Getting Started with Amazon AWS
AWS services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon AWS.

AWS Directory Service

AWS Directory Service provides multiple ways to use Microsoft Active Directory (AD) with other AWS services. Directories store information about users, groups, and devices, and administrators use them to manage access to information and resources. AWS Directory Service provides multiple directory choices for customers who want to use existing Microsoft AD or Lightweight Directory Access Protocol (LDAP)–aware applications in the cloud. It also offers those same choices to developers who need a directory to manage users, groups, devices, and access.

Please note the following Amazon AWS implementation particulars, which are potentially relevant to all services in the Beijing and Ningxia Regions.

  • To use services in the Beijing and Ningxia Regions, you need an account and credentials specific to the Beijing and Ningxia Regions. Accounts and credentials for other AWS Regions will not work for services operating in the Beijing and Ningxia Regions. Likewise, accounts and credentials for the Beijing and Ningxia Regions will not work for other AWS Regions.

  • There are two Availability Zones in the Beijing Region.

  • There are three Availability Zones in the Ningxia Region.

  • In AWS Identity and Access Management (IAM), you can grant or deny a service access to resources using the Principal policy element. Service principal values vary by Region.

  • The domain for both the Beijing and Ningxia Regions is www.amazonaws.cn.

  • The endpoints for services in the China (Beijing) Region and the China (Ningxia) Region are different from other global endpoints.

    • The endpoint domain for both the Beijing and Ningxia Regions is amazonaws.com.cn.

    • For an endpoint in the China (Beijing) Region, the Region value should be cn-north-1.

    • For an endpoint in the China (Ningxia) Region, the Region value should be cn-northwest-1.

    • For example, the endpoint for Elastic Load Balancing in the Beijing Region is elasticloadbalancing.cn-north-1.amazonaws.com.cn.

    Endpoint syntax varies from service to service. For more information, see China (Beijing), China (Ningxia), and the service-specific documentation.

  • In the China Regions, the Amazon Resource Name (ARN) syntax includes a cn.

    For example: arn:aws-cn:iam::123456789012:user/division_abc/subdivision_xyz/Bob.

  • The EC2-Classic platform is not supported.

  • AWS Marketplace is not supported.

  • The free usage tier is not available in the China Regions.

Note

The AWS documentation might show code examples for endpoints and ARNs that are not specific for the Beijing and Ningxia Regions. When using examples, verify you are using the correct endpoints and ARNs for your Region.

Language Options

Chinese is the default language for Amazon AWS documentation. To switch to the English version of the page, use the language selection dropdown at the top of the page. Note: Selecting a different language will update the language cookie, making it the default language.

Chinese-language URL syntax:
http://docs.amazonaws.cn/aws/latest/userguide/introduction.html
English-language URL syntax:
http://docs.amazonaws.cn/en_us/aws/latest/userguide/introduction.html

Feature Availability and Implementation Differences

The Amazon AWS implementation of AWS Directory Service is unique in the following ways:

  • Only the AWS Managed Microsoft AD directory type is supported by AWS Directory Service in the Beijing and Ningxia Regions.

  • The following directory types are not currently supported in the Beijing and Ningxia Regions:

    • Simple AD

    • AD Connector

    • Amazon Cloud Directory

  • The following AWS Managed Microsoft AD features are not currently supported in the Beijing and Ningxia Regions:

    • Multi-factor authentication (MFA)

    • Amazon EC2 seamless domain join

    • Mapping users to IAM roles for access to the AWS Management Console

  • The following AWS services are not currently supported by AWS Directory Service in the Beijing and Ningxia Regions:

    • Amazon WorkSpaces

    • Amazon WorkDocs

    • Amazon WorkMail

    • Amazon QuickSight

    • Amazon Chime

    • Amazon Connect

    • AWS Management Console

  • Amazon Resource Names (ARNs) and endpoints have different values in the Beijing and Ningxia Regions.

  • Only signature version 4 signing is supported in the Beijing and Ningxia Regions.

User Guides

Amazon AWS user guides are available in HTML and PDF, in both Chinese and English. API guides are available in HTML and PDF, in English only. Currently, the API guides are not available in the Beijing and Ningxia Regions. Links to API guides will take you to the global AWS site. Note that some features and functionality described in the guides may not be available in the current Amazon AWS release.