Estándar de procesamiento de la información federal (FIPS) 140-2

Información general

La publicación 140-2 del Estándar de procesamiento de la información federal (FIPS, Federal Information Processing Standard) es un estándar de los Gobiernos de EE.UU. y Canadá que especifica los requisitos de seguridad para los módulos criptográficos que protegen información confidencial. Si requiere el uso de módulos criptográficos validados por FIPS 140-2 al acceder a las regiones de EE.UU. Este y EE.UU. Oeste de AWS o AWS GovCloud (EE.UU.) o AWS Canadá (Central) mediante el uso de la interfaz de línea de comandos (CLI) o mediante programación utilizando las API, las siguientes secciones proporcionan la lista de puntos de enlaces FIPS disponibles por región de AWS. Los puntos de enlace de VPN de Amazon Virtual Private Cloud en AWS GovCloud (EE.UU.) funcionan mediante módulos criptográficos validados de FIPS 140-2. AWS trabaja con los clientes a fin de proporcionar la información que necesitan para administrar asuntos de conformidad cuando usan las regiones AWS EE.UU. Este, AWS EE.UU. Oeste, AWS GovCloud (EE.UU.) o AWS Canadá (Central). Para obtener más información sobre el estándar, consulte el programa de validación de módulos criptográficos en el sitio web del Centro de recursos de seguridad informática de NIST.

• ¿Cuáles son los puntos de enlace FIPS para las regiones EE.UU. Este y EE.UU. Oeste de AWS?

  La siguiente tabla enumera cada punto de enlace FIPS disponible para varios servicios de AWS en las regiones EE.UU. Este y EE.UU. Oeste. de AWS. 
  

  Servicio de AWS	Puntos de enlace de las regiones EE.UU. Este y EE.UU. Oeste de AWS
  Amazon API Gateway	apigateway-fips.us-west-1.amazonaws.com apigateway-fips.us-west-2.amazonaws.com apigateway-fips.us-east-2.amazonaws.com apigateway-fips.us-east-1.amazonaws.com
  Amazon Cloud Directory	clouddirectory-fips.us-west-1.amazonaws.com clouddirectory-fips.us-east-2.amazonaws.com clouddirectory-fips.us-east-1.amazonaws.com
  AWS Cloud​Formation	cloudformation-fips.us-east-1.amazonaws.com cloudformation-fips.us-east-2.amazonaws.com cloudformation-fips.us-west-1.amazonaws.com cloudformation-fips.us-west-2.amazonaws.com
  AWS CloudTrail	cloudtrail-fips.us-west-1.amazonaws.com cloudtrail-fips.us-west-2.amazonaws.com cloudtrail-fips.us-east-2.amazonaws.com cloudtrail-fips.us-east-1.amazonaws.com
  AWS CodeCommit	git-codecommit-fips.us-east-1.amazonaws.com codecommit-fips.us-east-1.amazonaws.com git-codecommit-fips.us-east-2.amazonaws.com codecommit-fips.us-east-2.amazonaws.com git-codecommit-fips.us-west-1.amazonaws.com codecommit-fips.us-west-1.amazonaws.com git-codecommit-fips.us-west-2.amazonaws.com codecommit-fips.us-west-2.amazonaws.com
  Amazon Cognito	cognito-sync-fips.us-west-2.amazonaws.com cognito-identity-fips.us-west-2.amazonaws.com cognito-idp-fips.us-west-2.amazonaws.com <your_user_pool_domain>.auth-fips.us-west-2.amazoncognito.com cognito-sync-fips.us-east-2.amazonaws.com cognito-identity-fips.us-east-2.amazonaws.com cognito-idp-fips.us-east-2.amazonaws.com <your_user_pool_domain>.auth-fips.us-east-2.amazoncognito.com cognito-sync-fips.us-east-1.amazonaws.com cognito-identity-fips.us-east-1.amazonaws.com cognito-idp-fips.us-east-1.amazonaws.com <your_user_pool_domain>.auth-fips.us-east-1.amazoncognito.com
  AWS Config	config-fips.us-west-1.amazonaws.com config-fips.us-west-2.amazonaws.com config-fips.us-east-2.amazonaws.com config-fips.us-east-1.amazonaws.com
  AWS Database Migration Service (DMS)	dms-fips.us-west-1.amazonaws.com dms-fips.us-west-2.amazonaws.com dms-fips.us-east-2.amazonaws.com dms-fips.us-east-1.amazonaws.com
  AWS Directory Service	ds-fips.us-west-1.amazonaws.com ds-fips.us-west-2.amazonaws.com ds-fips.us-east-2.amazonaws.com ds-fips.us-east-1.amazonaws.com
  Amazon DynamoDB	dynamodb-fips.us-west-1.amazonaws.com dynamodb-fips.us-west-2.amazonaws.com dynamodb-fips.us-east-2.amazonaws.com dynamodb-fips.us-east-1.amazonaws.com
  AWS Elastic Beanstalk	elasticbeanstalk-fips.us-east-1.amazonaws.com elasticbeanstalk-fips.us-east-2.amazonaws.com elasticbeanstalk-fips.us-west-1.amazonaws.com elasticbeanstalk-fips.us-west-2.amazonaws.com
  Amazon Elastic Block Store (EBS)	Uso de EC2 directamente
  Amazon Elastic Compute Cloud (EC2)	ec2-fips.us-west-1.amazonaws.com ec2-fips.us-west-2.amazonaws.com ec2-fips.us-east-2.amazonaws.com ec2-fips.us-east-1.amazonaws.com
  Amazon ElastiCache	elasticache-fips.us-east-1.amazonaws.com elasticache-fips.us-east-2.amazonaws.com elasticache-fips.us-west-1.amazonaws.com elasticache-fips.us-west-2.amazonaws.com
  Elastic Load Balancing	elasticloadbalancing-fips.us-west-1.amazonaws.com elasticloadbalancing-fips.us-west-2.amazonaws.com elasticloadbalancing-fips.us-east-2.amazonaws.com elasticloadbalancing-fips.us-east-1.amazonaws.com
  Amazon Elasticsearch	es-fips.us-west-1.amazonaws.com es-fips.us-west-2.amazonaws.com es-fips.us-east-1.amazonaws.com es-fips.us-east-2.amazonaws.com
  Amazon EMR (Amazon EMR)	elasticmapreduce-fips.us-west-1.amazonaws.com elasticmapreduce-fips.us-west-2.amazonaws.com elasticmapreduce-fips.us-east-1.amazonaws.com elasticmapreduce-fips.us-east-2.amazonaws.com
  Amazon Glacier	glacier-fips.us-west-1.amazonaws.com glacier-fips.us-west-2.amazonaws.com glacier-fips.us-east-2.amazonaws.com glacier-fips.us-east-1.amazonaws.com
  AWS Identity and Access Management (IAM)	iam-fips.amazonaws.com (solo región IAD)
  Amazon Inspector	inspector-fips.us-west-1.amazonaws.com inspector-fips.us-west-2.amazonaws.com inspector-fips.us-east-1.amazonaws.com
  Amazon Kinesis Streams	kinesis-fips.us-west-1.amazonaws.com kinesis-fips.us-west-2.amazonaws.com kinesis-fips.us-east-2.amazonaws.com kinesis-fips.us-east-1.amazonaws.com
  AWS Key Management Service (KMS)	kms-fips.us-west-1.amazonaws.com kms-fips.us-west-2.amazonaws.com kms-fips.us-east-2.amazonaws.com kms-fips.us-east-1.amazonaws.com
  AWS Lambda	lambda-fips.us-west-1.amazonaws.com lambda-fips.us-west-2.amazonaws.com lambda-fips.us-east-2.amazonaws.com lambda-fips.us-east-1.amazonaws.com
  Amazon QuickSight	fips-us-west-2.quicksight.aws.amazon.com fips-us-east-2.quicksight.aws.amazon.com fips-us-east-1.quicksight.aws.amazon.com
  Amazon Relational Database Service (RDS) / Amazon Aurora	rds-fips.us-west-1.amazonaws.com rds-fips.us-west-2.amazonaws.com rds-fips.us-east-2.amazonaws.com rds-fips.us-east-1.amazonaws.com
  Amazon Redshift	redshift-fips.us-west-1.amazonaws.com redshift-fips.us-west-2.amazonaws.com redshift-fips.us-east-2.amazonaws.com redshift-fips.us-east-1.amazonaws.com
  Amazon Route 53	api-fips.route53-eu-west-1.com route53-fips.amazonaws.com
  Amazon SageMaker	api-fips.sagemaker.us-east-1.amazonaws.com api-fips.sagemaker.us-east-2.amazonaws.com api-fips.sagemaker.us-west-2.amazonaws.com runtime-fips.sagemaker.us-east-1.amazonaws.com runtime-fips.sagemaker.us-east-2.amazonaws.com runtime-fips.sagemaker.us-west-2.amazonaws.com
  Amazon Simple Storage Service (S3) Nota: estos puntos de enlace solo se pueden usar con direcciones de alojamiento. Por ejemplo, https://bucket.s3-fips.us-east-2.amazonaws.com. Visite la página de documentación de Amazon S para obtener más información.	s3-fips.us-east-2.amazonaws.com s3-fips.dualstack.us-west-1.amazonaws.com s3-fips.dualstack.us-west-2.amazonaws.com s3-fips.dualstack.us-east-2.amazonaws.com s3-fips.dualstack.us-east-1.amazonaws.com s3-fips.us-west-1.amazonaws.com s3-fips.us-west-2.amazonaws.com s3-fips.us-east-1.amazonaws.com
  AWS Shield	shield-fips.us-east-1.amazonaws.com
  AWS Snowball	No necesita FIPS
  Amazon Simple Notification Service (SNS)	sns-fips.us-west-1.amazonaws.com sns-fips.us-west-2.amazonaws.com sns-fips.us-east-2.amazonaws.com sns-fips.us-east-1.amazonaws.com
  Amazon Simple Queue Service (Amazon SQS)	sqs-fips.us-west-1.amazonaws.com
  AWS Security Token Service (STS)	sts-fips.us-west-1.amazonaws.com sts-fips.us-west-2.amazonaws.com sts-fips.us-east-2.amazonaws.com sts-fips.us-east-1.amazonaws.com
  Amazon Simple Workflow Service (SWF)	swf-fips.us-west-1.amazonaws.com swf-fips.us-west-2.amazonaws.com swf-fips.us-east-2.amazonaws.com swf-fips.us-east-1.amazonaws.com
  AWS Systems Manager	ssm-fips.us-west-1.amazonaws.com ssm-fips.us-west-2.amazonaws.com ssm-fips.us-east-2.amazonaws.com ssm-fips.us-east-1.amazonaws.com
  Amazon Virtual Private Cloud (VPC)	Usa EC2 directamente
  AWS WAF	waf-regional-fips.us-west-1.amazonaws.com waf-regional-fips.us-west-2.amazonaws.com waf-regional-fips.us-east-1.amazonaws.com waf-fips.amazonaws.com waf-regional-fips.eu-west-1.amazonaws.com waf-regional-fips.ap-northeast-1.amazonaws.com
  Amazon WorkDocs	workdocs-fips.us-west-2.amazonaws.com workdocs-fips.us-east-1.amazonaws.com

  Para ver una lista de todos los puntos de enlace de AWS, consulte Regiones y puntos de enlace en la Referencia general de AWS.

• ¿Qué son los puntos de enlace FIPS para AWS GovCloud (EE.UU.)?

  Si desea ver una lista de los puntos de enlace FIPS disponibles para AWS GovCloud (EE.UU.), consulte la Guía del usuario de AWS GovCloud (EE.UU.).

• ¿Qué son los puntos de enlace FIPS para AWS Canadá (Central)?

  Servicio de AWS	Puntos de enlace para AWS Canadá (Central)
  Amazon CodeCommit	git-codecommit-fips.ca-central-1.amazonaws.com codecommit-fips.ca-central-1.amazonaws.com
  AWS Directory Service	ds-fips.ca-central-1.amazonaws.com
  Amazon DynamoDB	dynamodb-fips.ca-central-1.amazonaws.com
  Amazon Elastic Compute Cloud (EC2)	ec2-fips.ca-central-1.amazonaws.com
  Amazon EMR (Amazon EMR)	elasticmapreduce-fips.ca-central-1.amazonaws.com
  Amazon Glacier	glacier-fips.ca-central-1.amazonaws.com
  Amazon Relational Database Service (RDS)/Amazon Aurora	rds-fips.ca-central-1.amazonaws.com
  Amazon Redshift	redshift-fips.ca-central-1.amazonaws.com
  AWS Security Token Service (STS)	sts.ca-central-1.amazonaws.com