Cloud Services
Everything you need to know about 225 AWS services — what they do, key features, and how they map to compliance frameworks.
Explore by Category
13 categories covering every layer of the AWS cloud stack.
Analytics
24 services
Kinesis
Amazon Kinesis makes it easy to collect, process, and analyze real-time streaming data. Ingest video, audio, application logs, website clickstreams, and IoT telemetry.
Athena
Amazon Athena is an interactive query service that makes it easy to analyze data in S3 using standard SQL. Serverless — no infrastructure to manage.
Glue
AWS Glue is a serverless data integration service for discovering, preparing, and combining data for analytics, machine learning, and application development.
EMR
Amazon EMR is a cloud big data platform for processing vast amounts of data using open-source tools like Apache Spark, Hive, HBase, Flink, and Presto.
OpenSearch
Amazon OpenSearch Service is a managed service for search, analytics, and visualization. Forked from Elasticsearch, it powers log analytics, full-text search, and observability.
QuickSight
Amazon QuickSight is a fast, serverless business intelligence service. Create interactive dashboards and embed analytics into applications.
DataZone
Amazon DataZone is a data management service for cataloging, discovering, sharing, and governing data across organizational boundaries.
Clean Rooms
AWS Clean Rooms helps companies analyze combined datasets without sharing underlying raw data. Collaborate while protecting sensitive information.
MSK
Amazon Managed Streaming for Apache Kafka (MSK) runs Apache Kafka clusters for ingesting, processing, and analyzing streaming data at scale.
Kinesis Firehose
Amazon Kinesis Data Firehose captures, transforms, and loads streaming data into AWS data stores with zero administration.
Lake Formation
AWS Lake Formation builds, secures, and manages data lakes in weeks instead of months. Centralized permissions for data in S3 with fine-grained access control.
MediaConvert
AWS Elemental MediaConvert is a file-based video transcoding service with broadcast-grade features. Process video for OTT, broadcast, and archive at scale.
MediaLive
AWS Elemental MediaLive is a broadcast-grade live video processing service. Create high-quality live streams for delivery to TVs and connected devices.
MediaPackage
AWS Elemental MediaPackage prepares and protects live video for distribution. Package live streams for internet delivery with just-in-time packaging.
Elastic Transcoder
Amazon Elastic Transcoder converts media files into formats that play on smartphones, tablets, and PCs. Upload one video and automatically create versions for every device and bandwidth. Think of it like a universal video converter — you give it one master file and it creates all the different formats automatically.
CloudSearch
Amazon CloudSearch is a managed search service that makes it easy to set up, manage, and scale a search solution for your website or application. Think of it like adding a Google-quality search bar to your own app — users type queries and get relevant results instantly.
Data Pipeline
AWS Data Pipeline orchestrates data movement and transformation across AWS services and on-premises sources. Define data workflows that run on a schedule. Think of it like a robot traffic controller for your data — it moves data between services, transforms it along the way, and retries if something fails.
EMR Serverless
Amazon EMR Serverless runs Apache Spark and Hive without managing clusters. Submit a job and AWS provisions exactly the right compute — spinning it down when done. Think of it like ordering a pizza that arrives cooked, eaten, and cleaned up — you just enjoy the meal, no kitchen needed.
MediaTailor
AWS Elemental MediaTailor inserts personalized ads into live and on-demand video streams. Each viewer sees ads relevant to them without buffering or stuttering. Think of it like a TV channel that shows different commercials to every viewer based on their interests — seamlessly blended into the content.
Elemental Link
AWS Elemental Link is a tiny hardware device that connects a live video source (camera or switcher) to AWS MediaLive in under a minute. No computer needed — just plug in power, HDMI, and ethernet. Think of it like an HDMI-to-cloud adapter — whatever the camera sees is instantly available for streaming worldwide.
Entity Resolution
AWS Entity Resolution matches and links related records across datasets without sharing raw data. Find duplicate customer profiles, match patients across systems, or deduplicate product catalogs. Think of it like a detective who spots that "Bob Smith" in one database and "Robert J. Smith" in another are the same person.
Supply Chain
AWS Supply Chain is a cloud-based application that improves supply chain visibility and reduces inventory risk. ML-powered demand planning detects shortages before they happen. Think of it like having a crystal ball for your warehouse — it predicts what you will need, flags risks, and suggests rebalancing inventory between locations.
MediaConnect
AWS Elemental MediaConnect is a reliable, secure, and flexible transport service for live video. Send broadcast-quality video between locations worldwide with low latency. Think of it like a dedicated private highway for live video — instead of sending your broadcast over the public internet, MediaConnect gives it a private express lane with guaranteed bandwidth.
MediaStore
AWS Elemental MediaStore is an AWS storage service optimized for media. It delivers low-latency, consistent performance for video streaming workloads with S3-like access. Think of it like a CDN-optimized storage locker — purpose-built for video where every millisecond of latency matters for live streaming.
Compute
19 services
EC2
Amazon Elastic Compute Cloud (EC2) provides resizable virtual servers in the cloud. Launch instances with your choice of OS, networking, and storage in seconds, and scale capacity up or down as your computing requirements change.
Lambda
AWS Lambda lets you run code without provisioning or managing servers. Pay only for the compute time you consume. Automatically scales from zero to thousands of concurrent executions.
ECS
Amazon Elastic Container Service (ECS) is a fully managed container orchestration service. Run Docker containers on EC2 or with AWS Fargate for serverless compute.
EKS
Amazon Elastic Kubernetes Service (EKS) runs Kubernetes control plane across multiple Availability Zones. Deploy, manage, and scale containerized applications without operating your own control plane.
Elastic Beanstalk
AWS Elastic Beanstalk is a PaaS that automatically handles capacity provisioning, load balancing, scaling, and health monitoring. Simply upload your code.
Lightsail
Amazon Lightsail offers easy-to-use virtual private servers, containers, storage, and databases with predictable monthly pricing. Ideal for simple web apps and dev/test.
Auto Scaling
AWS Auto Scaling monitors applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost.
ECR
Amazon Elastic Container Registry (ECR) is a fully managed container registry. Store, manage, and deploy container images with integrated vulnerability scanning.
Batch
AWS Batch dynamically provisions compute resources based on job volume. Run hundreds of thousands of batch computing jobs without managing clusters.
Fargate
AWS Fargate is a serverless compute engine for containers. Run ECS and EKS tasks without managing EC2 instances.
Outposts
AWS Outposts delivers AWS infrastructure and services on-premises for a consistent hybrid experience. Run compute, storage, database, and ML services locally.
App Runner
AWS App Runner is a fully managed container application service. Deploy web applications and APIs directly from source code or container images without managing infrastructure.
GameLift
Amazon GameLift deploys, operates, and scales session-based multiplayer game servers in the cloud. Optimized for low-latency, high-performance game hosting.
Wavelength
AWS Wavelength embeds AWS compute and storage at 5G network edge locations. Run applications with sub-10ms latency to mobile devices and connected users. Think of it like putting a mini AWS data center inside a 5G cell tower — your app talks to users instantly instead of routing through the internet.
Local Zones
AWS Local Zones place compute, storage, and networking closer to large population centers where no AWS Region exists. Run latency-sensitive applications like real-time video editing or gaming within 10ms of end users. Think of it like a smaller AWS neighborhood branch — same services, just closer to your users.
Application Auto Scaling
AWS Application Auto Scaling dynamically adjusts capacity for multiple AWS services based on demand. Set scaling targets once and let AWS handle the rest. Think of it like a thermostat for your cloud — set the temperature you want and the system automatically heats up or cools down.
Deadline Cloud
AWS Deadline Cloud is a fully managed render farm for computer graphics and visual effects. Submit rendering jobs and AWS provisions, runs, and scales the render farm automatically. Think of it like having a button that instantly conjures thousands of computers to render your movie — they disappear when the job is done.
ParallelCluster
AWS ParallelCluster is an open-source cluster management tool that deploys HPC (High Performance Computing) clusters on AWS. Get supercomputer-scale compute without buying hardware. Think of it like renting a TOP500 supercomputer by the hour — submit your simulation and AWS provisions hundreds of nodes automatically.
SimSpace Weaver
AWS SimSpace Weaver runs large-scale spatial simulations across multiple EC2 instances. Simulate entire cities, battlefields, or ecosystems with millions of entities in real time. Think of it like The Matrix for urban planning — build a digital copy of a city with millions of simulated people moving and interacting in real time.
Database
15 services
RDS
Amazon RDS makes it easy to set up, operate, and scale a relational database. Supports MySQL, PostgreSQL, MariaDB, Oracle, and SQL Server with automated backups and Multi-AZ.
DynamoDB
Amazon DynamoDB is a serverless, NoSQL, fully managed database with single-digit millisecond performance at any scale. Supports key-value and document data models.
ElastiCache
Amazon ElastiCache provides fully managed Redis and Memcached in-memory data stores for sub-millisecond latency applications.
Redshift
Amazon Redshift is a fast, fully managed, petabyte-scale data warehouse. Run complex analytical queries against structured and semi-structured data using standard SQL.
DocumentDB
Amazon DocumentDB is a fast, scalable, fully managed MongoDB-compatible database service. Store, query, and index JSON data.
Neptune
Amazon Neptune is a fast, reliable, fully managed graph database service. Build applications with highly connected datasets using property graph and RDF models.
MemoryDB
Amazon MemoryDB for Redis is a Redis-compatible, durable, in-memory database service. Delivers microsecond read and millisecond write latency with data durability.
Aurora
Amazon Aurora is a MySQL and PostgreSQL-compatible relational database built for the cloud. Up to 5x throughput of standard MySQL and 3x of PostgreSQL.
QLDB
Amazon Quantum Ledger Database (QLDB) is a fully managed ledger database with a built-in immutable journal. Track every data change with cryptographic verification.
Keyspaces
Amazon Keyspaces is a scalable, serverless Apache Cassandra-compatible database. No servers to manage — pay only for the capacity you use.
Timestream
Amazon Timestream is a fast, serverless time-series database for IoT and operational applications. 1,000x faster than relational databases for time-series and 1/10th the cost.
SimpleDB
Amazon SimpleDB is a simple, flexible non-relational data store. Store and query data items with attributes using a simplified API — no schema design required. Think of it like a spreadsheet in the cloud where each row can have completely different columns from every other row.
ElastiCache Serverless
Amazon ElastiCache Serverless is a zero-ops in-memory cache that scales instantly with your application traffic. No capacity planning, no node management. Think of it like a magical memory box that is always the right size — small when you have few users, huge when traffic spikes, and you only pay for what you use.
Redshift Serverless
Amazon Redshift Serverless runs petabyte-scale data warehouse queries without managing clusters. Just load data and start querying — capacity scales automatically. Think of it like having a supercomputer that wakes up when you have a question, answers it in seconds, and costs nothing when you're not asking.
Timestream for InfluxDB
Amazon Timestream for InfluxDB is a managed InfluxDB-compatible time-series database. Run existing InfluxDB workloads without managing servers. Think of it like having an InfluxDB expert on your team — someone who handles upgrades, patches, backups, and scaling so you can focus on your data.
Developer Tools
15 services
CodeBuild
AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages ready to deploy.
CodePipeline
AWS CodePipeline is a fully managed continuous delivery service that automates your release pipelines for fast and reliable application and infrastructure updates.
CodeCommit
AWS CodeCommit is a fully managed source control service that hosts secure, highly scalable private Git repositories. No infrastructure to manage.
CodeDeploy
AWS CodeDeploy automates code deployments to any instance, including EC2, Lambda, and on-premises servers. Supports rolling, blue/green, and canary strategies.
Cloud9
AWS Cloud9 is a cloud-based integrated development environment (IDE) that lets you write, run, and debug code with just a browser. Includes a code editor, debugger, and terminal.
X-Ray
AWS X-Ray helps analyze and debug distributed applications. Trace requests through your application and identify performance bottlenecks.
Proton
AWS Proton automates infrastructure provisioning for container and serverless apps. Platform teams define templates — developers self-serve.
Amplify
AWS Amplify is a complete full-stack development platform for building web and mobile apps. Includes hosting, authentication, APIs, storage, and CI/CD with Git-based workflows.
CodeArtifact
AWS CodeArtifact is a fully managed artifact repository service. Store and share Maven, Gradle, npm, pip, NuGet, and Swift packages with access control.
CodeGuru
Amazon CodeGuru is a developer tool that uses ML and automated reasoning to provide intelligent recommendations for code quality and application performance.
Device Farm
AWS Device Farm tests Android, iOS, and web apps on real physical phones and tablets in the AWS cloud. No need to buy hundreds of test devices. Think of it like renting a drawer of 2,500+ different phones and tablets — run your tests on all of them simultaneously and get results in minutes.
Q Developer
Amazon Q Developer (formerly CodeWhisperer) is an AI-powered coding assistant that generates code, debugs, tests, and explains your codebase. It is like having a senior AWS engineer sitting next to you — it understands your entire project, suggests fixes, and writes code in your IDE. Free for individual developers.
CodeCatalyst
Amazon CodeCatalyst is a unified software development service with project templates, CI/CD, issue tracking, and cloud dev environments. Start coding in minutes from a browser. Think of it like GitHub plus GitLab plus Netlify combined, pre-configured for AWS — pick a blueprint and start building immediately.
CloudShell
AWS CloudShell is a browser-based shell with pre-installed AWS CLI, SDKs, and tools. Launch a terminal in any AWS region directly from the Console — no setup, no SSH keys. Think of it like having SSH access to AWS itself, available instantly in any browser tab, with all tools pre-loaded.
CodeConnections
AWS CodeConnections integrates third-party Git providers (GitHub, GitLab, Bitbucket) with AWS CI/CD services. Connect once, use everywhere across CodePipeline, CodeBuild, and more. Think of it like a universal adapter for your Git repositories — connect GitHub once and all your AWS developer tools can access it.
End User Computing
7 services
WorkSpaces
Amazon WorkSpaces is a managed, secure Desktop-as-a-Service (DaaS) solution. Provision cloud-based virtual desktops for Windows or Linux in minutes.
AppStream
Amazon AppStream 2.0 streams desktop applications to any device via a browser. No local installation needed.
WorkDocs
Amazon WorkDocs is a secure, managed document collaboration service. Create, share, and collaborate on documents with version control, feedback, and full audit trail. Think of it like Google Docs but with enterprise-grade security, HIPAA compliance, and no data ever leaves your AWS control.
WorkMail
Amazon WorkMail is a secure, managed business email and calendar service. Get enterprise email without managing Exchange servers. Think of it like Gmail or Outlook for business, but you control the encryption keys and data never leaves your AWS region.
Nimble Studio
Amazon Nimble Studio is a creative studio in the cloud for animation, VFX, and game development. Artists get high-performance virtual workstations accessible from any device. Think of it like a Hollywood render farm on-demand — artists animate from their laptop while AWS does the heavy rendering.
Sumerian
Amazon Sumerian creates 3D, AR, and VR scenes that run in a browser. No 3D programming or graphics expertise required — build immersive experiences with a visual editor. Think of it like PowerPoint for 3D worlds — drag, drop, and publish virtual reality experiences anyone can view in a browser.
Honeycode
Amazon Honeycode is a no-code application builder. Build mobile and web apps for your team using spreadsheets as the data layer — no programming needed. Think of it like Excel meets Power Apps — if you can build a spreadsheet, you can build a custom app for your team.
Integration
17 services
SNS
Amazon Simple Notification Service (SNS) is a fully managed pub/sub messaging service. Send messages to distributed systems, mobile devices, and email endpoints.
SQS
Amazon Simple Queue Service (SQS) is a fully managed message queuing service. Decouple and scale microservices, distributed systems, and serverless applications.
EventBridge
Amazon EventBridge is a serverless event bus that connects applications using data from AWS services, SaaS partners, and custom applications.
Step Functions
AWS Step Functions is a serverless workflow orchestration service. Coordinate multiple AWS services into resilient, visual workflows for applications and data pipelines.
SES
Amazon Simple Email Service (SES) is a cloud-based email sending service. Send marketing, notification, and transactional emails at scale.
MQ
Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ. Migrate existing message broker applications to the cloud without rewriting code.
AppSync
AWS AppSync is a fully managed GraphQL and pub/sub API service. Connect applications to data and events with real-time updates and offline data access.
EventBridge Pipes
Amazon EventBridge Pipes connects sources to targets with optional filtering and transformation. Point-to-point integrations without code.
Managed Blockchain
Amazon Managed Blockchain creates and manages blockchain networks using Hyperledger Fabric or Ethereum. No manual infrastructure provisioning.
Pinpoint
Amazon Pinpoint enables multi-channel customer engagement with targeted email, SMS, push, voice, and in-app messages at scale.
IVS
Amazon Interactive Video Service is a managed live streaming solution for building interactive video experiences with ultra-low latency.
Connect
Amazon Connect is a cloud-based contact center service. Set up a call center in minutes with AI-powered self-service, agent routing, and real-time analytics.
Location Service
Amazon Location Service adds maps, geocoding, routing, tracking, and geofencing to applications. Built on Esri and HERE data — no vendor lock-in.
Chime SDK
Amazon Chime SDK lets developers add real-time audio, video, and screen sharing to applications. Build meeting, telephony, and messaging features with SDKs.
AppFlow
Amazon AppFlow transfers data between SaaS applications (Salesforce, ServiceNow, Slack, Google Analytics) and AWS services without writing code. Think of it like a universal USB cable for SaaS apps — plug Salesforce into S3, ServiceNow into Redshift, all with a few clicks.
SWF
Amazon Simple Workflow Service (SWF) coordinates work across distributed application components. Build background jobs with parallel or sequential steps, retries, and human approvals. Think of it like a project manager for your code — it tracks who does what, handles timeouts, retries failures, and manages the flow between tasks.
B2B Data Interchange
AWS B2B Data Interchange automates EDI (Electronic Data Interchange) document processing with trading partners. Transform X12, EDIFACT, and JSON documents without custom code. Think of it like a universal translator for business documents — it converts incoming purchase orders, invoices, and shipping notices from any format into data your ERP understands.
IoT
10 services
IoT Core
AWS IoT Core is a managed cloud platform that lets connected devices securely interact with cloud applications and other devices at scale.
Greengrass
AWS IoT Greengrass extends cloud capabilities to edge devices. Run Lambda functions, Docker containers, and ML inference locally on connected devices.
SiteWise
AWS IoT SiteWise collects, stores, and analyzes industrial equipment data at scale. Model physical assets and monitor operations in real time.
IoT Analytics
AWS IoT Analytics processes and analyzes IoT device data at scale with cleansing, enrichment, and querying capabilities.
IoT Events
AWS IoT Events detects and responds to events from IoT sensors and applications using state-based event detector models.
IoT Device Defender
AWS IoT Device Defender continuously audits and monitors IoT device fleets for security violations and abnormal behavior.
Ground Station
AWS Ground Station provides satellite antenna access as a service. Control satellites, downlink data, and process observations without building ground infrastructure.
IoT TwinMaker
AWS IoT TwinMaker creates digital twins of physical systems — virtual 3D representations of factories, buildings, or equipment that update in real-time. Think of it like The Sims for your factory — you see a live 3D model that shows what every machine is doing right now.
IoT FleetWise
AWS IoT FleetWise collects and organizes vehicle data in near real-time. Filter only the data you need from millions of connected cars without overwhelming your storage. Think of it like a smart dashcam that only uploads the interesting moments — it filters vehicle sensor data at the edge before sending it to the cloud.
RoboRunner
AWS IoT RoboRunner builds applications that manage fleets of robots from different manufacturers. Unify control of warehouse robots, delivery bots, and factory automation in one system. Think of it like a universal remote for all your robots — whether they are from ABB, Fanuc, or Universal Robots, RoboRunner speaks their language.
Machine Learning
26 services
SageMaker
Amazon SageMaker is a fully managed machine learning service. Build, train, and deploy ML models at scale using integrated Jupyter notebooks, debuggers, and model monitors.
Bedrock
Amazon Bedrock is a fully managed service that provides access to foundation models from leading AI companies via a single API. Build generative AI applications without managing infrastructure.
Rekognition
Amazon Rekognition provides pre-trained computer vision APIs. Analyze images and videos for objects, faces, text, content moderation, and more.
Transcribe
Amazon Transcribe converts speech to text using deep learning. Supports batch and real-time transcription in 100+ languages and dialects.
Comprehend
Amazon Comprehend uses NLP to extract insights from documents. Identify language, entities, key phrases, sentiment, and topics.
Textract
Amazon Textract extracts text, handwriting, and structured data from documents. Go beyond OCR — identify tables, forms, and key-value pairs.
Translate
Amazon Translate is a neural machine translation service. Translate text between 75+ languages with high accuracy using deep learning models.
Braket
Amazon Braket is a fully managed quantum computing service. Build, test, and run quantum algorithms on simulators and real quantum hardware.
Polly
Amazon Polly turns text into lifelike speech using deep learning. Synthesize natural-sounding voices in dozens of languages.
Lex
Amazon Lex builds conversational interfaces using the same deep learning technology that powers Alexa.
Kendra
Amazon Kendra is an intelligent enterprise search service powered by ML that finds answers across documents, wikis, and databases.
Personalize
Amazon Personalize creates real-time personalized recommendations using the same ML technology as Amazon.com.
Lookout for Metrics
Amazon Lookout for Metrics automatically detects anomalies in business and operational data — no ML experience required.
Forecast
Amazon Forecast uses ML to generate highly accurate time-series forecasts. Same technology Amazon uses for inventory and demand planning.
Lookout for Vision
Amazon Lookout for Vision detects defects and anomalies in visual representations using computer vision. Train models with as few as 30 images.
HealthLake
AWS HealthLake stores, transforms, and analyzes health data using the FHIR standard for healthcare interoperability.
Fraud Detector
Amazon Fraud Detector is a fully managed fraud detection service using ML. Identify potentially fraudulent online activities like fake accounts, payment fraud, and promo abuse.
Panorama
AWS Panorama brings computer vision to existing on-premises cameras without streaming video to the cloud. Add ML-powered object detection, activity recognition, and quality inspection to any IP camera. Think of it like giving your security cameras a brain — they learn to recognize objects, people, and problems on their own.
Lookout for Equipment
Amazon Lookout for Equipment detects abnormal machine behavior by analyzing sensor data from industrial equipment. Train a model on your equipment normal behavior and get alerts when something is off. Think of it like a mechanic who listens to your engine 24/7 and calls you the moment it starts sounding different.
Monitron
Amazon Monitron is an end-to-end predictive maintenance system including sensors, gateway, and ML-powered analysis. Stick sensors on motors, pumps, or bearings and get alerts when they need maintenance before they fail. Think of it like a Fitbit for factory machines — wearables that track machine health and warn before breakdowns.
RoboMaker
AWS RoboMaker develops, tests, and deploys ROS (Robot Operating System) applications. Simulate robots in 3D worlds before testing on real hardware. Think of it like a video game simulation where you test your robot code in a virtual living room before letting it loose in a real one.
Omics
Amazon Omics stores, processes, and analyzes genomic, transcriptomic, and proteomic data at scale. Purpose-built for bioinformatics workflows. Think of it like a specialized supercomputer for DNA analysis — upload raw genetic data and run analysis pipelines optimized for biological data.
Mechanical Turk
Amazon Mechanical Turk (MTurk) is a marketplace where you post small tasks for real humans to complete. Get training data for ML models, moderate content, or transcribe documents. Think of it like having an on-demand global workforce of millions — for tasks that are easy for humans but hard for computers.
Comprehend Medical
Amazon Comprehend Medical is a HIPAA-eligible NLP service that extracts medical information from unstructured clinical text. It understands medications, conditions, tests, and procedures with medical-grade accuracy. Think of it like a doctor who reads thousands of patient records in seconds and highlights every diagnosis, medication, and lab result.
Health Imaging
AWS Health Imaging stores, retrieves, and analyzes medical images (DICOM) at petabyte scale. Run AI models on CT scans, MRIs, and X-rays with sub-second image retrieval. Think of it like a PACS system in the cloud — radiologists access images from anywhere, and AI runs medical image analysis automatically.
Clean Rooms ML
AWS Clean Rooms ML lets companies train ML models on combined datasets without seeing each other's raw data. Run lookalike segmentation and audience modeling across partners while preserving privacy. Think of it like a locked room where two companies bring their data, train a model together, and leave with the model but never see each other's customer lists.
Management
34 services
CloudTrail
AWS CloudTrail records AWS API calls for audit, security analysis, and operational troubleshooting. Provides a complete history of activity in your account.
CloudWatch
Amazon CloudWatch monitors AWS resources and applications. Collect metrics, logs, and events; set alarms; and automatically react to changes in your environment.
CloudFormation
AWS CloudFormation lets you model your entire infrastructure in text files. Provision and manage AWS resources using Infrastructure as Code (IaC) templates.
Config
AWS Config assesses, audits, and evaluates your resource configurations continuously. Track configuration changes and evaluate against desired policies.
SSM
AWS Systems Manager is an operations hub for AWS resources. Gain operational insights, automate tasks, and manage instances at scale.
Control Tower
AWS Control Tower sets up multi-account AWS environments with pre-configured guardrails. Automate account provisioning with best-practice blueprints.
Organizations
AWS Organizations centrally manages multiple AWS accounts. Consolidate billing, apply SCP guardrails, and automate account creation at scale.
Resource Explorer
AWS Resource Explorer is a managed search service for discovering AWS resources across all regions with a single unified query.
Service Quotas
AWS Service Quotas lets you view and manage AWS service limits from a central console and request increases without support cases.
Compute Optimizer
AWS Compute Optimizer recommends optimal AWS compute resources using ML analysis of historical utilization metrics from CloudWatch.
Trusted Advisor
AWS Trusted Advisor inspects your environment and provides real-time recommendations following AWS best practices across cost, security, and performance.
Well-Architected Tool
AWS Well-Architected Tool reviews workloads against 6 pillars: Operational Excellence, Security, Reliability, Performance, Cost, and Sustainability.
DevOps Guru
Amazon DevOps Guru uses ML to detect anomalous application behavior and operational issues before they impact customers.
Service Catalog
AWS Service Catalog lets organizations create and manage catalogs of IT services approved for use on AWS. Standardize deployments with pre-approved CloudFormation templates.
Managed Grafana
Amazon Managed Grafana is a fully managed Grafana service for visualizing and monitoring metrics, logs, and traces with interactive dashboards.
Managed Prometheus
Amazon Managed Service for Prometheus is a serverless, Prometheus-compatible monitoring service for container infrastructure at scale.
Budgets
AWS Budgets sets custom budgets to track cost, usage, reservation coverage, and Savings Plans utilization. Receive alerts when thresholds are exceeded.
Cost Explorer
AWS Cost Explorer visualizes, understands, and manages AWS costs and usage over time. Dive deeper with hourly granularity, resource-level data, and forecasting.
Resilience Hub
AWS Resilience Hub assesses and improves the resilience of your applications. Validate RTO and RPO targets against your architecture and receive actionable recommendations.
AppConfig
AWS AppConfig deploys application configuration and feature flags at runtime. Decouple configuration from code with validation, gradual rollout, and automatic rollback.
License Manager
AWS License Manager tracks and manages software licenses from vendors like Microsoft, Oracle, and SAP. Enforce license limits and optimize usage across accounts.
OpsWorks
AWS OpsWorks automates server configuration using Chef and Puppet. Define your server setup as code and apply it consistently across hundreds of instances. Think of it like a recipe book for servers — write your recipes once and every server is cooked exactly the same way.
Savings Plans
AWS Savings Plans offer discounted prices on EC2, Lambda, and Fargate in exchange for a commitment to consistent usage over 1 or 3 years. Think of it like a bulk discount — commit to spending a certain amount per hour and save up to 72% compared to on-demand pricing.
Health Dashboard
AWS Health Dashboard provides real-time information about service availability and events affecting your AWS resources. Know about outages before your users do. Think of it like a weather forecast for AWS — see which services are healthy, which have issues, and how your specific account is affected.
Resource Groups
AWS Resource Groups organizes AWS resources into logical groups using tags. View, manage, and automate tasks on collections of resources. Think of it like folders for your AWS account — group everything related to one project and manage them together.
Billing Conductor
AWS Billing Conductor creates custom billing rates for different teams or customers without changing your actual AWS costs. Charge internal teams different rates for the same AWS services. Think of it like having custom price tags you can swap on AWS services — the real price stays the same, but each team sees their own rate.
Support
AWS Support provides technical support and guidance across four plans — Basic (free), Developer, Business, and Enterprise. Get help from cloud engineers via chat, phone, or console. Think of it like an insurance policy for your AWS infrastructure — the higher the plan, the faster the response and the more proactive the guidance.
FIS
AWS Fault Injection Simulator (FIS) runs controlled chaos engineering experiments on your AWS infrastructure. Intentionally break things to prove your system can handle real failures. Think of it like a fire drill for your cloud — you simulate server crashes, network failures, and AZ outages to verify your system actually recovers.
Launch Wizard
AWS Launch Wizard guides you through sizing, configuring, and deploying production-ready third-party applications on AWS. Deploy SQL Server, SAP, or Active Directory following AWS best practices. Think of it like a GPS for enterprise app deployment — answer a few questions and it navigates you to a production-ready setup.
Chatbot
AWS Chatbot sends AWS alerts and lets you run CLI commands from Slack and Microsoft Teams. Respond to incidents without leaving chat. Think of it like AWS notifications in your group chat — CloudWatch alarms, security findings, and billing alerts appear in Slack where your team already works.
re:Post Private
AWS re:Post Private is a fully managed, enterprise-internal knowledge base for AWS questions. Your team builds a private Q&A repository with curated answers from your own experts. Think of it like an internal Stack Overflow for AWS — your team's AWS knowledge gets captured, curated, and reused across the organization.
Incident Manager
AWS Systems Manager Incident Manager helps prepare for, respond to, and recover from incidents. Automate escalation, engage responders, and track resolution with runbooks. Think of it like a fire station control room for your cloud — when a CloudWatch alarm fires, Incident Manager automatically pages the right people and guides response.
CloudFormation StackSets
AWS CloudFormation StackSets extends infrastructure-as-code to multiple accounts and regions with a single template. Deploy consistent infrastructure across your entire AWS Organization simultaneously. Think of it like a photocopier for your cloud architecture — define your infrastructure once and deploy identical copies to every account and region.
CloudTrail Lake
AWS CloudTrail Lake is a managed data lake for auditing and analyzing AWS API activity. Run SQL queries on years of CloudTrail logs without managing S3, Athena, or partitions. Think of it like Google Search for your AWS account history — ask questions like "who deleted that database?" and get answers in seconds, not hours.
Migration
4 services
DMS
AWS Database Migration Service (DMS) helps migrate databases to AWS quickly and securely. The source database remains fully operational during migration.
DRS
AWS Elastic Disaster Recovery (DRS) provides continuous block-level replication for scalable, cost-effective disaster recovery to AWS from physical, virtual, and cloud servers.
Migration Hub
AWS Migration Hub provides a single location to track the progress of application migrations across your entire portfolio. Monitor status of all AWS and partner migration tools.
Mainframe Modernization
AWS Mainframe Modernization migrates and modernizes legacy mainframe applications (COBOL, PL/I, JCL) to AWS without rewriting decades of business logic. Think of it like a professional translator for old code — it understands COBOL and converts your mainframe applications to run on modern cloud infrastructure.
Network
17 services
VPC
Amazon Virtual Private Cloud (VPC) lets you provision a logically isolated section of the AWS cloud where you launch resources in a virtual network you define.
CloudFront
Amazon CloudFront is a fast content delivery network (CDN) that securely delivers data, videos, applications, and APIs to viewers globally with low latency.
ELB
Elastic Load Balancing automatically distributes incoming traffic across EC2 instances, containers, Lambda functions, and IP addresses in multiple Availability Zones.
Route 53
Amazon Route 53 is a highly available and scalable cloud DNS service. Register domains, route traffic with multiple policies, and monitor resource health.
API Gateway
Amazon API Gateway is a fully managed service for creating, publishing, maintaining, monitoring, and securing REST, HTTP, and WebSocket APIs at any scale.
Direct Connect
AWS Direct Connect establishes a dedicated network connection from on-premises to AWS. Bypass the public internet for consistent, low-latency private connectivity.
Global Accelerator
AWS Global Accelerator improves application availability and performance by directing traffic through the AWS global network to the optimal regional endpoint.
Transit Gateway
AWS Transit Gateway connects VPCs, VPNs, and Direct Connect in a hub-and-spoke architecture. Simplifies network management at scale.
Network Firewall
AWS Network Firewall is a managed firewall and IDS/IPS service for VPCs. Filter traffic with stateful deep packet inspection at the subnet level.
VPN
AWS VPN establishes secure IPSec connections between on-premises networks and AWS. Site-to-Site and Client VPN options.
Client VPN
AWS Client VPN is a managed remote access VPN service using OpenVPN-based clients to connect remote users to AWS and on-premises networks.
Route 53 Resolver
Amazon Route 53 Resolver enables DNS resolution between VPCs and on-premises networks with conditional forwarding rules.
Cloud Map
AWS Cloud Map is a service discovery registry for cloud resources. Every microservice registers itself and discovers other services by name — no hardcoded IPs. Think of it like a phone book for your app — services look up where other services live instead of memorizing their addresses.
App Mesh
AWS App Mesh provides application-level networking for microservices using the open-source Envoy proxy. Control traffic, observe requests, and secure service-to-service communication. Think of it like having a smart traffic system for your microservices — routes, monitors, and protects every request between services.
VPC Lattice
Amazon VPC Lattice is an application networking service that connects services across VPCs and accounts without managing complex routing. Define service-to-service communication policies centrally. Think of it like a universal phone system for your microservices — services call each other by name, regardless of which VPC or account they are in.
Private 5G
AWS Private 5G lets you deploy your own private 5G mobile network on-premises in days instead of months. No telecom expertise needed — AWS ships the hardware, you plug it in. Think of it like setting up Wi-Fi but with 5G range and reliability — cover factories, campuses, or warehouses with private cellular connectivity.
Telco Network Builder
AWS Telco Network Builder automates the deployment and management of telecom network functions on AWS. Design 5G core and RAN networks with a drag-and-drop canvas. Think of it like a network architect's sketchpad — draw your telecom network, click deploy, and AWS provisions the infrastructure automatically.
Security
25 services
IAM
AWS Identity and Access Management (IAM) lets you securely control access to AWS services and resources. Create users, groups, and roles with fine-grained permissions.
KMS
AWS Key Management Service (KMS) lets you create and control cryptographic keys. Integrated with CloudTrail for auditing and most AWS services for encryption.
Secrets Manager
AWS Secrets Manager helps protect access to applications, services, and IT resources. Rotate, manage, and retrieve database credentials, API keys, and other secrets.
GuardDuty
Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior across AWS accounts and workloads.
WAF
AWS WAF is a web application firewall that monitors HTTP(S) requests to CloudFront, ALB, API Gateway, and AppSync with customizable security rules.
Shield
AWS Shield provides managed DDoS protection. Standard is included free. Advanced provides enhanced protection, 24/7 response team access, and cost protection.
Cognito
Amazon Cognito provides authentication, authorization, and user management for web and mobile apps. Supports social login and enterprise SAML/OIDC federation.
ACM
AWS Certificate Manager (ACM) provisions, manages, and deploys public and private SSL/TLS certificates for use with AWS services. Certificates renew automatically.
Macie
Amazon Macie is a data security service that uses machine learning and pattern matching to discover, classify, and protect sensitive data stored in Amazon S3.
Inspector
Amazon Inspector is an automated vulnerability management service that continuously scans AWS workloads for software vulnerabilities and unintended network exposure.
Security Hub
AWS Security Hub provides a comprehensive view of your security state across AWS accounts. Aggregates, organizes, and prioritizes security findings from multiple services.
Firewall Manager
AWS Firewall Manager centrally configures and manages firewall rules across accounts and applications in AWS Organizations.
Verified Permissions
Amazon Verified Permissions is a scalable, fine-grained permissions management and authorization service for custom applications. Uses Cedar policy language.
Detective
Amazon Detective uses ML and graph theory to help conduct faster security investigations across AWS workloads.
Artifact
AWS Artifact provides on-demand access to AWS security and compliance reports. Download SOC, PCI, ISO, FedRAMP, and HIPAA attestations.
IAM Roles Anywhere
AWS IAM Roles Anywhere extends IAM roles to on-premises, hybrid, and multicloud environments using X.509 certificate-based authentication.
RAM
AWS Resource Access Manager lets you share resources across AWS accounts within your organization without creating duplicates.
CloudHSM
AWS CloudHSM provides FIPS 140-2 Level 3 validated, single-tenant hardware security modules in the cloud for cryptographic operations.
Signer
AWS Signer is a fully managed code-signing service for digitally signing code, containers, and documents to ensure trust and integrity.
Audit Manager
AWS Audit Manager continuously audits AWS usage to simplify how you assess risk and compliance. Map AWS evidence to controls in pre-built frameworks.
Private CA
AWS Private Certificate Authority is a managed private CA service for issuing and revoking private digital certificates. No need to operate your own PKI infrastructure.
Wickr
AWS Wickr provides end-to-end encrypted messaging, voice, video, and file sharing for secure enterprise collaboration. Every message is encrypted before it leaves the sender and can only be decrypted by the intended recipient. Think of it like WhatsApp but with military-grade encryption that even AWS can't read.
Verified Access
AWS Verified Access provides VPN-less secure access to corporate applications. Users authenticate once and get access based on their identity and device posture — no VPN client needed. Think of it like a smart bouncer who checks your ID, verifies your device is safe, and lets you into only the apps you're authorized for.
Security Lake
Amazon Security Lake centralizes all security data from AWS, SaaS, and on-premises into a single data lake. Query years of security logs with SQL. Think of it like a universal security camera DVR — every security signal from every tool gets recorded in one place, in a standard format (OCSF), ready for investigation.
Payment Cryptography
AWS Payment Cryptography provides PCI-compliant payment HSM capabilities for processing credit card transactions. Generate PINs, validate CVVs, and issue EMV keys without operating physical HSMs. Think of it like having a bank-grade vault for payment transactions in the cloud — PCI certified and always available.
Storage
12 services
S3
Amazon Simple Storage Service (S3) is an object storage service with industry-leading scalability, data availability, security, and performance.
EBS
Amazon Elastic Block Store (EBS) provides persistent block-level storage for EC2. Each volume is automatically replicated within its Availability Zone.
EFS
Amazon Elastic File System (EFS) provides scalable, elastic NFS file storage for Linux workloads. Grows and shrinks automatically as files are added and removed.
S3 Glacier
Amazon S3 Glacier provides extremely low-cost archival storage with three archive classes optimized for different access patterns and retrieval times.
Backup
AWS Backup is a fully managed backup service that centralizes and automates data protection across AWS services. Define backup policies and monitor compliance.
FSx
Amazon FSx provides fully managed, high-performance file systems. Choose from NetApp ONTAP, OpenZFS, Windows File Server, or Lustre for HPC workloads.
Storage Gateway
AWS Storage Gateway provides hybrid cloud storage integration. Bridge on-premises environments with AWS storage services.
Snowball
AWS Snowball is a petabyte-scale data transport solution using physical ruggedized devices for offline data transfer into and out of AWS.
Transfer Family
AWS Transfer Family provides fully managed SFTP, FTPS, and FTP file transfers directly into and out of S3 or EFS. No need to run file-transfer servers.
DataSync
AWS DataSync is an online data transfer service that simplifies moving data between on-premises storage and AWS, or between AWS storage services, with automated scheduling.
Snowcone
AWS Snowcone is the smallest AWS Snow Family device — a portable, rugged 4.5-pound device with 8TB of storage. Collect data in disconnected environments and ship it to AWS. Think of it like a rugged USB drive on steroids — collect data from a drone, factory floor, or remote field site and physically mail it to the cloud.
Snowmobile
AWS Snowmobile is a 45-foot shipping container pulled by a semi-truck that transfers up to 100PB of data to AWS. Yes, this is real — a literal truck full of storage that drives to your datacenter. Think of it like the ultimate file transfer — when your internet is too slow for exabytes of data, AWS sends a truck.