View a markdown version of this page

Amazon Elastic Kubernetes Service - Getting Started with Amazon Web Services in China
Region AvailabilityFeature Availability and Implementation DifferencesGuides and ReferencesGeneral Information About Amazon Web Services in China
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Elastic Kubernetes Service

Amazon Elastic Kubernetes Service is a managed service that makes it easy for you to run Kubernetes on Amazon without needing to install and operate your own Kubernetes clusters.

Region Availability

Amazon Elastic Kubernetes Service is available in the following regions in China:

  • Beijing Region

  • Ningxia Region

Feature Availability and Implementation Differences

The Amazon Web Services in China implementation of Amazon EKS is unique in the following ways:

  • Dual-stack API endpoint for the Amazon EKS OIDC Issuer URL isn’t available.

  • Dual-stack API endpoint for the Amazon EKS API isn’t available.

  • Amazon EKS Hybrid Nodes CLI utility nodeadm is available for download at the following endpoints:

    • For x86_64 hosts: https://eks-hybrid-assets.awsstatic.cn/releases/latest/bin/linux/amd64/nodeadm

    • For ARM hosts: https://eks-hybrid-assets.awsstatic.cn/releases/latest/bin/linux/arm64/nodeadm

  • The build of Cilium maintained by Amazon Web Services for use with Amazon EKS Hybrid Nodes is available at the following private ECR repositories:

    • Beijing Region: 907723705730.dkr.ecr.cn-north-1.amazonaws.com.cn/cilium/cilium

    • Ningxia Region: 907723705730.dkr.ecr.cn-northwest-1.amazonaws.com.cn/cilium/cilium

      To authenticate with the private registry, see Authenticating to a private Amazon ECR registry. To install Cilium using Helm, use the following command:

      helm install cilium oci://907723705730.dkr.ecr.REGION_CODE.amazonaws.com.cn/cilium/cilium \
    --version CILIUM_VERSION \
    --namespace kube-system \
    --values cilium-values.yaml

  • When using Amazon EKS Hybrid Nodes, customers are responsible for complying with applicable cross-border data transfer requirements. We suggest only connecting your nodes located within Chinese mainland with EKS.

  • App Mesh isn’t available.

  • Amazon EKS on Amazon Outposts isn’t available.

  • Amazon EC2 A1 instance worker nodes aren’t available.

  • The Amazon EKS connector isn’t available.

  • The following add-ons may require modification for use (see the topics for details):

  • The Mountpoint for Amazon S3 CSI Driver isn’t available as an Amazon EKS add-on and self-managed installation isn’t officially supported.

  • The Amazon EKS node monitoring agent isn’t available as an Amazon EKS add-on and self-managed installation isn’t officially supported.

  • Amazon Managed Service for Prometheus isn’t available.

  • Amazon EKS extended support for Kubernetes versions isn’t available.

  • Amazon EKS Anywhere isn’t available.

  • Amazon EKS Upgrade insights aren’t available.

  • Amazon EKS Auto Mode isn’t available.

  • The Bottlerocket FIPS AMIs aren’t available.

Guides and References

Amazon Web Services in China user guides are available in HTML and PDF, in both Chinese and English. API references are available in HTML and PDF. Some API references may be available only in English. Currently, not all API references are available in the Beijing and Ningxia Regions. Links to some API references will take you to the global Amazon Web Services site. Note that some features and functionality described in the guides and references may not be available in the current Amazon Web Services in China release.

General Information About Amazon Web Services in China

The following information applies to all Amazon Web Services that are available in the China Regions.

Amazon Web Services Accounts in the China Regions

To use services in the Beijing and Ningxia Regions, you need an account and credentials specific to each of those Regions.

  • Accounts and credentials for other Amazon Regions will not work for services operating in the Beijing and Ningxia Regions.

  • Accounts and credentials for the Beijing and Ningxia Regions will not work for other Amazon Regions.

  • For more information, see Signup, Accounts, and Credentials.

Domain for Amazon Web Services in China

The domain for Amazon Web Services in China is www.amazonaws.cn.

Endpoints & Amazon Resource Names (ARNs)

For information about endpoints and ARNs in Amazon Web Services in China, see Endpoints and ARNs for Amazon Web Services in China.

Availability Zones for the China Regions

  • In the Beijing Region, there are three Availability Zones.

  • In the Ningxia Region, there are three Availability Zones.

General Information for Amazon Web Services in China

The following applies to all Amazon Web Services that are available in the China Regions. For detailed information about specific Amazon Web Services, see the service-specific topic in this guide.

  • Amazon Identity and Access Management (IAM)

    • You can grant or deny a service access to resources using the Principal policy element.

    • Service principal values vary by Region.

  • Free Usage Tier

Amazon Web Services Console

The console for Amazon Web Services in China is unique to China. The screenshots in the Amazon Web Services guides might differ from what you see on your console. For information about differences in service functionality, see the topics for each service in this guide.

Code Examples

The Amazon Web Services documentation might include endpoints and ARNs in code examples that are not specific to the Beijing and Ningxia Regions. When using examples, verify you are using the endpoints and ARNs for your Region.