連邦情報処理規格 (FIPS) 140-2

概要

連邦情報処理規格 (FIPS、Federal Information Processing Standard) 140-2 は、機密情報を保護する暗号化モジュールのセキュリティ要件を規定する米国およびカナダ政府の規格です。コマンドラインインターフェイス (CLI) を使用して、あるいは API を使用してプログラムにより AWS 米国東部/西部、AWS GovCloud (米国)、AWS カナダ (中部) にアクセスする際に FIPS 140-2 検証済み暗号化モジュールが必要な場合、AWS リージョンごとに利用可能な FIPS エンドポイントのリストを以下に示します。AWS GovCloud (米国) 内の Amazon Virtual Private Cloud VPN エンドポイントは、FIPS 140-2 検証済み暗号化モジュールを使用して運用されています。AWS は、AWS 米国東部/西部、AWS GovCloud (米国)、または AWS カナダ (中部) リージョンをご利用いただくときのコンプライアンス管理に必要な情報を提供するため、お客様と協力します。この規格についての詳細は、NIST Computer Security Resource Center ウェブサイトの Cryptographic Module Validation Program をご覧ください。

• AWS 米国東部/西部の FIPS エンドポイントは何ですか?

  以下の表は、AWS 米国東部/西部リージョンにおいてさまざまな AWS のサービスが利用可能な FIPS エンドポイントのリストです。 
  

  AWS のサービス	AWS 米国東部/西部エンドポイント
  Amazon API Gateway	apigateway-fips.us-west-1.amazonaws.com apigateway-fips.us-west-2.amazonaws.com apigateway-fips.us-east-2.amazonaws.com apigateway-fips.us-east-1.amazonaws.com
  Amazon AppStream 2.0	appstream2-fips.us-east-1.amazonaws.com appstream2-fips.us-west-2.amazonaws.com
  Amazon Cloud Directory	clouddirectory-fips.us-west-1.amazonaws.com clouddirectory-fips.us-east-2.amazonaws.com clouddirectory-fips.us-east-1.amazonaws.com
  AWS CloudFormation	cloudformation-fips.us-east-1.amazonaws.com cloudformation-fips.us-east-2.amazonaws.com cloudformation-fips.us-west-1.amazonaws.com cloudformation-fips.us-west-2.amazonaws.com
  AWS CloudTrail	cloudtrail-fips.us-west-1.amazonaws.com cloudtrail-fips.us-west-2.amazonaws.com cloudtrail-fips.us-east-2.amazonaws.com cloudtrail-fips.us-east-1.amazonaws.com
  AWS CodeCommit	git-codecommit-fips.us-east-1.amazonaws.com codecommit-fips.us-east-1.amazonaws.com git-codecommit-fips.us-east-2.amazonaws.com codecommit-fips.us-east-2.amazonaws.com git-codecommit-fips.us-west-1.amazonaws.com codecommit-fips.us-west-1.amazonaws.com git-codecommit-fips.us-west-2.amazonaws.com codecommit-fips.us-west-2.amazonaws.com
  Amazon Cognito	cognito-sync-fips.us-west-2.amazonaws.com cognito-identity-fips.us-west-2.amazonaws.com cognito-idp-fips.us-west-2.amazonaws.com <your_user_pool_domain>.auth-fips.us-west-2.amazoncognito.com cognito-sync-fips.us-east-2.amazonaws.com cognito-identity-fips.us-east-2.amazonaws.com cognito-idp-fips.us-east-2.amazonaws.com <your_user_pool_domain>.auth-fips.us-east-2.amazoncognito.com cognito-sync-fips.us-east-1.amazonaws.com cognito-identity-fips.us-east-1.amazonaws.com cognito-idp-fips.us-east-1.amazonaws.com <your_user_pool_domain>.auth-fips.us-east-1.amazoncognito.com
  AWS Config	config-fips.us-west-1.amazonaws.com config-fips.us-west-2.amazonaws.com config-fips.us-east-2.amazonaws.com config-fips.us-east-1.amazonaws.com
  AWS Database Migration Service (DMS)	dms-fips.us-west-1.amazonaws.com dms-fips.us-west-2.amazonaws.com dms-fips.us-east-2.amazonaws.com dms-fips.us-east-1.amazonaws.com
  AWS Directory Service	ds-fips.us-west-1.amazonaws.com ds-fips.us-west-2.amazonaws.com ds-fips.us-east-2.amazonaws.com ds-fips.us-east-1.amazonaws.com
  Amazon DynamoDB	dynamodb-fips.us-west-1.amazonaws.com dynamodb-fips.us-west-2.amazonaws.com dynamodb-fips.us-east-2.amazonaws.com dynamodb-fips.us-east-1.amazonaws.com
  AWS Elastic Beanstalk	elasticbeanstalk-fips.us-east-1.amazonaws.com elasticbeanstalk-fips.us-east-2.amazonaws.com elasticbeanstalk-fips.us-west-1.amazonaws.com elasticbeanstalk-fips.us-west-2.amazonaws.com
  Amazon Elastic Block Store (EBS)	EC2 を直接使用する
  Amazon Elastic Compute Cloud (EC2)	ec2-fips.us-west-1.amazonaws.com ec2-fips.us-west-2.amazonaws.com ec2-fips.us-east-2.amazonaws.com ec2-fips.us-east-1.amazonaws.com
  Amazon Elastic Container Registry	ecr-fips.us-west-1.amazonaws.com ecr-fips.us-west-2.amazonaws.com ecr-fips.us-east-2.amazonaws.com ecr-fips.us-east-1.amazonaws.com *.dkr.ecr-fips.us-west-1.amazonaws.com *.dkr.ecr-fips.us-west-2.amazonaws.com *.dkr.ecr-fips.us-east-2.amazonaws.com *.dkr.ecr-fips.us-east-1.amazonaws.com
  Amazon ElastiCache	elasticache-fips.us-east-1.amazonaws.com elasticache-fips.us-east-2.amazonaws.com elasticache-fips.us-west-1.amazonaws.com elasticache-fips.us-west-2.amazonaws.com
  Elastic Load Balancing	elasticloadbalancing-fips.us-west-1.amazonaws.com elasticloadbalancing-fips.us-west-2.amazonaws.com elasticloadbalancing-fips.us-east-2.amazonaws.com elasticloadbalancing-fips.us-east-1.amazonaws.com
  Amazon Elasticsearch	es-fips.us-west-1.amazonaws.com es-fips.us-west-2.amazonaws.com es-fips.us-east-1.amazonaws.com es-fips.us-east-2.amazonaws.com
  Amazon EMR (Amazon EMR)	elasticmapreduce-fips.us-west-1.amazonaws.com elasticmapreduce-fips.us-west-2.amazonaws.com elasticmapreduce-fips.us-east-1.amazonaws.com elasticmapreduce-fips.us-east-2.amazonaws.com
  Amazon Glacier	glacier-fips.us-west-1.amazonaws.com glacier-fips.us-west-2.amazonaws.com glacier-fips.us-east-2.amazonaws.com glacier-fips.us-east-1.amazonaws.com
  Amazon GuardDuty	guardduty-fips.us-east-1.amazonaws.com guardduty-fips.us-west-1.amazonaws.com guardduty-fips.us-east-2.amazonaws.com guardduty-fips.us-west-2.amazonaws.com
  AWS Identity and Access Management (IAM)	iam-fips.amazonaws.com (IAD リージョンのみ)
  Amazon Inspector	inspector-fips.us-west-1.amazonaws.com inspector-fips.us-west-2.amazonaws.com inspector-fips.us-east-1.amazonaws.com
  Amazon Kinesis Streams	kinesis-fips.us-west-1.amazonaws.com kinesis-fips.us-west-2.amazonaws.com kinesis-fips.us-east-2.amazonaws.com kinesis-fips.us-east-1.amazonaws.com
  AWS Key Management Service (KMS)	kms-fips.us-west-1.amazonaws.com kms-fips.us-west-2.amazonaws.com kms-fips.us-east-2.amazonaws.com kms-fips.us-east-1.amazonaws.com
  AWS Lambda	lambda-fips.us-west-1.amazonaws.com lambda-fips.us-west-2.amazonaws.com lambda-fips.us-east-2.amazonaws.com lambda-fips.us-east-1.amazonaws.com
  Amazon MQ	mq-fips.us-east-1.amazonaws.com mq-fips.us-east-2.amazonaws.com mq-fips.us-west-1.amazonaws.com mq-fips.us-west-2.amazonaws.com
  Amazon QuickSight	fips-us-west-2.quicksight.aws.amazon.com fips-us-east-2.quicksight.aws.amazon.com fips-us-east-1.quicksight.aws.amazon.com
  Amazon Relational Database Service (RDS) / Amazon Aurora	rds-fips.us-west-1.amazonaws.com rds-fips.us-west-2.amazonaws.com rds-fips.us-east-2.amazonaws.com rds-fips.us-east-1.amazonaws.com
  Amazon Redshift	redshift-fips.us-west-1.amazonaws.com redshift-fips.us-west-2.amazonaws.com redshift-fips.us-east-2.amazonaws.com redshift-fips.us-east-1.amazonaws.com
  Amazon Route 53	api-fips.route53-eu-west-1.com route53-fips.amazonaws.com
  Amazon SageMaker	api-fips.sagemaker.us-east-1.amazonaws.com api-fips.sagemaker.us-east-2.amazonaws.com api-fips.sagemaker.us-west-2.amazonaws.com runtime-fips.sagemaker.us-east-1.amazonaws.com runtime-fips.sagemaker.us-east-2.amazonaws.com runtime-fips.sagemaker.us-west-2.amazonaws.com
  AWS Security Token Service (STS)	sts-fips.us-west-1.amazonaws.com sts-fips.us-west-2.amazonaws.com sts-fips.us-east-2.amazonaws.com sts-fips.us-east-1.amazonaws.com
  AWS Service Catalog	servicecatalog-fips.us-west-1.amazonaws.com servicecatalog-fips.us-west-2.amazonaws.com servicecatalog-fips.us-east-1.amazonaws.com servicecatalog-fips.us-east-2.amazonaws.com
  AWS Shield	shield-fips.us-east-1.amazonaws.com
  Amazon Simple Email Service	email-fips.us-east-1.amazonaws.com email-fips.us-west-2.amazonaws.com
  Amazon Simple Notification Service (SNS)	sns-fips.us-west-1.amazonaws.com sns-fips.us-west-2.amazonaws.com sns-fips.us-east-2.amazonaws.com sns-fips.us-east-1.amazonaws.com
  Amazon Simple Queue Service (SQS)	sqs-fips.us-west-1.amazonaws.com
  Amazon Simple Storage Service (S3) 注意: これらのエンドポイントは仮想ホスティング形式のアドレス指定でのみ使用できます。 例: https://bucket.s3-fips.us-east-2.amazonaws.com 詳細については、Amazon S3 のドキュメントページを参照してください。	s3-fips.us-east-2.amazonaws.com s3-fips.dualstack.us-west-1.amazonaws.com s3-fips.dualstack.us-west-2.amazonaws.com s3-fips.dualstack.us-east-2.amazonaws.com s3-fips.dualstack.us-east-1.amazonaws.com s3-fips.us-west-1.amazonaws.com s3-fips.us-west-2.amazonaws.com s3-fips.us-east-1.amazonaws.com
  Amazon Simple Workflow Service (SWF)	swf-fips.us-west-1.amazonaws.com swf-fips.us-west-2.amazonaws.com swf-fips.us-east-2.amazonaws.com swf-fips.us-east-1.amazonaws.com
  AWS Snowball	FIPS は要求されていません
  AWS Systems Manager	ssm-fips.us-west-1.amazonaws.com ssm-fips.us-west-2.amazonaws.com ssm-fips.us-east-2.amazonaws.com ssm-fips.us-east-1.amazonaws.com
  Amazon Virtual Private Cloud (VPC)	EC2 を直接使用する
  AWS WAF	waf-regional-fips.us-west-1.amazonaws.com waf-regional-fips.us-west-2.amazonaws.com waf-regional-fips.us-east-1.amazonaws.com waf-regional-fips.us-east-2.amazonaws.com waf-fips.amazonaws.com
  Amazon WorkDocs	workdocs-fips.us-west-2.amazonaws.com workdocs-fips.us-east-1.amazonaws.com

  shield-fips.us-east-1.amazonaws.com

  shield-fips.us-east-1.amazonaws.com

  shield-fips.us-east-1.amazonaws.com

  FIPS は要求されていません

  AWS エンドポイントの一覧は、「AWS 全般のリファレンス」にある「リージョンとエンドポイント」でご覧いただけます。

• AWS GovCloud (米国) の FIPS エンドポイントは何ですか?

  AWS GovCloud (米国) で利用できる FIPS エンドポイントの一覧については、AWS GovCloud (US) User Guide を参照してください。

• AWS カナダ (中部) の FIPS エンドポイントは何ですか?

  AWS のサービス	AWS カナダ (中部) のエンドポイント
  Amazon API Gateway	apigateway-fips.ca-central-1.amazonaws.com
  AWS CodeCommit	git-codecommit-fips.ca-central-1.amazonaws.com codecommit-fips.ca-central-1.amazonaws.com
  AWS Directory Service	ds-fips.ca-central-1.amazonaws.com
  Amazon DynamoDB	dynamodb-fips.ca-central-1.amazonaws.com
  Amazon Elastic Compute Cloud (EC2)	ec2-fips.ca-central-1.amazonaws.com
  Amazon EMR (Amazon EMR)	elasticmapreduce-fips.ca-central-1.amazonaws.com
  Amazon Glacier	glacier-fips.ca-central-1.amazonaws.com
  Amazon Relational Database Service (RDS) / Amazon Aurora	rds-fips.ca-central-1.amazonaws.com
  Amazon Redshift	redshift-fips.ca-central-1.amazonaws.com
  AWS Security Token Service (STS)	sts.ca-central-1.amazonaws.com
  Amazon Simple Storage Service (Amazon S3) 注意: このエンドポイントは仮想ホスティング形式のアドレス指定でのみ使用できます。例: https://bucket.s3-fips.ca-central-1.amazonaws.com.詳細については、Amazon S3 のドキュメントページを参照してください。	s3-fips.ca-central-1.amazonaws.com