AWS Services Reference

Resizable virtual servers (instances) in the cloud, supporting hundreds of instance types optimized for different compute, memory, storage, and GPU workloads.

Serverless compute that runs your code in response to events without provisioning or managing servers — you pay only for the compute time you consume.

Fully managed container orchestration service that runs Docker containers on a cluster of EC2 instances or serverless Fargate infrastructure.

Managed Kubernetes service that makes it easy to run Kubernetes on AWS without installing, operating, and maintaining your own control plane.

Serverless compute engine for containers that removes the need to provision and manage EC2 instances — works with both ECS and EKS.

Platform-as-a-service that automatically handles deployment, capacity provisioning, load balancing, and health monitoring for web applications.

Simplified cloud platform designed for developers who need virtual private servers, databases, and networking at predictable low monthly prices.

Fully managed batch processing service that dynamically provisions compute resources to run hundreds of thousands of batch computing jobs.

Fully managed service that builds, deploys, and scales containerized web applications and APIs automatically from source code or container images.

Extends AWS infrastructure and services to your on-premises data center, enabling a consistent hybrid experience with the same APIs, tools, and hardware.

Automatically adjusts the number of EC2 instances in a group based on demand, ensuring you have the right capacity at the right time.

Infinitely scalable object storage with 99.999999999% durability, supporting static websites, data lakes, backups, and media storage through multiple storage classes.

High-performance block storage volumes that attach to a single EC2 instance, available in SSD and HDD types optimized for different I/O workloads.

Serverless, elastic file system that can be mounted by multiple EC2 instances simultaneously, automatically scaling storage capacity up and down.

Fully managed file storage built on popular file systems — Windows File Server, Lustre (HPC), NetApp ONTAP, and OpenZFS — for specialized workloads.

Low-cost archival storage with retrieval options from milliseconds (Instant Retrieval) to hours (Flexible Retrieval, Deep Archive) for long-term data retention.

Hybrid cloud storage service that connects on-premises environments to cloud storage via File Gateway, Volume Gateway, or Tape Gateway interfaces.

Physical devices (Snowcone, Snowball, Snowmobile) for migrating large volumes of data to AWS when network transfer is impractical due to bandwidth or time constraints.

Centralized, policy-based backup service that automates and manages backups across AWS services including EC2, EBS, RDS, DynamoDB, EFS, and FSx.

Online data transfer service that moves data between on-premises storage systems, edge locations, and AWS storage services at up to 10x faster than open-source tools.

Managed relational database service supporting MySQL, PostgreSQL, MariaDB, Oracle, and SQL Server with automated backups, Multi-AZ failover, and read replicas.

MySQL and PostgreSQL-compatible relational database built for the cloud with up to 5x the throughput of standard MySQL and 3x PostgreSQL, plus Aurora Serverless.

Fully managed NoSQL database delivering single-digit millisecond performance at any scale, with on-demand or provisioned capacity and built-in replication.

In-memory caching service compatible with Redis and Memcached that improves application performance by caching frequently accessed data at sub-millisecond latency.

Cloud data warehouse optimized for analytic workloads that queries petabytes of structured and semi-structured data using standard SQL, with Redshift Serverless available.

Fully managed graph database service that supports Property Graph (Apache TinkerPop Gremlin) and RDF (SPARQL) query languages for highly connected datasets.

MongoDB-compatible managed document database service that emulates the MongoDB API and is designed for JSON document workloads at scale.

Redis-compatible, durable, in-memory database that delivers ultra-fast performance with Multi-AZ durability, suitable as a primary database rather than just a cache.

Scalable, highly available Apache Cassandra-compatible managed database service that requires no Cassandra cluster management.

Fast, scalable, serverless time-series database designed for IoT and operational applications that ingest and query trillions of events per day.

Fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log for applications requiring an authoritative data history.

Logically isolated virtual network within AWS where you define your own IP address ranges, subnets, route tables, security groups, and network gateways.

Global content delivery network (CDN) that accelerates delivery of websites, APIs, videos, and other content by caching it at 500+ edge locations worldwide.

Highly available DNS web service offering domain registration, DNS routing (with 7 routing policies), and health checking for internet-facing and internal resources.

Automatically distributes incoming traffic across multiple targets with three types: Application (HTTP/HTTPS), Network (TCP/UDP), and Gateway (third-party appliances).

Fully managed service for creating, publishing, securing, and monitoring REST, HTTP, and WebSocket APIs at any scale with authentication, throttling, and caching.

Dedicated private network connection from your data center to AWS, bypassing the public internet to provide consistent bandwidth and reduced latency.

Network transit hub that connects VPCs and on-premises networks through a central gateway, replacing complex VPC peering meshes with a hub-and-spoke model.

Networking service that improves global application performance by routing traffic through the AWS global network to the optimal endpoint, providing static IP addresses.

Provides private connectivity between VPCs and AWS services without exposing traffic to the public internet, using interface VPC endpoints.

Encrypted tunnels connecting your on-premises networks to AWS over the public internet via Site-to-Site VPN or connecting individual devices via Client VPN.

Managed firewall service providing stateful and stateless packet filtering, intrusion prevention, and web filtering for VPC traffic at scale.

Identity and Access Management for controlling who can authenticate and what actions they can perform on AWS resources, using users, groups, roles, and policies.

Account management service for consolidating multiple AWS accounts into an organization with centralized billing, policy-based controls via SCPs, and account vending.

User identity service providing authentication, authorization, and user management for web and mobile apps via User Pools (auth) and Identity Pools (federated access).

Continuous threat detection service that analyzes CloudTrail, VPC Flow Logs, and DNS logs using machine learning to identify malicious activity and unauthorized behavior.

Automated vulnerability management service that continuously scans EC2 instances and container images for software vulnerabilities and unintended network exposure.

Machine learning-powered security service that automatically discovers, classifies, and protects sensitive data (PII, credentials, financial data) stored in Amazon S3.

Centralized security management service that aggregates, prioritizes, and provides actionable findings from GuardDuty, Inspector, Macie, and third-party tools.

Web application firewall that protects web applications from common exploits like SQL injection, cross-site scripting, and bot traffic using customizable rules.

DDoS protection service with Shield Standard (automatic, free) for layer 3/4 attacks and Shield Advanced ($3,000/month) for sophisticated attack mitigation and 24/7 support.

Key Management Service for creating and controlling cryptographic keys used to encrypt data, integrated with most AWS services and supporting customer-managed key policies.

Manages, retrieves, and automatically rotates secrets like database passwords and API keys, with native integration for RDS, Redshift, and DocumentDB.

Provisions and manages SSL/TLS certificates for use with CloudFront, ALB, and API Gateway, including automatic renewal for public certificates.

Security analytics service that automatically collects log data to create visualizations that help you analyze, investigate, and identify the root cause of security findings.

Dedicated hardware security module in AWS that lets you manage your own cryptographic keys with FIPS 140-2 Level 3 validated hardware for compliance requirements.

Centralized SSO and access management for AWS accounts and business applications, replacing AWS SSO with support for external identity providers like Okta and Azure AD.

Fully managed service providing access to leading foundation models (Anthropic Claude, Meta Llama, Amazon Titan, Stability AI) via API, with agents, knowledge bases, and guardrails.

End-to-end ML platform for building, training, and deploying machine learning models at scale, including SageMaker Studio, Autopilot, Clarify, and JumpStart for pre-trained models.

Image and video analysis service that identifies objects, people, text, scenes, and activities, as well as detects inappropriate content using deep learning.

Natural language processing service that uses ML to find insights and relationships in text — sentiment, entities, key phrases, language, and custom classification.

Automatic speech recognition service that converts audio and video speech to text with support for multiple languages, speaker diarization, and custom vocabulary.

Text-to-speech service using deep learning to synthesize natural-sounding speech in dozens of languages and voices, with SSML support for fine-tuned speech control.

Neural machine translation service delivering fast, high-quality, and customizable language translation between 75+ language pairs.

Automatically extracts text, handwriting, and structured data (tables, forms) from scanned documents using ML, going beyond simple OCR.

Intelligent enterprise search service powered by ML that indexes content from multiple sources and answers natural language questions with high accuracy.

ML service enabling developers to build real-time personalization and recommendation systems using the same technology used by Amazon.com.

Fully managed time-series forecasting service using ML to deliver accurate predictions for business metrics like retail demand, resource requirements, and financial planning.

Conversational AI service for building voice and text chatbots using the same deep learning technologies that power Amazon Alexa.

Serverless interactive query service that analyzes data in Amazon S3 using standard SQL — pay per query, no infrastructure to manage.

Managed big data platform for running Apache Spark, Hive, HBase, Flink, and other open-source frameworks to process vast amounts of data quickly and cost-effectively.

Platform for real-time data streaming with four services: Data Streams (custom processing), Firehose (load to destinations), Analytics (SQL on streams), and Video Streams.

Serverless data integration service that discovers, prepares, and combines data for analytics using a managed ETL engine, Data Catalog, and visual ETL builder.

Service that simplifies building, securing, and managing data lakes by automating complex data ingestion, cataloging, transformation, and fine-grained access control.

Cloud-native business intelligence service for creating interactive dashboards and visualizations from data in S3, Redshift, RDS, Athena, and other sources.

Managed service for deploying, operating, and scaling OpenSearch and Elasticsearch clusters for log analytics, full-text search, and application monitoring.

Visual data preparation tool that allows analysts and data scientists to clean and normalize data using 250+ pre-built transformations without writing code.

Fully managed Apache Kafka service that makes it easy to ingest and process streaming data in real time without managing Kafka infrastructure.

Fully managed message queuing service that decouples components of a distributed application — supports Standard (at-least-once, best-effort ordering) and FIFO queues.

Pub/sub messaging service that fans out messages to multiple subscribers (SQS, Lambda, HTTP, email) simultaneously for event-driven architectures.

Serverless event bus that connects applications using events from AWS services, custom applications, and SaaS providers with rules-based routing to 20+ targets.

Visual workflow orchestration service that sequences Lambda functions and other AWS services into reliable, stateful business processes with branching, parallelism, and error handling.

Managed GraphQL and Pub/Sub API service that simplifies application development by connecting apps to data sources like DynamoDB, Lambda, and HTTP APIs.

Managed message broker service for Apache ActiveMQ and RabbitMQ, enabling migration of existing message broker-based applications to the cloud without code rewrites.

Fully managed continuous delivery service that automates build, test, and deploy phases every time code is changed based on a release model you define.

Fully managed continuous integration service that compiles source code, runs tests, and produces deployable software packages without managing build servers.

Automated deployment service that deploys applications to EC2, Lambda, ECS, or on-premises servers with blue/green, canary, and linear deployment strategies.

Fully managed source control service hosting secure, private Git repositories — being retired in favor of third-party Git solutions per AWS announcement.

Infrastructure as code service that provisions and manages AWS resources by treating infrastructure as a JSON or YAML template — the foundation of repeatable deployments.

Cloud Development Kit for defining AWS infrastructure using familiar programming languages (TypeScript, Python, Java, Go) that synthesize into CloudFormation templates.

Serverless Application Model — open-source framework for building serverless applications that extends CloudFormation with simplified syntax for Lambda, API Gateway, and DynamoDB.

Distributed tracing service that helps analyze and debug production microservices applications by collecting data about requests, generating service maps, and identifying bottlenecks.

Operations management service providing a unified interface to view operational data and automate tasks — includes Session Manager, Parameter Store, Patch Manager, and Run Command.

Fully managed artifact repository service that stores, publishes, and shares software packages (npm, pip, Maven, NuGet) for use in CI/CD pipelines.

Observability service for monitoring AWS resources and applications — collects metrics, logs, and events to generate alarms, dashboards, and automated responses.

Audit log service that records all API calls made to your AWS account — who did what, when, and from where — for governance, compliance, and operational troubleshooting.

Configuration compliance service that continuously records AWS resource configurations and evaluates them against desired state rules for governance and audit.

Real-time guidance tool that inspects your AWS environment and makes recommendations for cost optimization, security, fault tolerance, performance, and service limits.

Service for setting up and governing a secure, compliant multi-account AWS environment (a "landing zone") using best practices and guardrails for new accounts.

Visualization tool for analyzing and understanding your AWS spending over time — identifies cost trends, anomalies, and savings opportunities across services.

Sets custom cost and usage budgets that alert you when your spend or usage exceeds — or is forecasted to exceed — defined thresholds.

Recommends optimal AWS compute resources (EC2 instances, Lambda functions, ECS tasks) based on your actual utilization to reduce costs and improve performance.

Provides personalized information about AWS service health events that may affect your account, with proactive notifications and guidance for remediation.

Lift-and-shift migration service (formerly CloudEndure Migration) that replicates on-premises or other cloud servers to AWS with minimal downtime.

Migrates databases to AWS with minimal downtime, supporting homogeneous migrations (MySQL to MySQL) and heterogeneous migrations (Oracle to Aurora).

Central location for tracking the progress of application migrations across multiple AWS and partner migration tools.

Collects and presents server inventory and migration data from on-premises environments to help plan cloud migrations.

Fully managed file transfer service that supports SFTP, FTPS, FTP, and AS2 protocols for transferring files into and out of Amazon S3 or EFS.

Fully managed Docker container registry that stores, manages, and deploys container images securely with integration with ECS, EKS, and Lambda.

Service mesh that provides application-level networking for microservices, enabling visibility and control over communication between services using Envoy proxy.

Extension of Amazon ECS that allows you to run and manage containers on customer-managed on-premises infrastructure using the same ECS APIs.

Managed cloud service that lets IoT devices securely connect and interact with cloud applications and other devices at billions of messages per day.

Extends AWS to edge devices so they can act locally on generated data while still using the cloud for management, analytics, and storage.

Fully managed analytics service for IoT data that filters, transforms, and enriches IoT data to make it useful for analysis.

Collects, structures, and searches industrial equipment data by ingesting data from industrial sensors and equipment across facilities.

Development platform for building full-stack web and mobile apps with backend services (auth, API, storage, analytics) and a hosted CI/CD deployment pipeline.

See Application Integration — AppSync also serves as a managed GraphQL API layer for frontend and mobile apps connecting to multiple data sources.

Customer engagement service for sending targeted push notifications, emails, SMS messages, and in-app messages based on user behavior and analytics.

Simple Email Service — scalable cloud email sending service for transactional, marketing, and bulk email at low cost with high deliverability.