Q: What is the AWS Management Console?

The AWS Management Console provides a simple web interface for Amazon Web Services. You can log in using your AWS account name and password. If you’ve enabled AWS Multi-Factor Authentication, you will be prompted for your device’s authentication code.

Q: How do I sign into the Management Console?

You can sign into the management console using your AWS or IAM account credentials at https://console.aws.amazon.com/console/home. For the AWS GovCloud (US) region, you can sign into the management console using your IAM account credentials at https://console.amazonaws-us-gov.com.

Q: Why are you changing the console design?

Our goal is to improve information display, make interactions more consistent, support devices such as tablets, and deliver a customizable experience. You will see these improvements and visual updates rolled out across our services over the coming months. For a summary of changes, see What’s New in the AWS Console.

Q: Can I provide feedback?

Yes! Click the Feedback button at the bottom of the console. We’re eager to hear about your experience with the new console.

Q: What browsers does the Management Console support?

Browser Version Service
Google Chrome Latest 3 Versions All services
Mozilla Firefox Latest 3 Versions All services
Windows Internet Explorer 11, 10, 9 All services
  8 EC2, S3
Apple Safari 7, 6, 5 All services

Q: When does my session expire?

For security purpose, a login session will expire in 12 hours when you sign into the AWS Management Console with your AWS or IAM account credentials. To resume your work after the session expires, we ask you to click the "Click login to continue" button and login again. The duration of federated sessions varies depending on the federation API (GetFederationToken or AssumeRole) and the administrator’s preference. Please go to our Security Blog to learn more about building a secure delegation solution to grant temporary access to your AWS account.

Q: What is a Resource Group?

A resource group is a collection of resources that share common tags. With the Resource Groups tool, you can create a custom console that organizes and consolidates the information you need based on your project and the resources you use. If you manage resources in multiple regions, you can create a resource group to view resources from different regions on the same screen.

Q: How can I use Resource Groups?

Resource Groups are a simple way to organize and find the resources that you use every day. You can create a resource group for each project, application, or environment that you manage in your AWS account. Since a resource group is simply a collection of resources that share common tags that you have applied to those resources, you can create a resource group for collections of resources that complement the way you use the AWS Management Console. Create resource groups that help you work faster and make you more productive.

To read more about how to use Resource Groups features, click here.

Q: How much does Resource Groups cost?

Resource Groups is free to use. You will not incur any additional charges for creating or using them.

Q: Who can see my resource groups?

Your resource groups are unique to your identity. Each IAM user identity has its own Resource Groups storage, so other identities in your account will not see the resource groups that you create. However, tags on an account’s resources are visible to all identities that have permission to view tags in that account.

Q: What permissions do I need to use Resource Groups?

Click here to view the specific permissions required to use Resource Groups.

Q: How many resource groups can I create?

You can create up to 20 resource goups, unless you reach the storage limit. Since Resource Groups can be configured to search for resources based on a number of different parameters (tag key, tag value, resource type, and region), and because each parameter can be of varying lengths, each saved resource group may be a different size. If your groups are simple, you will be able to store up to 20. If your groups are complex, you may receive an error message notifying you that you have reached the storage limit. To create more resource groups, simplify your group configurations to use fewer and smaller parameters.

Q: What resource types are supported in Resource Groups?

Click here to view a list of resource types supported in Resource Groups.

Q: Why can’t I view a list of existing tag keys or values when searching for resources, or why doesn’t tag autocomplete work?

You may have limited permissions to access tag data. Click here to view the specific permissions required to use Resource Groups.

Q: Why can’t I find resources using a resource group?

You may have limited permissions to access tag data. Click here to view the specific permissions required to use Resource Groups. If you have all required permissions to use Resource Groups, check your resource group's configuration and ensure that the resources you are searching for have the correct tags.

Q: The system recognizes me as a federated user. Why are my resource groups shared, or why can't I find my resource groups after I sign out?

For federated users using SAML, resource groups are stored using the value provided for RoleSessionName. This value is configured by your organization's identity provider. More info about SAML federation setup can be found here. This value should be unique to each user authenticating with each role. If RoleSessionName is different for each session, saved resource groups will not be accessible after the session is terminated. If RoleSessionName is the same for each user, saved resource groups will be shared across all identities, and they will not function correctly.

Q: Can I provide feedback?

Yes! Click the Feedback button at the bottom of the console. We’re eager to hear about your experience with Resource Groups.

Q: What is Tag Editor?

Tag Editor is a tool to view and manage tags on your AWS resources, regardless of service or region. Use the tag editor to search for resources by resource type, region, or tag, and then manage the tags applied to those resources.

Q: How can I use Tag Editor?

Click here to read documentation on the Tag Editor’s features and how to use them.

Q: What permissions do I need to use Tag Editor?

Click here to view the specific permissions required to use Tag Editor.

Q: How do tags work?

Tags are words or phrases that act as metadata for organizing your AWS resources. A tag is a key-value pair. In Tag Editor, tag keys are represented as columns, and tag values are strings in the cells of a tag key’s column. Click here to read more about how tags work.

Q: How can I bulk edit tags for multiple resources?

You can use Tag Editor to edit tags for multiple resources at once. In Tag Editor, select the checkboxes for each of the resources you want to edit, and then click “Edit Tags”. Follow the on-screen prompts to manage tags on these resources.

Q: What resource types can be tagged using the Tag Editor?

Tag Editor supports all resource types that support tags. You can view all of the services that support tags here.

Q: Why can’t I search for resources by tag?

You may have limited permissions to access tag data. Click here to view the specific permissions required to use Tag Editor.

Q: Why can’t I add, remove, or modify a tag key or value?

You may have limited permissions to access tag data. Click here to view the specific permissions required to use Tag Editor.

Q: Can I provide feedback?

Yes! Click the Feedback button at the bottom of the console. We’re eager to hear about your experience with the Tag Editor.

Q: How do I sign in?

The app supports several authentication methods, including owner/root credentials, IAM user credentials, and AWS access keys. An owner account is the AWS login that created the account. An IAM user is an identity that has been created by an administrator through the IAM service. Note that IAM users need to also provide their account alias, which can be found at the top of the web console sign-in screen. AWS access keys are used to sign programmatic requests that the app makes to AWS.

For security reasons, we recommend that you secure your device with a passcode and that you follow an AWS best practice by creating and using an IAM user's credentials to log in to the app. If you lose your device, an IAM user can be deactivated to prevent unauthorized access. Root accounts cannot be deactivated.

Click here to learn more about the different types of AWS security credentials.

Q: Where can I download the app?

Download the app from Amazon Appstore, Google Play, or iTunes.

Q: What services are supported?

The app supports Elastic Compute Cloud (EC2), Amazon S3, Elastic Load Balancing (ELB), Amazon Route 53, Amazon Relational Database Service (RDS), Auto Scaling, AWS Elastic Beanstalk, Amazon DynamoDB, AWS OpsWorks, and CloudWatch. The mobile app does not support the AWS GovCloud (US) region. For a full description, see the AWS Console Mobile App page. We plan to add new features to the mobile app. Tell us what you need using the feedback link in the app.

Q: Is MFA supported?

Yes. We recommend using either a hardware MFA device or a virtual MFA on a separate mobile device for the greatest level of account protection.

Q: Can I create resources?

You cannot create resources in the current version. However, we’re considering this for future releases. Please use the feedback link in the app's menu to tell us what you need.

Q: Can I view my current AWS usage charges?

Yes, you can view your current usage charges in the app. Simply visit your Billing Preferences page and select the checkbox to Receive Billing Alerts. In order to view usage charges, your identity must have permission to view CloudWatch.

Q: What time period and services does the Service Health section cover?

The Service Health section covers all AWS services in all regions for the previous 36 hours.

Q: What versions of Android are supported?

iOS 5.0+ and Android 2.3+ are supported.

Q: Does the app support tablets?

The app is currently optimized for iOS and Android phones, but it works on iPad and Android tablet devices.

Q: What Android app permissions are required?

  • Network communication
  • Full internet access (used to contact Amazon Web Services)
  • View network state (used to gracefully handle network loss)

Q: My app is having trouble. What should I do?

From your phone's home screen press the menu and select settings. From the settings options, go to Apps, select AWS Console, and press the clear data button. The next time you start the app, the app will be reset.

Q: I lost my phone. What should I do?

We strongly recommend that in addition to signing out of the app when you have completed your tasks and using a password lock on your phone, you use an IAM user to manage AWS on your phone. If you lose your phone, you can remove the IAM user's access.

Q: Can I provide feedback?

Yes! Click the Feedback button in the app's menu. We’re eager to hear about your experience with the app.