Getting Started with AWS services in China
AWS services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with AWS services in China.

Amazon Elastic Compute Cloud

Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides resizable compute capacity in the cloud. It's designed to make web-scale computing easier for developers. Amazon EC2 presents a true virtual computing environment, allowing you to use web service interfaces to launch instances with a variety of operating systems, load them with your custom application environment, manage your network’s access permissions, and run your image using as many or few systems as you want to.

Region Availability

Amazon Elastic Compute Cloud is available in the following regions in China:

  • Beijing Region

  • Ningxia Region

Feature Availability and Implementation Differences

The AWS services in China implementation of Amazon EC2 is unique in the following ways:

  • Starter accounts—For customers with an Internal Access Account, Amazon EC2 public Internet ports are blocked. Internal ports remain available. For more information, see Signup, Accounts, and Credentials.

  • Limited instance types—Only some Amazon EC2 instance types are available.

  • No AWS Systems Manager for Microsoft System Center Virtual Machine Manager—SCVMM is not available.

  • EC2 AMI Tools—The Beijing and Ningxia Regions use a non-default public key certificate to encrypt Amazon Machine Image (AMI) manifests. The ec2-bundle-image, ec2-bundle-vol, ec2-migrate-bundle, and ec2-migrate-manifest commands require the --ec2cert $EC2_AMITOOL_HOME/etc/ec2/amitools/cert-ec2-cn-north-1.pem option in the Beijing Region, and the --ec2cert $EC2_AMITOOL_HOME/etc/ec2/amitools/cert-ec2-cn-northwest-1.pem option in the Ningxia Region.

  • Cross-region copy operations are supported only between the Beijing and Ningxia Regions.

  • VM Export—The Amazon S3 bucket for the destination image must exist and must have WRITE and READ_ACP permissions granted to the Beijing Region account with the following canonical ID: 834bafd86b15b6ca71074df0fd1f93d234b9d5e848a2cb31f880c149003ce36f.

  • By default, enhanced networking is not enabled on Windows Server 2012 R2 AMIs. For more information, see Enabling Enhanced Networking on Windows Instances in a VPC.

  • Tagging—Tagging resources during creation is not supported. You can tag resources only after creating them.

  • IPv6 is supported. For more information about IPv6 support for Amazon S3 and other services, see Getting Started with AWS services in China.

  • Parameter Store secure string parameters are not supported.

  • Systems Manager Automation — The aws:copyImage action is not supported.

  • Spot Instance requests—The AWSServiceRoleForEC2Spot service-linked role is not created for you automatically. Create a service-linked role with this name, using spot.amazonaws.com as the AWS service name and AWSEC2SpotServiceRolePolicy as the policy.

  • Reserved Instances:

    • No Reserved Instance Marketplace—The Reserved Instance Marketplace is not available.

    • No three-year-term Standard Reserved Instances—Standard Reserved Instances are not available in three-year terms.

    • Reserved Instance Discount Pricing Tiers—For more information, see Understanding Reserved Instance Discount Pricing Tiers.

      Pricing Tiers

      Total List Value of Reserved Instances Upfront discount Hourly discount
      Less than ¥3200000 0% 0%
      ¥3200000 to ¥25000000 5% 5%
      ¥25000000 to ¥64000000 10% 10%
      More than ¥64000000 Contact us Contact us
  • On-Demand Capacity Reservation sharing is not available in the China Regions.

Guides and References

AWS services in China user guides are available in HTML and PDF, in both Chinese and English. API guides are available in HTML and PDF, in English only. Currently, the API guides are not available in the Beijing and Ningxia Regions. Links to API guides will take you to the global AWS site. Note that some features and functionality described in the guides may not be available in the current AWS services in China release.

Command Line Interface (CLI)

To interact with Amazon Web Services from the command line, you can use the AWS Command Line Tools. For some services, a service-specific command line interface (CLI) is also available.

General Information About AWS services in China

The following information applies to all AWS services that are available in the China Regions.

AWS Accounts in the China Regions

To use services in the Beijing and Ningxia Regions, you need an account and credentials specific to each of those Regions.

  • Accounts and credentials for other AWS Regions will not work for services operating in the Beijing and Ningxia Regions.

  • Accounts and credentials for the Beijing and Ningxia Regions will not work for other AWS Regions.

  • For more information, see Signup, Accounts, and Credentials

Domain for AWS services in China

The domain for AWS services in China is www.amazonaws.cn.

Endpoints & Amazon Resource Names (ARNs)

For information about endpoints and ARNs in AWS services in China, see Endpoints and ARNs for AWS services in China

Availability Zones for the China Regions

  • In the Beijing Region, there are two Availability Zones.

  • In the Ningxia Region, there are three Availability Zones.

General Information for AWS services in China

The following applies to all AWS services that are available in the China Regions. For detailed information about specific AWS services, see the service-specific topic in this guide.

  • AWS Identity and Access Management (IAM)

    • You can grant or deny a service access to resources using the Principal policy element.

    • Service principal values vary by Region.

  • EC2-Classic Platform

    • The EC2-Classic platform is not supported.

  • Free Usage Tier

    • The free usage tier is not available in the Beijing and Ningxia Regions.

AWS Console

The console for AWS services in China are unique to China. The screenshots in the AWS guides might differ from what you see on your console. For information about differences in service functionality, see the topics for each service in this guide.

Code Examples

The AWS documentation might include endpoints and ARNs in code examples that are not specific to the Beijing and Ningxia Regions. When using examples, verify you are using the endpoints and ARNs for your Region.