View a markdown version of this page

Amazon Simple Storage Service in Amazon Web Services China - Getting Started with Amazon Web Services China
Region availabilityHow Amazon S3 differsDocumentation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Simple Storage Service in Amazon Web Services China

Amazon S3 is storage for the Internet. It provides a simple web service interface that can be used to store and retrieve any amount of data, at any time, from anywhere on the web. It gives any developer access to the same highly scalable, reliable, secure, fast, inexpensive infrastructure that Amazon uses to run its own global network of web sites. The service aims to maximize benefits of scale and to pass those benefits on to developers.

Region availability

Amazon S3 is available in the following regions in China:

  • China (Beijing) Region

  • China (Ningxia) Region

How Amazon S3 differs

The following differences apply to Amazon Simple Storage Service:

  • Creating an Amazon Web Services account

    To publish content in the China (Beijing) and China (Ningxia) Regions, you must sign up for an Amazon Web Services China account, which is specific to the China (Beijing) and China (Ningxia) Regions. This account will not work in other Amazon Regions, and an account that was created in a different Region will not work in the China Regions. For information about signing up for the China (Beijing) Region, see Signup.

  • Filing for Internet Content Provider (ICP) recordal:

    If you want to publish content in the China (Beijing) or China (Ningxia) Regions that can be read without authentication, you must obtain an ICP license. For information about filing for ICP recordal, see ICP Recordal.

  • If you want to deposit reports into an Amazon S3 bucket, in your policy, you must specify 145026535362 (instead of 386209384616) for the account ID. For more information, see Example 8: Deposit Reports into an Amazon S3 Bucket in the Amazon Billing User Guide.

  • Although the Detailed Billing Report feature is unavailable for many new customers as of July 2019, this feature remains available in the China (Beijing) and China (Ningxia) Regions.

  • The following Amazon S3 features are either unavailable in the China Regions or require an ICP license:

    • Amazon S3 objects honor anonymous GET requests only if the object owner’s Amazon Web Services China account is associated with a valid ICP license. As a result, hosting a static website from an Amazon S3 bucket and using pre-signed URLs require an ICP license.

    • Amazon S3 supports both the Signature Version 4 and Signature Version 2; however, only Signature Version 4 is supported in the China Regions. For information about Signature Version 4 authorization headers, see Authenticating Requests (Amazon Signature Version 4).

    • Website hosting:

      • In accordance with Chinese laws and regulations, ports 80/8080/443 are closed by default in the China Regions.

      • You can configure your bucket to host a static website, but it is recommended that your Amazon Web Services China account is associated with an ICP license. To apply for an ICP license, follow the ICP Recordal steps.

      • In Amazon S3, support for custom domain names relies on Amazon Route 53. Route 53 is available in the China (Ningxia) Region to create and manage DNS records for an existing domain. To configure a custom domain name for a static website hosted in Amazon S3, see Setting up a static website using a custom domain in the Amazon S3 User Guide. For a complete list of Amazon S3 website endpoints and Route 53 Hosted Zone IDs, see Amazon S3 website endpoints in the Amazon General Reference.

    • Presigned URLs work only if the resource owner has an ICP license.

      Your request must provide credentials explicitly. Any other form of request is considered anonymous, including the presigned URL. Anonymous requests are allowed only if the resource owner has an ICP license.

      Because a signing key in Signature Version 4 is valid for only seven days, presigned URLs are also valid for up to seven days.

      Presigned URLs aren’t supported in the S3 console.

    • S3 Object Lambda Access Points in China (Beijing) (cn-north-1) and China (Ningxia) (cn-northwest-1) don’t support authentication with presigned urls. It is advised that you make authenticated calls directly to the S3 Object Lambda Access Point.

    • Any copy operation between the China Regions and Amazon Web Services Regions outside of China is not available.

    • Cross-region replication (CRR) is not available between the China Regions and Amazon Web Services Regions outside of China.

    • Amazon S3 Transfer Acceleration is not available in China (Beijing) and China (Ningxia) Regions.

    • Bucket permissions check in the Amazon S3 console is not available in China (Beijing) and China (Ningxia) Regions.

    • Amazon S3 Multi-Region Access Points is not available in the China Regions.

    • Amazon S3 Express One Zone is not available in the China Regions.

    • Amazon S3 Tables replication is not available in the China Regions.

    • Amazon S3 Vectors integration with Amazon Bedrock and Amazon OpenSearch Service is not available in the China Regions.

    • You cannot use S3 access points to access file data stored on Amazon FSx file systems.

Documentation