Signup, Accounts, and Credentials - Getting Started with Amazon Web Services in China
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Signup, Accounts, and Credentials

To use Amazon Web Services in China services, you need an account and credentials specific to Amazon Web Services in China, the suite of Amazon Web Services available in the Beijing and Ningxia (China) Regions. Accounts created for other Amazon Regions won't work for Amazon Web Services in China. Similarly, Amazon Web Services in China accounts won't work in Amazon Regions outside the Beijing and Ningxia Regions. To use services in another Region, Amazon Web Services in China customers need to sign up for an account in that Region.

To comply with Chinese law and regulations, Amazon Web Services in China customers who want to make content publicly available via Amazon Web Services in China services are required to first file for Internet Content Provider (ICP) recordal with the Ministry of Industry and Information Technology. Until ICP recordal is complete, Amazon Web Services in China customers are granted an Internal Access Account, which provides limited access to Amazon Web Services in China features. Amazon Web Services in China customers who don't intend to publish content publicly aren't required to complete ICP recordal. These customers can get started right away by signing up for an Internal Access Account and using Amazon Web Services in China services for personal projects or for projects internal to their organization. To use all of the Amazon Web Services in China features, customers need a Full Access Account. The two account types are described in more detail below.

Signup

The Amazon Web Services Management Console walks you through the process of signing up for Amazon Web Services in China. The steps below provide a high-level overview of signup.

To sign up for Amazon Web Services in China:

  1. Go to www.amazonaws.cn and register with Amazon Web Services in China.

  2. Receive an Internal Access Account.

  3. (Optional) Complete the ICP recordal process. This step is necessary for publishing content for public consumption. When you've completed ICP recordal, you'll receive a Full Access Account.

  4. Receive your Amazon Web Services in China account credentials. The credentials consist of an account ID, access key ID, and secret access key. Note that you can't use your Amazon Web Services in China credentials to access any other Amazon Region.

IAM Credentials

To use the Amazon Web Services in China console, you must have credentials provided by Amazon Identity and Access Management (IAM). All users have to create IAM credentials during the sign-up process. When you first sign up for Amazon Web Services in China, you create an IAM user administrator. Then you can sign in to the Amazon Web Services in China console with your account ID.

The administrator has full access to manage Amazon Web Services in China resources. For example, as the administrator, you can create additional IAM users by using the Amazon Web Services in China console. You can then manage users and their permissions by assigning them to groups. For more information about users, groups, and policies, see Working with Users and Groups. To learn more about IAM and about credentials in Amazon Web Services in China, see Amazon Identity and Access Management.

If you forget your IAM user password, you can reset the password from the Amazon Web Services Management Console. Amazon will send a password reset link to the email address that is associated this Amazon account. If you don't have access to that email, contact your administrator.

To reset your IAM user password:
  • Use your Amazon account ID or alias to begin signing in to the Amazon Web Services Management Console at https://console.amazonaws.cn/.

  • Choose Forgot password?.

  • If necessary, enter your account ID and user name. Then provide the CAPTCHA text and choose Send email.

  • Check the email that is associated with your Amazon account for a message from Amazon Web Services. The email will come from an address ending in @amazonaws.cn. If you don't see the email in your account, check your spam folder. If you no longer have access to the email, contact your account administrator. If you are the administrator, contact Amazon Web Services Support Center.

  • Follow the directions in the email to reset your password. If your administrator has enabled an account password policy, you must meet those complexity requirements. AWSBillingReadOnlyAccess If you receive an error, contact your administrator to learn about your specific requirements. For more information, see Setting an Account Password Policy for IAM Users in the IAM User Guide.

Close Account

Use the Amazon Web Services Management Console to close your Amazon Web Services account in China. The steps below provide a high-level overview.

If you close the account that you're using for the Amazon Firewall Manager administrator, Amazon and Firewall Manager handle the closure as follows:

Amazon Web Services revokes the account's administrative access from the service and deactivates any policies that were managed by the administrator account. The protections that were provided by these policies are stopped across the organization.

  • Before closing your account, back up and then delete your policy data and other account resources. You will no longer have access to them after you close the account.

    • The account resources are subject to the policies of Amazon Web Services operating partners: Sinnet in the China (Beijing) Region and NWCD in the China (Ningxia) Region. Account closure procedures in China might take longer than in other Amazon Web Services Regions.

  • For more information, see Closing an account.

You can close your Amazon Web Services account using the following procedure.

To close your Amazon Web Services account
  1. Sign in as the root user of the account that you want to close, using the email address and password that are associated with the account.

    If you sign in as an Amazon Identity and Access Management (IAM) user or role, you can't close an account.

  2. On the navigation bar in the upper-right corner, choose your account name (or alias), and then choose My Account.

  3. On the Account Settings page, scroll to the end of the page to the Close Account section. Read and ensure that you understand the text next to the check box. After you close an Amazon Web Services account, you can no longer use it to access Amazon services.

  4. Select the check box to accept the terms, and then choose Close Account.

  5. In the confirmation box, choose Close Account.