Integration

AWS MQ

Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ. Migrate existing message broker applications to the cloud without rewriting code.

41 Compliance Frameworks → AWS CLI Library → Integration Security Guide →

What is MQ? (Simple Explanation)

MQ is an AWS service in the Integration category. Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ.

When Would You Use MQ?

  • Lift-and-shift messaging workloads
  • JMS and NMS application migration
  • RabbitMQ cluster management
  • Hybrid messaging architectures

Who Uses MQ?

From startups to enterprises, MQ powers:

StartupsMid-size CompaniesLarge EnterprisesGovernmentNonprofits

What Makes MQ Powerful

Apache ActiveMQ and RabbitMQ engine options
Multi-AZ deployment with automatic failover
Encryption at rest and in transit
Automatic minor version upgrades
Integration with CloudWatch and CloudTrail

MQ Pricing & Free Tier

SNS: first 1M publishes free. SQS: first 1M requests free. EventBridge: free event bus included. Pay per million requests thereafter.

Check latest pricing on AWS →

MQ Best Practices

  1. 1Use dead-letter queues (DLQs) on all SQS queues and Lambda event sources
  2. 2Enable content-based deduplication on FIFO SQS queues
  3. 3Use EventBridge schema registry to document and version event schemas
  4. 4Set message retention to match your SLA — at least 4 days for production queues
  5. 5Monitor queue depth with CloudWatch and auto-scale consumers based on backlog

Getting Started with MQ in 5 Minutes

  1. 1Open the AWS Console and navigate to MQ
  2. 2Click "Create" or "Get started" to begin configuration
  3. 3Configure the required settings — name, region, and access permissions
  4. 4Review and create — monitor the initial status in CloudWatch

MQ CLI Quick Reference

2 production-ready commands. Full CLI Library (225+ services) →

aws mq helpView all MQ CLI v2 commands and subcommands
aws mq describe-mq --helpView options for describing MQ resources

Pros & Cons of MQ

Pros

  • Apache ActiveMQ and RabbitMQ engine options
  • Multi-AZ deployment with automatic failover
  • Encryption at rest and in transit
  • Automatic minor version upgrades
  • Integration with CloudWatch and CloudTrail

Cons

  • ✕Vendor lock-in — migrating away from AWS requires significant effort
  • ✕Costs can be unpredictable without proper monitoring and budgeting
  • ✕Learning curve for beginners — AWS has 200+ services with complex IAM policies

MQ vs Alternatives

MQ vs EC2
Choose MQ when

Choose MQ for Lift-and-shift messaging workloads and JMS and NMS application migration. It excels at apache activemq and rabbitmq engine options.

Choose EC2 when

Choose EC2 as an alternative when your requirements differ. Each service in the Integration category serves different architectural patterns.

Services That Work with MQ

MQ is rarely used alone. It is typically combined with:

EC2CloudWatchCloudTrailKMSVPC

Compliance & Security

How AWS MQ fits into major compliance standards. Browse all 41 frameworks →

CIS AWS v3.0

Amazon MQ configuration is audited by CIS Benchmarks v1.5–v3.0 for secure cloud defaults.

NIST 800-53

Amazon MQ access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families.

PCI DSS 4.0

Amazon MQ encryption, access control, and logging support PCI DSS for cardholder data environments.

SOC 2

Amazon MQ security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria.

ISO 27001

Amazon MQ configuration and monitoring controls map to ISO 27001 Annex A information security management.

Frequently Asked Questions About MQ

What is AWS MQ?

Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ. Migrate existing message broker applications to the cloud without rewriting code.

What is MQ used for?

MQ is commonly used for: Lift-and-shift messaging workloads; JMS and NMS application migration; RabbitMQ cluster management; Hybrid messaging architectures. It's a core service in the integration category of AWS.

Is MQ free?

SNS: first 1M publishes free. SQS: first 1M requests free. EventBridge: free event bus included. Pay per million requests thereafter.

What are the key features of MQ?

MQ's most important capabilities include: Apache ActiveMQ and RabbitMQ engine options. Multi-AZ deployment with automatic failover. Encryption at rest and in transit. Automatic minor version upgrades. Integration with CloudWatch and CloudTrail. Each of these is designed to help teams lift-and-shift messaging workloads.

How does MQ compare to alternatives?

MQ competes with both AWS-native alternatives (EC2, CloudWatch, CloudTrail) and third-party equivalents. The right choice depends on your specific requirements for scalability, cost, and operational overhead. See the comparisons section below for detailed guidance.

Which compliance frameworks apply to MQ?

CIS AWS v3.0: Amazon MQ configuration is audited by CIS Benchmarks v1.5–v3.0 for secure cloud defaults. NIST 800-53: Amazon MQ access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families. PCI DSS 4.0: Amazon MQ encryption, access control, and logging support PCI DSS for cardholder data environments. SOC 2: Amazon MQ security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria. ISO 27001: Amazon MQ configuration and monitoring controls map to ISO 27001 Annex A information security management.

People also search for

AWS MQ tutorialMQ getting startedMQ best practicesMQ pricingMQ free tierwhat is MQMQ vsMQ documentationMQ cheat sheet

Was this page helpful?

Ready to secure your MQ configuration?

Pavora continuously monitors your AWS MQ for misconfigurations, compliance violations, and security risks.

Get StartedBrowse All Services