Amazon Simple Storage Service - Getting Started with Amazon Web Services in China
Region AvailabilityFeature Availability and Implementation DifferencesGuides and ReferencesGeneral Information About Amazon Web Services in China
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Simple Storage Service

Amazon S3 is storage for the Internet. It provides a simple web service interface that can be used to store and retrieve any amount of data, at any time, from anywhere on the web. It gives any developer access to the same highly scalable, reliable, secure, fast, inexpensive infrastructure that Amazon uses to run its own global network of web sites. The service aims to maximize benefits of scale and to pass those benefits on to developers.

Region Availability

Amazon S3 is available in the following regions in China:

  • Beijing Region

  • Ningxia Region

Feature Availability and Implementation Differences

The Amazon Web Services in China implementation of Amazon S3 is unique in the following ways:

  • Creating an Amazon Web Services account

    To publish content in the Beijing and Ningxia Regions, you must sign up for an Amazon Web Services in China account, which is specific to the Beijing and Ningxia Regions. This account will not work in other Amazon Regions, and an account that was created in a different Region will not work in the China Regions. For information about signing up for the Beijing Region, see .

  • Filing for Internet Content Provider (ICP) recordal:

    If you want to publish content in the China (Beijing) or China (Ningxia) Regions that can be read without authentication, you must obtain an ICP license. For information about filing for ICP recordal, see .

  • If you want to deposit reports into an Amazon S3 bucket, in your policy, you must specify 145026535362 (instead of 386209384616) for the account ID. For more information, see Example 8: Deposit Reports into an Amazon S3 Bucket in the Amazon Billing User Guide.

  • Although the Detailed Billing Report feature is unavailable for many new customers as of July 2019, this feature remains available in the Beijing and Ningxia Regions.

  • The following Amazon S3 features are either unavailable in the China Regions or require an ICP license:

    • Amazon S3 objects honor anonymous GET requests only if the object owner’s Amazon Web Services in China account is associated with a valid ICP license. As a result, hosting a static website from an Amazon S3 bucket and using pre-signed URLs require an ICP license.

    • Amazon S3 supports both the Signature Version 4 and Signature Version 2; however, only Signature Version 4 is supported in the China Regions. For information about Signature Version 4 authorization headers, see Authenticating Requests (Amazon Signature Version 4).

    • Website hosting:

      • In accordance with Chinese laws and regulations, ports 80/8080/443 are closed by default in the China Regions.

      • You can configure your bucket to host a static website, but it is recommended that your Amazon Web Services in China account is associated with an ICP license. To apply for an ICP license, follow the ICP Recordal steps.

      • In Amazon S3, support for custom domain names relies on Amazon Route 53. Route 53 is available in the China (Ningxia) Region to create and manage DNS records for an existing domain. To configure a custom domain name for a static website hosted in Amazon S3, see Setting up a static website using a custom domain in the Amazon S3 User Guide. For a complete list of Amazon S3 website endpoints and Route 53 Hosted Zone IDs, see Amazon S3 website endpoints in the Amazon General Reference.

    • Presigned URLs work only if the resource owner has an ICP license.

      Your request must provide credentials explicitly. Any other form of request is considered anonymous, including the presigned URL. Anonymous requests are allowed only if the resource owner has an ICP license.

      Because a signing key in Signature Version 4 is valid for only seven days, presigned URLs are also valid for up to seven days.

      Presigned URLs aren't supported in the S3 console.

    • S3 Object Lambda Access Points in China (Beijing) (cn-north-1) and China (Ningxia) (cn-northwest-1) don't support authentication with presigned urls. It is advised that you make authenticated calls directly to the S3 Object Lambda Access Point.

    • Any copy operation between the China Regions and Amazon Web Services Regions outside of China is not supported.

    • Cross-region replication (CRR) is not supported between the China Regions and Amazon Web Services Regions outside of China.

    • Amazon S3 Transfer Acceleration is not supported in Beijing and Ningxia Regions.

    • Bucket permissions check in the Amazon S3 console is not supported in Beijing and Ningxia Regions.

    • Amazon S3 Multi-Region Access Points is not available in the China Regions.

    • Amazon S3 Express One Zone is not available in the China Regions.

Guides and References

Amazon Web Services in China user guides are available in HTML and PDF, in both Chinese and English. API references are available in HTML and PDF. Some API references may be available only in English. Currently, not all API references are available in the Beijing and Ningxia Regions. Links to some API references will take you to the global Amazon Web Services site. Note that some features and functionality described in the guides and references may not be available in the current Amazon Web Services in China release.

General Information About Amazon Web Services in China

The following information applies to all Amazon Web Services that are available in the China Regions.

Amazon Web Services Accounts in the China Regions

To use services in the Beijing and Ningxia Regions, you need an account and credentials specific to each of those Regions.

  • Accounts and credentials for other Amazon Regions will not work for services operating in the Beijing and Ningxia Regions.

  • Accounts and credentials for the Beijing and Ningxia Regions will not work for other Amazon Regions.

  • For more information, see Signup, Accounts, and Credentials.

Domain for Amazon Web Services in China

The domain for Amazon Web Services in China is www.amazonaws.cn.

Endpoints & Amazon Resource Names (ARNs)

For information about endpoints and ARNs in Amazon Web Services in China, see Endpoints and ARNs for Amazon Web Services in China.

Availability Zones for the China Regions

  • In the Beijing Region, there are three Availability Zones.

  • In the Ningxia Region, there are three Availability Zones.

General Information for Amazon Web Services in China

The following applies to all Amazon Web Services that are available in the China Regions. For detailed information about specific Amazon Web Services, see the service-specific topic in this guide.

  • Amazon Identity and Access Management (IAM)

    • You can grant or deny a service access to resources using the Principal policy element.

    • Service principal values vary by Region.

  • EC2-Classic Platform

    • The EC2-Classic platform is not supported.

  • Free Usage Tier

    • The free usage tier is supported in the Ningxia Region.

    • The free usage tier is not supported in the Beijing Region.

Amazon Web Services Console

The console for Amazon Web Services in China is unique to China. The screenshots in the Amazon Web Services guides might differ from what you see on your console. For information about differences in service functionality, see the topics for each service in this guide.

Code Examples

The Amazon Web Services documentation might include endpoints and ARNs in code examples that are not specific to the Beijing and Ningxia Regions. When using examples, verify you are using the endpoints and ARNs for your Region.