Getting Started with AWS services in China
AWS services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with AWS services in China.

Amazon Elastic Compute Cloud

Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides resizable compute capacity in the cloud. It's designed to make web-scale computing easier for developers. Amazon EC2 presents a true virtual computing environment, allowing you to use web service interfaces to launch instances with a variety of operating systems, load them with your custom application environment, manage your network’s access permissions, and run your image using as many or few systems as you want to.

Please note the following AWS services in China implementation particulars, which are potentially relevant to all services in the Beijing and Ningxia Regions.

  • To use services in the Beijing and Ningxia Regions, you need an account and credentials specific to the Beijing and Ningxia Regions. Accounts and credentials for other AWS Regions will not work for services operating in the Beijing and Ningxia Regions. Likewise, accounts and credentials for the Beijing and Ningxia Regions will not work for other AWS Regions.

  • There are two Availability Zones in the Beijing Region.

  • There are three Availability Zones in the Ningxia Region.

  • In AWS Identity and Access Management (IAM), you can grant or deny a service access to resources using the Principal policy element. Service principal values vary by Region.

  • The domain for both the Beijing and Ningxia Regions is

  • The endpoints for services in the China (Beijing) Region and the China (Ningxia) Region are different from other global endpoints.

    • The endpoint domain for both the Beijing and Ningxia Regions is

    • For an endpoint in the China (Beijing) Region, the Region value should be cn-north-1.

    • For an endpoint in the China (Ningxia) Region, the Region value should be cn-northwest-1.

    • For example, the endpoint for Elastic Load Balancing in the Beijing Region is

    Endpoint syntax varies from service to service. For more information, see China (Beijing), China (Ningxia), and the service-specific documentation.

  • In the China Regions, the Amazon Resource Name (ARN) syntax includes a cn.

    For example: arn:aws-cn:iam::123456789012:user/division_abc/subdivision_xyz/Bob.

  • The EC2-Classic platform is not supported.

  • The free usage tier is not available in the China Regions.


The AWS documentation might show code examples for endpoints and ARNs that are not specific for the Beijing and Ningxia Regions. When using examples, verify you are using the correct endpoints and ARNs for your Region.

Language Options

Chinese is the default language for AWS services in China documentation. To switch to the English version of the page, use the language selection dropdown at the top of the page. Note: Selecting a different language will update the language cookie, making it the default language.

Chinese-language URL syntax:
English-language URL syntax:

Feature Availability and Implementation Differences

The AWS services in China implementation of Amazon EC2 is unique in the following ways:

  • Starter accounts—For customers with an Internal Access Account, Amazon EC2 public Internet ports are blocked. Internal ports remain available. For more information, see Signup, Accounts, and Credentials.

  • Limited instance types—Only some Amazon EC2 instance types are available.

  • No AWS Systems Manager for Microsoft System Center Virtual Machine Manager—SCVMM is not available.

  • EC2 AMI Tools—The Beijing and Ningxia Regions use a non-default public key certificate to encrypt Amazon Machine Image (AMI) manifests. The ec2-bundle-image, ec2-bundle-vol, ec2-migrate-bundle, and ec2-migrate-manifest commands require the --ec2cert $EC2_AMITOOL_HOME/etc/ec2/amitools/cert-ec2-cn-north-1.pem option in the Beijing Region, and the --ec2cert $EC2_AMITOOL_HOME/etc/ec2/amitools/cert-ec2-cn-northwest-1.pem option in the Ningxia Region.

  • Cross-region copy operations are supported only between the Beijing and Ningxia Regions.

  • VM Export—The Amazon S3 bucket for the destination image must exist and must have WRITE and READ_ACP permissions granted to the Beijing Region account with the following canonical ID: 834bafd86b15b6ca71074df0fd1f93d234b9d5e848a2cb31f880c149003ce36f.

  • By default, enhanced networking is not enabled on Windows Server 2012 R2 AMIs. For more information, see Enabling Enhanced Networking on Windows Instances in a VPC.

  • Tagging—Tagging resources during creation is not supported. You can tag resources only after creating them.

  • IPv6 is not supported.

  • Parameter Store secure string parameters are not supported.

  • Systems Manager Automation — The aws:copyImage action is not supported.

  • Spot Instance requests—The AWSServiceRoleForEC2Spot service-linked role is not created for you automatically. Create a service-linked role with this name, using as the AWS service name and AWSEC2SpotServiceRolePolicy as the policy.

  • Reserved Instances:

    • No Reserved Instance Marketplace—The Reserved Instance Marketplace is not available.

    • No three-year-term Standard Reserved Instances—Standard Reserved Instances are not available in three-year terms.

    • Reserved Instance Discount Pricing Tiers—For more information, see Understanding Reserved Instance Discount Pricing Tiers.

      Pricing Tiers

      Total List Value of Reserved Instances Upfront discount Hourly discount
      Less than ¥3200000 0% 0%
      ¥3200000 to ¥25000000 5% 5%
      ¥25000000 to ¥64000000 10% 10%
      More than ¥64000000 Contact us Contact us

User Guides

AWS services in China user guides are available in HTML and PDF, in both Chinese and English. API guides are available in HTML and PDF, in English only. Currently, the API guides are not available in the Beijing and Ningxia Regions. Links to API guides will take you to the global AWS site. Note that some features and functionality described in the guides may not be available in the current AWS services in China release.

Command Line Interface (CLI)

To interact with Amazon Web Services from the command line, you can use the AWS Command Line Tools. For some services, a service-specific command line interface (CLI) is also available.