planner
Generate a recommended service stack.
Learning paths
Follow role-based AWS study paths.
Glossary
Search production architecture terms.
Core path
Start with accounts, IAM, networking, compute, data, CI/CD, observability, security, backups, and cost controls.
Use selectively
Not every app needs every service. Add services when they solve a clear production requirement.
Before go-live
Validate scaling, quotas, rollback, monitoring, restore, incident response, and security evidence.
High availability application design flow
This is a production reference flow for a highly available web or API application running across multiple Availability Zones.
Request and runtime path
- 1Users reach Route 53, which routes the domain to CloudFront or directly to an Application Load Balancer.
- 2CloudFront caches static content from S3 and places AWS WAF in front of public traffic.
- 3The load balancer sends healthy traffic to ECS, EKS, Lambda, or EC2 Auto Scaling targets across at least two Availability Zones.
- 4Application services read secrets from Secrets Manager or Parameter Store and use IAM roles instead of static credentials.
- 5State is kept outside compute in RDS Multi-AZ, Aurora, DynamoDB, ElastiCache, EFS, or S3 depending on the access pattern.
- 6CloudWatch, X-Ray, CloudTrail, Config, GuardDuty, and Security Hub provide metrics, traces, audit history, drift, and threat signals.
Production design checklist
- AZRun compute and data paths across multiple Availability Zones.
- ScaleUse Auto Scaling, target tracking, queue depth, or Lambda concurrency controls.
- DeployPrefer rolling, blue/green, or canary deployments with fast rollback.
- DataEnable backups, point-in-time recovery, encryption, lifecycle rules, and restore drills.
- NetworkUse private subnets for workloads and data stores, controlled egress, security groups, and least-open routing.
- OpsCreate dashboards, alarms, runbooks, budgets, incident contacts, and game-day tests before launch.
Simple application flow from GitHub repo to AWS
Use this path for a small production app, then add more managed services as traffic, compliance, or team needs grow.
Deployment pipeline
- 1Developer pushes code to GitHub and opens a pull request.
- 2GitHub Actions or AWS CodePipeline runs tests, linting, security checks, and builds the artifact or container image.
- 3Artifacts go to S3 or container images go to Amazon ECR with image scanning enabled.
- 4CDK, CloudFormation, Terraform, SAM, or Amplify updates the AWS infrastructure and application environment.
- 5The app deploys to Amplify, S3 plus CloudFront, Elastic Beanstalk, App Runner, ECS Fargate, Lambda, or EC2 depending on app type.
- 6CloudWatch alarms, logs, traces, deployment notifications, and rollback rules confirm whether the release is healthy.
Minimal service map
- FrontendGitHub -> Amplify, or S3 + CloudFront + Route 53 + ACM.
- APIGitHub -> CodePipeline/GitHub Actions -> Lambda + API Gateway, or ECS Fargate + ALB.
- DatabaseDynamoDB for simple serverless NoSQL, RDS/Aurora for relational workloads.
- SecretsSecrets Manager or SSM Parameter Store, never plaintext config in the repo.
- ObservabilityCloudWatch logs, metrics, alarms, dashboards, and X-Ray tracing for request debugging.
- SecurityIAM roles, WAF for public apps, CloudTrail audit logs, GuardDuty threat detection, and AWS Backup where supported.
All AWS service guidance
371 entries| Service | Category | Production use | Before production | Link |
|---|---|---|---|---|
|
Choosing an AWS analytics service
Ask the right questions to build your modern data architecture on AWS
services
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon SageMaker
The center for all data, analytics, and AI
|
Analytics | Train, deploy, and operate ML models for production inference. | Version models, use model registry, endpoint autoscaling, monitoring, rollback, drift checks, and data governance. | Docs |
|
Amazon AppFlow
No-code integration for SaaS apps and AWS services
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon Athena
Query data in Amazon S3 using SQL
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
AWS Clean Rooms
Collaborate and analyze collective datasets without sharing raw data
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon CloudSearch
Managed search service
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
AWS Data Exchange
Find, subscribe to, and use third-party data in the cloud
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon Data Firehose
Fully managed real-time streaming data delivery service
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
AWS Data Pipeline
Orchestration service for periodic, data-driven workflows
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon DataZone
Unlock data across organizational boundaries with built-in governance
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon EMR
Hosted Hadoop framework
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
AWS Entity Resolution
Link records stored across multiple applications, channels, and data
stores
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon FinSpace
Store, catalog, prepare, and analyze financial industry data
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
AWS Glue
Simple, scalable, and serverless data integration
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon Kinesis
Analyze real-time video and data streams
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
AWS Lake Formation
Build a secure data lake in days
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon Managed Service for Apache Flink
Process and analyze streaming data using Apache Flink
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon Managed Streaming for Apache Kafka
Fully managed Apache Kafka service
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon OpenSearch Service
Deploy, operate, and scale OpenSearch clusters in the AWS Cloud
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon Quick
Fast business analytics service
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
Amazon Redshift
Fast, simple, cost-effective data warehouse service
|
Analytics | Use after deployment for product analytics, logs, events, BI, search analytics, and data lake pipelines. | Define data ownership, encrypt storage, use least-privilege access, set lifecycle policies, validate data quality, and add cost controls for scans and retention. | Docs |
|
AWS B2B Data Interchange
Enables automated exchange of EDI-based transactions
|
Application Integration | Use to connect services without tight coupling: APIs, queues, event buses, workflows, and message brokers. | Set retries, dead-letter queues, idempotency, schema/versioning, throttling, alarms for age/backlog/errors, and cross-account permissions. | Docs |
|
Choosing an AWS application integration service
Choose an AWS application integration service for your workloads
|
Application Integration | Use to connect services without tight coupling: APIs, queues, event buses, workflows, and message brokers. | Set retries, dead-letter queues, idempotency, schema/versioning, throttling, alarms for age/backlog/errors, and cross-account permissions. | Docs |
|
Amazon EventBridge
Serverless event bus for SaaS apps and AWS services
|
Application Integration | Build event-driven production integrations across services and SaaS apps. | Define schemas, DLQs, retries, event archive/replay, bus permissions, and alarms on failed invocations. | Docs |
|
Amazon MQ
Managed message broker service
|
Application Integration | Use to connect services without tight coupling: APIs, queues, event buses, workflows, and message brokers. | Set retries, dead-letter queues, idempotency, schema/versioning, throttling, alarms for age/backlog/errors, and cross-account permissions. | Docs |
|
Amazon MWAA
Managed orchestration service for Apache Airflow
|
Application Integration | Use to connect services without tight coupling: APIs, queues, event buses, workflows, and message brokers. | Set retries, dead-letter queues, idempotency, schema/versioning, throttling, alarms for age/backlog/errors, and cross-account permissions. | Docs |
|
Amazon Simple Notification Service
Pub/sub, SMS, email, and mobile push notifications
|
Application Integration | Fan out production notifications to queues, functions, HTTP endpoints, SMS, or email. | Use topic policies, retries/DLQs, filtering, encryption, delivery logs, and subscription confirmation controls. | Docs |
|
Amazon Simple Queue Service
Managed message queues
|
Application Integration | Buffer work between services and absorb production traffic spikes. | Use DLQs, visibility timeout, idempotent consumers, encryption, backlog alarms, and redrive procedures. | Docs |
|
Amazon Simple Workflow Service
Build applications that coordinate work across distributed components
|
Application Integration | Use to connect services without tight coupling: APIs, queues, event buses, workflows, and message brokers. | Set retries, dead-letter queues, idempotency, schema/versioning, throttling, alarms for age/backlog/errors, and cross-account permissions. | Docs |
|
AWS Step Functions
Coordination for distributed applications
|
Application Integration | Orchestrate multi-step production workflows and long-running business processes. | Use retries/catches, timeouts, idempotent tasks, execution history retention, versioning, and alarms on failures. | Docs |
|
AWS Console Mobile Application
View and manage resources to support incident response while on the
go
|
AWS Management Console | Use for secure admin workflows and emergency operations, not as the only deployment method. | Require MFA/SSO, avoid long-lived root use, document break-glass access, and prefer IaC/CI/CD for repeatable production changes. | Docs |
|
AWS Management Console
Web-based user interface comprising multiple AWS service consoles
|
AWS Management Console | Use for secure admin workflows and emergency operations, not as the only deployment method. | Require MFA/SSO, avoid long-lived root use, document break-glass access, and prefer IaC/CI/CD for repeatable production changes. | Docs |
|
Amazon Q
Generative AI-powered assistants
|
AWS Management Console | Use for secure admin workflows and emergency operations, not as the only deployment method. | Require MFA/SSO, avoid long-lived root use, document break-glass access, and prefer IaC/CI/CD for repeatable production changes. | Docs |
|
AWS Sign-In
Find help signing in and out of your account
|
AWS Management Console | Use for secure admin workflows and emergency operations, not as the only deployment method. | Require MFA/SSO, avoid long-lived root use, document break-glass access, and prefer IaC/CI/CD for repeatable production changes. | Docs |
|
AWS Blockchain Templates
Quickly create and deploy open-source blockchain frameworks on AWS
|
Blockchain | Use only when the app genuinely needs shared ledger or blockchain network features. | Validate governance, key custody, backup, monitoring, compliance, and integration boundaries before production. | Docs |
|
Amazon Managed Blockchain
Create and manage scalable blockchain networks
|
Blockchain | Use only when the app genuinely needs shared ledger or blockchain network features. | Validate governance, key custody, backup, monitoring, compliance, and integration boundaries before production. | Docs |
|
Amazon Connect Customer
Omnichannel cloud contact center
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
AWS App Studio
Build internal applications to automate processes and simplify
organization activities
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
AWS AppFabric
Aggregate and analyze data across SaaS applications
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
Amazon Chime
Frustration-free meetings, video calls, and chat
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
Amazon Chime SDK
Real-time messaging, audio, video, and screen sharing
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
Amazon Connect Decisions
Adaptive intelligence solution for supply chain planning and decision
making
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
Amazon Connect Health
Agentic AI for healthcare that's built around the people that
deliver it
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
AWS End User Messaging Push
Application-to-person push notification service
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
AWS End User Messaging SMS
Application-to-person SMS messaging service
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
AWS End User Messaging Social
Application-to-person WhatsApp messaging service
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
Amazon Pinpoint
Multichannel marketing communications
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
Amazon Simple Email Service
High-scale inbound and outbound email
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
AWS Supply Chain
Reduce risks and lower costs with ML-powered supply chain application
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
AWS Wickr
Protect enterprise communications with end-to-end encryption
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
Amazon WorkMail
Secure email and calendaring
|
Business Applications | Use for business-facing workflows around support, email, contact center, productivity, and operations. | Plan identity integration, data retention, encryption, compliance, user access reviews, and operational ownership. | Docs |
|
AWS Billing and Cost Management
Find features that help you pay your bills and optimize your costs
|
Cloud Financial Management | Use from day one to keep production cost visible and controlled. | Add budgets, alerts, tags, cost allocation, anomaly detection, reserved capacity review, and regular cost optimization rituals. | Docs |
|
Choosing an AWS cost management strategy
Ask the right questions to determine which cost management services
fit your needs
|
Cloud Financial Management | Use from day one to keep production cost visible and controlled. | Add budgets, alerts, tags, cost allocation, anomaly detection, reserved capacity review, and regular cost optimization rituals. | Docs |
|
AWS Flat-Rate Plans
Provides simplified billing for integrated AWS service packages
|
Cloud Financial Management | Use from day one to keep production cost visible and controlled. | Add budgets, alerts, tags, cost allocation, anomaly detection, reserved capacity review, and regular cost optimization rituals. | Docs |
|
AWS Pricing Calculator
Create cost estimates that match your AWS use case
|
Cloud Financial Management | Use from day one to keep production cost visible and controlled. | Add budgets, alerts, tags, cost allocation, anomaly detection, reserved capacity review, and regular cost optimization rituals. | Docs |
|
Savings Plans
Save on compute usage with flexible pricing
|
Cloud Financial Management | Use from day one to keep production cost visible and controlled. | Add budgets, alerts, tags, cost allocation, anomaly detection, reserved capacity review, and regular cost optimization rituals. | Docs |
|
Choosing an AWS compute service
Choose the right AWS compute services for your workloads
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
Choosing a purchasing option for Amazon Elastic Compute Cloud
Choose the Amazon EC2 purchasing option that fits your workload
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
AWS App Runner
Production web applications at scale made easy for developers
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
Amazon Lightsail
Launch and manage virtual private servers
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
Amazon Linux
Portfolio of modern Linux-based high performance operating systems
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
AWS Batch
Run batch jobs at any scale
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
EC2 Image Builder
Automate lifecycle management of "golden" server images
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
AWS Elastic Beanstalk
Run and manage web apps
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
Amazon Elastic Compute Cloud
Create and run virtual servers in the cloud with Amazon EC2
|
Compute | Run application servers, workers, bastion replacements, or custom workloads that need OS-level control. | Bake hardened AMIs, use Auto Scaling across AZs, attach ALB/NLB, patch regularly, use SSM instead of SSH, and monitor CPU/memory/disk/app health. | Docs |
|
AWS Lambda
Run code without thinking about servers
|
Compute | Run event-driven APIs, scheduled jobs, webhooks, stream processors, and lightweight backend logic. | Use versions/aliases, reserved concurrency, retries/DLQ, structured logs, tracing, secrets from managed stores, and alarms on errors/throttles/duration. | Docs |
|
AWS Local Zones
Run latency sensitive applications closer to end users
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
AWS Outposts
Run AWS infrastructure on-premises
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
AWS Parallel Computing Service
Easily run HPC workloads at virtually any scale
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
AWS ParallelCluster
Deploy and manage high performance computing clusters in the AWS
Cloud
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
AWS Serverless Application Model
Build serverless applications on AWS
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
AWS Serverless Application Repository
Discover, deploy, and publish serverless applications
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
AWS Wavelength
Deliver ultra-low latency applications for 5G devices
|
Compute | Use to run application workloads: virtual machines, batch jobs, containers, managed app platforms, or serverless compute. | Deploy across multiple AZs, automate builds, define scaling policies, patching, health checks, rollback, image hardening, and alarms. | Docs |
|
Research and Engineering Studio on AWS
Create and manage portals for research collaboration
|
Compute HPC | Use for production-grade high performance computing, simulations, rendering, and batch-heavy workloads. | Plan queues, schedulers, fast storage, quotas, job retry, cluster observability, and cost shutdown automation. | Docs |
|
Choosing an AWS container service
Choose the right AWS container service for your modern app
development
|
Containers | Use when applications are packaged as containers and need orchestration, image security, and repeatable deployment. | Scan images, pin versions, use private registries, configure autoscaling, readiness checks, secrets, network policies, and rollout strategy. | Docs |
|
AWS App2Container
Containerize and migrate existing applications
|
Containers | Use when applications are packaged as containers and need orchestration, image security, and repeatable deployment. | Scan images, pin versions, use private registries, configure autoscaling, readiness checks, secrets, network policies, and rollout strategy. | Docs |
|
Amazon Elastic Container Registry
Easily store, manage, and deploy container images
|
Containers | Use when applications are packaged as containers and need orchestration, image security, and repeatable deployment. | Scan images, pin versions, use private registries, configure autoscaling, readiness checks, secrets, network policies, and rollout strategy. | Docs |
|
Amazon Elastic Container Service
Highly secure, reliable, and scalable way to run containers
|
Containers | Run containerized services on EC2 or Fargate. | Use task definitions, service autoscaling, health checks, private subnets, secrets, image scanning, and rolling/blue-green deploys. | Docs |
|
Amazon Elastic Kubernetes Service
Run Kubernetes on AWS without operating your own Kubernetes clusters
|
Containers | Run Kubernetes workloads with AWS-managed control plane. | Harden cluster access, use IRSA, node upgrades, network policies, autoscaling, ingress controls, observability, and backup manifests. | Docs |
|
Red Hat OpenShift Service on AWS
Managed OpenShift in the cloud
|
Containers | Use when applications are packaged as containers and need orchestration, image security, and repeatable deployment. | Scan images, pin versions, use private registries, configure autoscaling, readiness checks, secrets, network policies, and rollout strategy. | Docs |
|
AWS Certificate Manager
Provision, manage, and deploy SSL/TLS certificates
|
Cryptography & PKI | Use to protect keys, certificates, code signing, encryption, and trust boundaries. | Rotate keys/certs, separate duties, restrict key policies, log usage, test expiry handling, and document recovery processes. | Docs |
|
Choosing an AWS cryptography service
Choose the right AWS cryptography service
|
Cryptography & PKI | Use to protect keys, certificates, code signing, encryption, and trust boundaries. | Rotate keys/certs, separate duties, restrict key policies, log usage, test expiry handling, and document recovery processes. | Docs |
|
AWS CloudHSM
Hardware-based key storage for regulatory compliance
|
Cryptography & PKI | Use to protect keys, certificates, code signing, encryption, and trust boundaries. | Rotate keys/certs, separate duties, restrict key policies, log usage, test expiry handling, and document recovery processes. | Docs |
|
AWS Crypto Tools
Helping you do cryptography right, even without special expertise
|
Cryptography & PKI | Use to protect keys, certificates, code signing, encryption, and trust boundaries. | Rotate keys/certs, separate duties, restrict key policies, log usage, test expiry handling, and document recovery processes. | Docs |
|
AWS Key Management Service
Managed creation and control of encryption keys
|
Cryptography & PKI | Manage encryption keys used by storage, databases, logs, and apps. | Use customer-managed keys where needed, key policies, rotation, grants, usage logs, and separation of duties. | Docs |
|
AWS Private Certificate Authority
Create private certificates to identify resources and protect data
|
Cryptography & PKI | Use to protect keys, certificates, code signing, encryption, and trust boundaries. | Rotate keys/certs, separate duties, restrict key policies, log usage, test expiry handling, and document recovery processes. | Docs |
|
AWS Signer
Validate AWS Lambda and IoT device code against a digital signature
|
Cryptography & PKI | Use to protect keys, certificates, code signing, encryption, and trust boundaries. | Rotate keys/certs, separate duties, restrict key policies, log usage, test expiry handling, and document recovery processes. | Docs |
|
AWS IQ
Find AWS Certified third-party experts for on-demand project work
|
Customer Enablement Services | Use to accelerate adoption, training, architecture review, and support for production workloads. | Choose support level, run Well-Architected reviews, train operators, and document escalation paths. | Docs |
|
AWS Incident Detection and Response
Proactive monitoring and incident management for production workloads
|
Customer Enablement Services | Use to accelerate adoption, training, architecture review, and support for production workloads. | Choose support level, run Well-Architected reviews, train operators, and document escalation paths. | Docs |
|
AWS Managed Services
Infrastructure operations management for AWS
|
Customer Enablement Services | Use to accelerate adoption, training, architecture review, and support for production workloads. | Choose support level, run Well-Architected reviews, train operators, and document escalation paths. | Docs |
|
AWS Professional Services
Get help executing your enterprise cloud computing initiatives
|
Customer Enablement Services | Use to accelerate adoption, training, architecture review, and support for production workloads. | Choose support level, run Well-Architected reviews, train operators, and document escalation paths. | Docs |
|
AWS re:Post Private
Build an organization-specific knowledge resource for your cloud
community
|
Customer Enablement Services | Use to accelerate adoption, training, architecture review, and support for production workloads. | Choose support level, run Well-Architected reviews, train operators, and document escalation paths. | Docs |
|
AWS Training and Certification
Explore AWS learning opportunities
|
Customer Enablement Services | Use to accelerate adoption, training, architecture review, and support for production workloads. | Choose support level, run Well-Architected reviews, train operators, and document escalation paths. | Docs |
|
Choosing an AWS database service
Choose the right AWS database service
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Amazon Aurora
High performance managed relational database engine
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Amazon Aurora DSQL
Fastest serverless distributed SQL database for always available
applications
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Amazon DocumentDB (with MongoDB compatibility)
Fully managed document database
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Amazon DynamoDB
Managed NoSQL database
|
Database | Run low-latency NoSQL tables for serverless and high-scale applications. | Design keys carefully, enable PITR, autoscaling/on-demand capacity, GSIs, TTL, streams if needed, alarms for throttles, and access policies. | Docs |
|
Amazon ElastiCache
In-memory caching service
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Amazon Keyspaces (for Apache Cassandra)
Managed Cassandra-compatible database
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Amazon MemoryDB
Redis-compatible, durable, in-memory database service
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Amazon Neptune
Fully managed graph database service
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Oracle Database@AWS
Access Oracle Exadata infrastructure managed by OCI inside AWS data
centers
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Amazon Relational Database Service
Set up, operate, and scale a relational database in the cloud
|
Database | Run managed relational databases for production application data. | Use Multi-AZ, automated backups/PITR, parameter groups, encryption, performance insights, connection pooling, migrations, and restore tests. | Docs |
|
Amazon Timestream
Fully managed time series database
|
Database | Use for durable production data stores, caches, search stores, and relational or NoSQL persistence. | Enable backups/PITR, Multi-AZ where available, encryption, migrations, connection pooling, monitoring, capacity planning, and restore drills. | Docs |
|
Choosing a generative AI service
Determine which AWS generative AI services are the best fit for your
organization
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Amazon Bedrock or Amazon SageMaker AI?
Determine which service is the best fit for your needs
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
AWS CloudTrail or Amazon CloudWatch?
Understand the differences and pick the one that's right for you
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
AWS Fargate or AWS Lambda?
Explore which service better meets your needs for a serverless
compute service
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Amazon Lightsail or Amazon EC2?
Explore which service better meets your needs for a compute web
service
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Amazon SQS, Amazon SNS, or Amazon EventBridge?
Choose the best service for your needs
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
AWS WAF or AWS Shield?
Understand the differences and pick the one that's right for you
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS application integration service
Choose an AWS application integration service for your workloads
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing a modern application strategy
Choose a modern application development approach
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS analytics service
Ask the right questions to build your modern data architecture on AWS
services
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS cloud governance service
Choose the right cloud governance services for your organization
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS container service
Choose the right AWS container service for your modern app
development
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS cost management strategy
Ask the right questions to determine which cost management services
fit your needs
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS compute service
Choose the right AWS compute services for your workloads
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing a purchasing option for Amazon Elastic Compute Cloud
Choose the Amazon EC2 purchasing option that fits your workload
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS cryptography service
Choose the right AWS cryptography service
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS database service
Choose the right AWS database service
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing a database for your generative AI applications
Choose the right AWS vector databases and vector search options
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing AWS frontend and mobile services
Ask the right questions to build your web or mobile app on AWS
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS identity service
Choose the right AWS identity service
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS IoT service
Choose the right AWS IoT services
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS machine learning service
Choose the right ML services and frameworks to support your work
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing AWS migration services and tools
Choose the right AWS tools and services for your migration
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS monitoring and observability service
Choose the right AWS monitoring and observability service
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS networking and content delivery service
Choose the right AWS networking and content delivery services
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing AWS security, identity, and governance services
Find the AWS security, identity, and governance services and tools
that fit your needs
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
Choosing an AWS storage service
Choose the right AWS storage service
|
Decision Guides | Use during architecture design to choose the right AWS service before building production systems. | Record decisions, assumptions, tradeoffs, failure modes, and revisit choices as scale or requirements change. | Docs |
|
AWS Cloud Control API
Manage AWS and third-party cloud infrastructure with consistent APIs
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS Cloud9
Write, run, and debug code on a cloud IDE
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS CloudShell
Command line access to AWS resources and tools directly from a
browser
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS CodeArtifact
Artifact management for software development
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS CodeBuild
Build and test code
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
Amazon CodeCatalyst
Unified software development service to develop and deliver on AWS
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS CodeDeploy
Automate code deployments
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS CodePipeline
Release software using continuous delivery
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS Fault Injection Service
Improve resiliency and performance with controlled experiments
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS Infrastructure Composer
Design and build your modern infrastructure through a visual builder
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
Kiro
AI coding with spec-driven development
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS Microservice Extractor for .NET
Reduce time and effort to convert large applications to microservices
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
Porting Assistant for .NET
Port Microsoft .NET Framework applications to .NET Core
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
SDKs and Tools Reference Guide
Find information applicable to multiple SDKs and tools
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS X-Ray
Analyze and debug your applications
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
Agent Toolkit for AWS
Tools, knowledge, and guardrails AI coding agents need to build,
deploy, and manage applications on AWS
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS App Studio
Build internal applications to automate processes and simplify
organization activities
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS Cloud Development Kit (AWS CDK)
Define cloud infrastructure using familiar programming languages
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
Amazon Connect Health
Agentic AI for healthcare that's built around the people that
deliver it
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
Amazon Corretto
A no-cost, multiplatform, production-ready distribution of OpenJDK
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS SDK for .NET
Develop applications with .NET-specific APIs and libraries
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS SDK for C++
Develop applications with C++-specific APIs
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS SDK for Go
Develop applications with Go-specific APIs and libraries
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS SDK for Java
Develop applications with Java-specific APIs and libraries
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS SDK for JavaScript
Develop applications with JavaScript-specific APIs and libraries
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS SDK for Kotlin
Develop applications with Kotlin-specific APIs
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS SDK for PHP
Develop applications with PHP-specific APIs and libraries
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS SDK for Python (Boto3)
Develop applications with Python-specific APIs and libraries
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS SDK for Ruby
Develop applications with Ruby-specific APIs and libraries
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
SDK for Rust
Develop applications with Rust-specific APIs and libraries
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
SDK for SAP ABAP
Develop applications with a client library of modules
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
SDK for Swift
Develop applications with Swift-specific APIs and libraries
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
Toolkit for .NET Refactoring
Reduce time and effort to refactor legacy .NET apps for AWS Cloud
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS Toolkit for JetBrains
Open-source plugin for the integrated development environments (IDEs)
for JetBrains
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS Toolkit for Microsoft Azure DevOps
Extension for hosted and on-premises Microsoft Azure DevOps
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
Toolkit for Visual Studio
Plugin for the Visual Studio integrated development environment (IDE)
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS Toolkit for Visual Studio Code
Open-source extension for the Visual Studio Code editor
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
AWS Tools for PowerShell
PowerShell modules built on the functionality exposed by the SDK for
.NET
|
Developer Tools | Use for source control, CI/CD, build artifacts, deployment automation, testing, and developer productivity. | Require approvals, branch protections, artifact signing, environment promotion, rollback, secret handling, and audit logs. | Docs |
|
Amazon WorkSpaces
Virtual desktops in the cloud
|
End User Computing | Use for secure desktops, app streaming, and controlled access to internal tools. | Integrate identity, restrict data movement, patch images, monitor sessions, and define user lifecycle automation. | Docs |
|
Amazon WorkSpaces Applications
Stream desktop applications securely to a browser
|
End User Computing | Use for secure desktops, app streaming, and controlled access to internal tools. | Integrate identity, restrict data movement, patch images, monitor sessions, and define user lifecycle automation. | Docs |
|
Amazon WorkSpaces Core
Virtual desktop infrastructure that works with third-party solutions
|
End User Computing | Use for secure desktops, app streaming, and controlled access to internal tools. | Integrate identity, restrict data movement, patch images, monitor sessions, and define user lifecycle automation. | Docs |
|
Amazon WorkSpaces Thin Client
Affordable, easy-to-manage device to securely access virtual desktops
|
End User Computing | Use for secure desktops, app streaming, and controlled access to internal tools. | Integrate identity, restrict data movement, patch images, monitor sessions, and define user lifecycle automation. | Docs |
|
Amazon DCV
Connect securely to graphic-intensive 3D apps on remote servers
|
End User Computing | Use for secure desktops, app streaming, and controlled access to internal tools. | Integrate identity, restrict data movement, patch images, monitor sessions, and define user lifecycle automation. | Docs |
|
Amazon WorkSpaces Secure Browser
Provide secure access to internal websites and SaaS applications
|
End User Computing | Use for secure desktops, app streaming, and controlled access to internal tools. | Integrate identity, restrict data movement, patch images, monitor sessions, and define user lifecycle automation. | Docs |
|
Choosing AWS frontend and mobile services
Ask the right questions to build your web or mobile app on AWS
|
Front-End Web & Mobile | Use to build, host, authenticate, and operate customer-facing web/mobile apps. | Add custom domains, TLS, CI/CD, auth rules, WAF/CDN where needed, analytics, error monitoring, and environment separation. | Docs |
|
AWS Amplify
Build, deploy, host, and manage scalable web and mobile apps
|
Front-End Web & Mobile | Use to build, host, authenticate, and operate customer-facing web/mobile apps. | Add custom domains, TLS, CI/CD, auth rules, WAF/CDN where needed, analytics, error monitoring, and environment separation. | Docs |
|
AWS Amplify (AWS Mobile SDK for Android)
Build native Android applications powered by AWS
|
Front-End Web & Mobile | Use to build, host, authenticate, and operate customer-facing web/mobile apps. | Add custom domains, TLS, CI/CD, auth rules, WAF/CDN where needed, analytics, error monitoring, and environment separation. | Docs |
|
AWS AmplifyiOS (AWS Mobile SDK for iOS)
Build native iOS applications powered by AWS
|
Front-End Web & Mobile | Use to build, host, authenticate, and operate customer-facing web/mobile apps. | Add custom domains, TLS, CI/CD, auth rules, WAF/CDN where needed, analytics, error monitoring, and environment separation. | Docs |
|
AWS AppSync
Accelerate app development with fully-managed, scalable GraphQL APIs
|
Front-End Web & Mobile | Use to build, host, authenticate, and operate customer-facing web/mobile apps. | Add custom domains, TLS, CI/CD, auth rules, WAF/CDN where needed, analytics, error monitoring, and environment separation. | Docs |
|
AWS Device Farm
Test Android, iOS, and web apps on real devices in the AWS Cloud
|
Front-End Web & Mobile | Use to build, host, authenticate, and operate customer-facing web/mobile apps. | Add custom domains, TLS, CI/CD, auth rules, WAF/CDN where needed, analytics, error monitoring, and environment separation. | Docs |
|
Amazon Location Service
Securely and easily add location data to applications
|
Front-End Web & Mobile | Use to build, host, authenticate, and operate customer-facing web/mobile apps. | Add custom domains, TLS, CI/CD, auth rules, WAF/CDN where needed, analytics, error monitoring, and environment separation. | Docs |
|
AWS Mobile SDK for Unity
Find .NET classes that enable games written with Unity to utilize AWS
|
Front-End Web & Mobile | Use to build, host, authenticate, and operate customer-facing web/mobile apps. | Add custom domains, TLS, CI/CD, auth rules, WAF/CDN where needed, analytics, error monitoring, and environment separation. | Docs |
|
Amazon Silk
Create a faster, more responsive mobile browsing experience
|
Front-End Web & Mobile | Use to build, host, authenticate, and operate customer-facing web/mobile apps. | Add custom domains, TLS, CI/CD, auth rules, WAF/CDN where needed, analytics, error monitoring, and environment separation. | Docs |
|
Amazon GameLift Servers
Simple, fast, cost-effective dedicated game server hosting
|
Game Development | Use for game backends, multiplayer sessions, player data, and live operations. | Plan latency, region placement, matchmaking, autoscaling, DDoS protection, telemetry, and live rollback. | Docs |
|
Amazon GameLift Streams
High frame rate, low-latency game streaming to devices at global
scale
|
Game Development | Use for game backends, multiplayer sessions, player data, and live operations. | Plan latency, region placement, matchmaking, autoscaling, DDoS protection, telemetry, and live rollback. | Docs |
|
Amazon Lumberyard
A free cross-platform 3D game engine (binaries no longer offered)
|
Game Development | Use for game backends, multiplayer sessions, player data, and live operations. | Plan latency, region placement, matchmaking, autoscaling, DDoS protection, telemetry, and live rollback. | Docs |
|
AWS Diagnostic Tools
Diagnostic tools for partners in the Partner-Led Support program
|
General Reference | Use as production reference material for endpoints, quotas, SDK behavior, APIs, and service limits. | Check quotas before launch, document regions, validate API compatibility, and include limits in load tests. | Docs |
|
AWS Glossary
Find definitions for AWS terms
|
General Reference | Use as production reference material for endpoints, quotas, SDK behavior, APIs, and service limits. | Check quotas before launch, document regions, validate API compatibility, and include limits in load tests. | Docs |
|
AWS Lifecycle changes
Stay informed about AWS service availability changes
|
General Reference | Use as production reference material for endpoints, quotas, SDK behavior, APIs, and service limits. | Check quotas before launch, document regions, validate API compatibility, and include limits in load tests. | Docs |
|
AWS Security Credentials
Learn how to specify AWS security credentials
|
General Reference | Use as production reference material for endpoints, quotas, SDK behavior, APIs, and service limits. | Check quotas before launch, document regions, validate API compatibility, and include limits in load tests. | Docs |
|
AWS Service Endpoints
Connect programmatically to an AWS service using endpoints
|
General Reference | Use as production reference material for endpoints, quotas, SDK behavior, APIs, and service limits. | Check quotas before launch, document regions, validate API compatibility, and include limits in load tests. | Docs |
|
Service Quotas reference
View the AWS workload quotas for AWS services
|
General Reference | Use as production reference material for endpoints, quotas, SDK behavior, APIs, and service limits. | Check quotas before launch, document regions, validate API compatibility, and include limits in load tests. | Docs |
|
AWS Support
Learn about the components and features that AWS Support provides
|
General Reference | Use as production reference material for endpoints, quotas, SDK behavior, APIs, and service limits. | Check quotas before launch, document regions, validate API compatibility, and include limits in load tests. | Docs |
|
Tagging AWS Resources
Assign metadata to your AWS resources in the form of tags
|
General Reference | Use as production reference material for endpoints, quotas, SDK behavior, APIs, and service limits. | Check quotas before launch, document regions, validate API compatibility, and include limits in load tests. | Docs |
|
Choosing an AWS IoT service
Choose the right AWS IoT services
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
FreeRTOS
Real-time operating system for microcontrollers
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
AWS IoT Core
Connect devices to the cloud
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
AWS IoT Device Defender
Security management for IoT devices
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
AWS IoT Device Management
Onboard, organize, and remotely manage IoT devices
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
AWS IoT ExpressLink
Quickly and easily develop secure IoT devices
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
AWS IoT FleetWise
Unlock the value of vehicle data
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
AWS IoT Greengrass
Local compute, messaging, and sync for devices
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
AWS IoT SiteWise
IoT data collector and interpreter
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
AWS IoT TwinMaker
Optimize operations by creating digital twins of real-world systems
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
AWS IoT Wireless
Secure bi-directional communication for LoRaWAN and Sidewalk end
devices
|
Internet of Things (IoT) | Use for device fleets, secure device communication, edge processing, and telemetry. | Provision device identity, certificate rotation, OTA updates, rules, offline behavior, fleet monitoring, and alerting. | Docs |
|
Choosing an AWS machine learning service
Choose the right ML services and frameworks to support your work
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon A2I
Easily implement human review of ML predictions
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Agent Toolkit for AWS
Tools, knowledge, and guardrails AI coding agents need to build,
deploy, and manage applications on AWS
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Apache MXNet on AWS
Scalable, open-source deep learning framework
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
AWS App Studio
Build internal applications to automate processes and simplify
organization activities
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Bedrock
Access best-in-class foundation models to build generative AI
applications
|
Machine Learning | Build production generative AI features with managed foundation models. | Control model access, log prompts safely, evaluate outputs, add guardrails, monitor latency/cost, and protect sensitive data. | Docs |
|
Amazon Bedrock AgentCore
Deploy and operate agents at scale using any framework and model
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Claude Platform on AWS
Access the native Anthropic platform with AWS billing and security
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon CodeGuru
Find your most expensive lines of code
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Comprehend
Discover insights and relationships in text
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Comprehend Medical
Detect and return useful information in unstructured clinical text
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Connect Health
Agentic AI for healthcare that's built around the people that
deliver it
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
AWS Deep Learning AMIs
Deep learning on Amazon EC2
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
AWS Deep Learning Containers
Docker images for deep learning
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon DevOps Guru
Improve application availability with ML-powered cloud operations
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Forecast
Increase forecast accuracy using machine learning
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Fraud Detector
Detect more online fraud faster
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
AWS HealthImaging
Manage medical imaging data
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
AWS HealthLake
Securely store, transform, query, and analyze health data in minutes
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
AWS HealthOmics
Transform omics data into insights
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Kendra
Reinvent enterprise search with ML
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Lex
Build voice and text chatbots
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Machine Learning
Learn about Amazon machine learning services
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Monitron
Reduce unplanned equipment downtime with predictive maintenance and
ML
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Nova
A family of foundation models for Amazon Bedrock
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Nova Act
Build and manage fleets of reliable AI agents to automate UI
workflows
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
AWS Panorama
Improve your operations with computer vision at the edge
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Personalize
Build real-time recommendations into your applications
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Polly
Turn text into life-like speech
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Rekognition
Analyze image and video
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon SageMaker AI
Build, train, and deploy machine learning models at scale
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Textract
Extract text and data from documents
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Transcribe
Automatic speech recognition
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
Amazon Translate
Natural and fluent language translation
|
Machine Learning | Use for model training, inference, feature pipelines, generative AI, and ML operations. | Version datasets/models/prompts, monitor drift/latency/cost, secure model access, review safety, and automate deployment/rollback. | Docs |
|
AWS Account Management
Manage your AWS accounts as a group
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS AppConfig
Quickly deploy application configurations to applications of any size
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
Choosing an AWS monitoring and observability service
Choose the right AWS monitoring and observability service
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS CloudFormation
Create and manage resources with templates
|
Management & Governance | Provision production infrastructure as code. | Use reviewed templates, change sets, drift detection, stack policies, parameter separation, and rollback planning. | Docs |
|
AWS CloudTrail
Track and monitor activities by users, roles, or AWS services
|
Management & Governance | Audit AWS API activity across accounts and regions. | Enable organization trails, log file validation, S3/KMS protection, CloudWatch/SIEM forwarding, and alert on sensitive actions. | Docs |
|
Amazon Q Developer in chat applications
ChatOps for AWS
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
Amazon CloudWatch
Monitor resources and applications
|
Management & Governance | Collect production metrics, logs, dashboards, alarms, and traces. | Create service-level alarms, log retention, structured logs, dashboards, anomaly detection, and incident notifications. | Docs |
|
Amazon EC2 Auto Scaling
Scale multiple resources to meet demand
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Security Agent
AI-powered agent that proactively secures your applications
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Command Line Interface
Command line interface tool to manage AWS services
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Compute Optimizer
Identify optimal AWS compute resources
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Config
Track and evaluate configuration changes
|
Management & Governance | Track resource configuration and compliance over time. | Enable recorders, managed/custom rules, aggregators, remediation, and alerts for drift from standards. | Docs |
|
AWS Console Mobile Application
View and manage resources to support incident response while
on-the-go
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Control Tower
Set up and govern a secure, compliant multi-account environment
|
Management & Governance | Set up and govern a multi-account AWS landing zone. | Customize account factory, guardrails, logging, security accounts, network baselines, and drift remediation. | Docs |
|
Amazon Data Lifecycle Manager
Automate management of Amazon EBS snapshots and Amazon EBS-backed
AMIs
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS DevOps Agent
AI agent that resolves and proactively prevents AWS incidents
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Health
Find information about events that can affect your AWS resources
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Launch Wizard
Easily size, configure, and deploy third-party applications on AWS
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS License Manager
Track and manage software licenses across multiple AWS Regions
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
Amazon Managed Grafana
Visualize and analyze your operational data at scale
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
Amazon Managed Service for Prometheus
Highly available, secure, and managed monitoring for your containers
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Management Console
Web-based user interface comprising multiple AWS service consoles
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Organizations
Central governance and management across AWS accounts
|
Management & Governance | Structure production, staging, security, shared services, and sandbox accounts. | Use SCPs, account baselines, centralized billing, delegated admin, and separate blast-radius boundaries. | Docs |
|
AWS Proton
Automate management for container and serverless deployments
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Resilience Hub
Prepare and protect your applications from disruptions
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Resource Explorer
Search for and discover relevant resources across AWS
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Resource Groups
See your resources across the AWS Regions in your AWS account
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Service Catalog
Create and use standardized products
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Service Management Connector
Provision, manage, and operate AWS resources within ITSM tools
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
Service Quotas
View and manage your AWS workload quotas easily and at scale
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Sustainability
Provides a suite of features to help you understand your
environmental impact from using AWS services
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Systems Manager
Gain operational insights and take action
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Systems Manager Incident Manager
Mitigate and recover from incidents affecting your applications
hosted on AWS
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
Tag Editor
Add, edit, or delete tags on multiple AWS resources
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Telco Network Builder
Automate the deployment and management of your telco networks on AWS
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Tools for PowerShell
Script operations on AWS resources from the PowerShell command line
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Trusted Advisor
Optimize performance and security
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS User Notifications
Unifies the notification experience across AWS services
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Well-Architected Tool
Review and improve your workloads
|
Management & Governance | Use as the operational backbone for production accounts, logs, metrics, automation, compliance, and inventory. | Centralize logs, define alerts, use IaC, enforce policies, manage accounts, tag resources, and run incident drills. | Docs |
|
AWS Marketplace
Buy or sell software that runs on AWS
|
Marketplace | Use when buying third-party software for production workloads. | Review licensing, support SLAs, security posture, upgrade path, vendor access, and cost model. | Docs |
|
AWS Cloud Digital Interface SDK
Migrate timing-critical uncompressed video workflows to the cloud
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
AWS Deadline Cloud
Simplified render management and scalable infrastructure for
rendering projects
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
AWS Elemental Inference
Apply machine learning models to video
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
AWS Elemental MediaConnect
Reliable and secure live video transport
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
AWS Elemental MediaConvert
Convert file-based video content
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
AWS Elemental MediaLive
Convert live video content
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
AWS Elemental MediaPackage
Video origination and packaging
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
AWS Elemental MediaTailor
Video personalization and monetization
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
AWS Elemental On-Premises
Encode and package video assets with on-premises software
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
Amazon Interactive Video Service
Build engaging live stream experiences using IVS
|
Media Services | Use for video/audio/image processing, live streaming, encoding, packaging, and delivery. | Plan throughput, content protection, DRM, CDN, alarms, storage lifecycle, and fallback pipelines. | Docs |
|
Choosing AWS migration services and tools
Choose the right AWS tools and services for your migration
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS Application Discovery Service
Discover on-premises applications to streamline migration
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS Data Transfer Terminal
Secure, physical locations for quick transfer of data to AWS
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS Database Migration Service
Migrate databases with minimal downtime
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS DataSync
Simple, fast, online data transfer
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
Amazon Elastic VMware Service
Migrate and operate a VCF environment on Amazon EC2 within your VPC
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS Mainframe Modernization
Migrate, modernize, operate, and run mainframe workloads
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS Migration Hub
Track migrations from a single place
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS Schema Conversion Tool
Convert source schema and most code to target-compatible format
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS Transfer Family
Fully managed SFTP, FTPS, and FTP service
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS Transform
Use agentic AI to accelerate the transformation of infrastructure,
applications, and code
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
AWS Transform MGN
Automate application migration and modernization
|
Migration & Transfer | Use to move existing apps, servers, databases, files, and identities into AWS. | Do discovery, test migrations, validate cutover/rollback, sync deltas, and run performance/security checks before production traffic. | Docs |
|
Amazon API Gateway
Build, deploy, and manage APIs
|
Networking & Content Delivery | Expose REST, HTTP, or WebSocket APIs for production apps. | Use stages, custom domains, auth, throttling, request validation, logging, WAF where needed, and canary deployments. | Docs |
|
AWS App Mesh
Monitor and control microservices
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
Choosing an AWS networking and content delivery service
Choose the right AWS networking and content delivery services
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
AWS Cloud Map
Service discovery for cloud resources
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
Amazon CloudFront
Global content delivery network
|
Networking & Content Delivery | Serve web apps, APIs, media, and downloads globally with caching and TLS. | Use ACM certificates, origin access control, cache policies, WAF, security headers, invalidation strategy, and logging. | Docs |
|
AWS Direct Connect
Dedicated network connection to AWS
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
Elastic Load Balancing
Distribute incoming traffic across multiple targets
|
Networking & Content Delivery | Distribute production traffic across EC2, containers, IPs, or Lambda. | Use health checks, TLS policies, access logs, cross-zone balancing, target group alarms, and blue/green target switching. | Docs |
|
Amazon Route 53
Highly available and scalable Domain Name System (DNS) web service
|
Networking & Content Delivery | Manage production DNS, domain routing, health checks, and failover. | Use hosted-zone change control, low-risk TTLs for migrations, health checks, weighted/failover records, DNSSEC where needed, and registrar protection. | Docs |
|
Amazon Application Recovery Controller (ARC)
Move traffic for application disaster recovery
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
AWS Global Accelerator
Improve global application availability and performance
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
AWS Interconnect
Configure private connections to other cloud service providers
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
AWS RTB Fabric
Co-locate your real-time bidding applications on AWS
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
AWS Verified Access
Provide secure access to corporate applications without a VPN
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
Amazon Virtual Private Cloud
Isolated cloud resources
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
AWS Virtual Private Network
Securely access your network resources
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
Amazon VPC Lattice
Simplify service-to-service connectivity, security, and monitoring
|
Networking & Content Delivery | Use to connect users, services, accounts, data centers, and the internet securely and reliably. | Design VPCs/subnets/routing, use multiple AZs, TLS, DNS health checks, WAF/DDoS controls, egress controls, and network observability. | Docs |
|
AWS Partner Central
Manage your AWS Partner Network (APN) membership and access AWS
Partner resources
|
Partner Central | Use for AWS Partner Network workflows around production delivery and customer engagements. | Track competencies, opportunity process, compliance requirements, and support ownership. | Docs |
|
Amazon Braket
Accelerate quantum computing research
|
Quantum Computing | Use for experimental or specialized quantum workloads, usually outside the core production path. | Isolate experiments, control cost, protect data, and define fallback classical workflows. | Docs |
|
AWS Ground Station
Fully managed ground station as a service
|
Satellite | Use for satellite ground station communication and space data workflows. | Plan scheduling, region availability, data transfer, downstream processing, monitoring, and security boundaries. | Docs |
|
AWS Artifact
On-demand access to AWS compliance reports
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Certificate Manager
Provision, manage, and deploy SSL/TLS certificates
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Choosing AWS security, identity, and governance services
Find the AWS security, identity, and governance services and tools
that fit your needs
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Amazon Cognito
Identity management for your apps
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Directory Service
Set up and run Microsoft Active Directory with AWS services
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Amazon GuardDuty
Managed threat detection service
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Identity and Access Management
Securely manage access to services and resources with IAM
|
Security, Identity, & Compliance | Define users, roles, service permissions, and least-privilege access boundaries. | Use roles over users, MFA, permission boundaries, access analyzer, credential rotation, and no long-lived secrets in apps. | Docs |
|
AWS Audit Manager
Audit your AWS usage to simplify how you assess risk and compliance
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Amazon Cloud Directory
Store hundreds of millions of application-specific objects
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Amazon Detective
Investigate potential security issues
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Firewall Manager
Deploy network security across your VPCs with just a few clicks
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS GovCloud (US)
Move sensitive workloads into the cloud
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS IAM Identity Center
Manage single sign-on access to AWS accounts and apps
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Amazon Inspector
Automated and continual vulnerability management at scale
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Amazon Macie
Discover and protect your sensitive data at scale
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Network Firewall
Deploy network security across your Amazon VPCs with just a few
clicks
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Payment Cryptography
Fully managed payment cryptography service
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Resource Access Manager
Simple, secure service to share AWS resources
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Secrets Manager
Rotate, manage, and retrieve secrets
|
Security, Identity, & Compliance | Store and rotate database credentials, API keys, and app secrets. | Use automatic rotation where possible, tight IAM, KMS encryption, no plaintext env files, and alert on access anomalies. | Docs |
|
AWS Private Certificate Authority
Create private certificates to identify resources and protect data
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Security Documentation
Security documentation by category
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Security Hub
Unified security and compliance center
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Security Incident Response
Helps you respond to and receive CIRT assistance for security events
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Amazon Security Lake
Automatically centralize your security data with a few clicks
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS Shield
DDoS protection
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
Amazon Verified Permissions
Permissions management and authorization for custom applications
|
Security, Identity, & Compliance | Use before and during deployment to protect identities, applications, data, networks, and compliance posture. | Enable MFA/SSO, least privilege, threat detection, encryption, vulnerability management, WAF, audit logs, incident response, and compliance evidence. | Docs |
|
AWS WAF
Filter malicious web traffic
|
Security, Identity, & Compliance | Protect public web apps and APIs from common web attacks and abusive traffic. | Attach to CloudFront/ALB/API Gateway, use managed rules, rate limits, logging, test mode, and tuning for false positives. | Docs |
|
Amazon API Gateway
Build, deploy, and manage APIs
|
Serverless | Expose REST, HTTP, or WebSocket APIs for production apps. | Use stages, custom domains, auth, throttling, request validation, logging, WAF where needed, and canary deployments. | Docs |
|
Choosing a modern application strategy
Choose a modern application development approach
|
Serverless | Use for event-driven APIs, background processing, workflows, and apps without server management. | Design idempotency, concurrency limits, retries/DLQs, observability, cold-start needs, IAM boundaries, and deployment aliases. | Docs |
|
Amazon DynamoDB
Managed NoSQL database
|
Serverless | Run low-latency NoSQL tables for serverless and high-scale applications. | Design keys carefully, enable PITR, autoscaling/on-demand capacity, GSIs, TTL, streams if needed, alarms for throttles, and access policies. | Docs |
|
Amazon EventBridge
Serverless event bus for SaaS apps and AWS services
|
Serverless | Build event-driven production integrations across services and SaaS apps. | Define schemas, DLQs, retries, event archive/replay, bus permissions, and alarms on failed invocations. | Docs |
|
AWS Fargate
Serverless compute for containers
|
Serverless | Use for event-driven APIs, background processing, workflows, and apps without server management. | Design idempotency, concurrency limits, retries/DLQs, observability, cold-start needs, IAM boundaries, and deployment aliases. | Docs |
|
AWS Lambda
Run code without thinking about servers
|
Serverless | Run event-driven APIs, scheduled jobs, webhooks, stream processors, and lightweight backend logic. | Use versions/aliases, reserved concurrency, retries/DLQ, structured logs, tracing, secrets from managed stores, and alarms on errors/throttles/duration. | Docs |
|
Serverless
Introduction to core serverless concepts and services in the AWS
Cloud
|
Serverless | Use for event-driven APIs, background processing, workflows, and apps without server management. | Design idempotency, concurrency limits, retries/DLQs, observability, cold-start needs, IAM boundaries, and deployment aliases. | Docs |
|
Amazon Simple Notification Service
Pub/sub, SMS, email, and mobile push notifications
|
Serverless | Fan out production notifications to queues, functions, HTTP endpoints, SMS, or email. | Use topic policies, retries/DLQs, filtering, encryption, delivery logs, and subscription confirmation controls. | Docs |
|
Amazon Simple Storage Service
Object storage built to retrieve any amount of data from anywhere
|
Serverless | Store static assets, uploads, backups, data lakes, logs, artifacts, and serverless event sources. | Block public access by default, enable encryption/versioning/lifecycle, use bucket policies, CloudFront for public assets, and replication where needed. | Docs |
|
AWS Step Functions
Coordinate components for distributed applications
|
Serverless | Orchestrate multi-step production workflows and long-running business processes. | Use retries/catches, timeouts, idempotent tasks, execution history retention, versioning, and alarms on failures. | Docs |
|
AWS AppSync
Accelerate app development with fully-managed, scalable GraphQL APIs
|
Serverless | Use for event-driven APIs, background processing, workflows, and apps without server management. | Design idempotency, concurrency limits, retries/DLQs, observability, cold-start needs, IAM boundaries, and deployment aliases. | Docs |
|
Amazon Simple Queue Service
Managed message queues
|
Serverless | Buffer work between services and absorb production traffic spikes. | Use DLQs, visibility timeout, idempotent consumers, encryption, backlog alarms, and redrive procedures. | Docs |
|
AWS Backup
Centralized backup across AWS services
|
Storage | Centralize backups for production resources. | Define backup plans, vault locks where needed, cross-account/cross-region copies, retention, restore testing, and compliance reports. | Docs |
|
Choosing an AWS storage service
Choose the right AWS storage service
|
Storage | Use for objects, files, blocks, backups, archives, artifacts, and disaster recovery data. | Enable encryption, versioning/backups, lifecycle policies, access controls, replication, durability testing, and restore drills. | Docs |
|
Amazon Elastic Block Store
Amazon EC2 block storage volumes
|
Storage | Use for objects, files, blocks, backups, archives, artifacts, and disaster recovery data. | Enable encryption, versioning/backups, lifecycle policies, access controls, replication, durability testing, and restore drills. | Docs |
|
AWS Elastic Disaster Recovery
Scalable, cost-effective application recovery to AWS
|
Storage | Use for objects, files, blocks, backups, archives, artifacts, and disaster recovery data. | Enable encryption, versioning/backups, lifecycle policies, access controls, replication, durability testing, and restore drills. | Docs |
|
Amazon Elastic File System
Fully managed file system for Amazon EC2
|
Storage | Use for objects, files, blocks, backups, archives, artifacts, and disaster recovery data. | Enable encryption, versioning/backups, lifecycle policies, access controls, replication, durability testing, and restore drills. | Docs |
|
Amazon FSx
Launch, run, and scale feature-rich and high-performing file systems
|
Storage | Use for objects, files, blocks, backups, archives, artifacts, and disaster recovery data. | Enable encryption, versioning/backups, lifecycle policies, access controls, replication, durability testing, and restore drills. | Docs |
|
Amazon Glacier
Low-cost archive storage in the AWS Cloud
|
Storage | Use for objects, files, blocks, backups, archives, artifacts, and disaster recovery data. | Enable encryption, versioning/backups, lifecycle policies, access controls, replication, durability testing, and restore drills. | Docs |
|
Amazon Simple Storage Service
Object storage built to retrieve any amount of data from anywhere
|
Storage | Store static assets, uploads, backups, data lakes, logs, artifacts, and serverless event sources. | Block public access by default, enable encryption/versioning/lifecycle, use bucket policies, CloudFront for public assets, and replication where needed. | Docs |
|
AWS Snowball Edge
Move petabytes of data to and from AWS, or process data at the edge
|
Storage | Use for objects, files, blocks, backups, archives, artifacts, and disaster recovery data. | Enable encryption, versioning/backups, lifecycle policies, access controls, replication, durability testing, and restore drills. | Docs |
|
AWS Storage Gateway
Hybrid storage integration
|
Storage | Use for objects, files, blocks, backups, archives, artifacts, and disaster recovery data. | Enable encryption, versioning/backups, lifecycle policies, access controls, replication, durability testing, and restore drills. | Docs |