美國聯邦資訊處理標準 (FIPS) 140-2

概觀

FIPS_New

美國聯邦資訊處理標準 (FIPS) 第 140-2 號公報中,美國政府的標準具體說明密碼模組的安全要求,以保護敏感資訊。如果您必須採用 FIPS 140-2 驗證密碼模組,透過命令列界面 (CLI) 或使用 API 以程式設計方式存取 AWS 美國東部/西部或 AWS GovCloud (US),則以下小節提供 AWS 區域可用 FIPS 端點的清單。AWS 與使用 AWS 美國東部/西部或 AWS GovCloud (US) 區域的客戶共同合作,提供管理合規的必要資訊。如需這些標準的詳細資訊,請參閱 NIST Computer Security Resource Center 網站上的 Cryptographic Module Validation Program

  • AWS 美國東部/西部的 FIPS 端點有哪些?

    下表列出 AWS 美國東部/西部區域中各種 AWS 服務可使用的每個 FIPS 端點:

    AWS 服務     AWS 美國東部/西部端點    
    AWS Directory Service

    ds-fips.us-west-1.amazonaws.com

    ds-fips.us-west-2.amazonaws.com

    ds-fips.us-east-2.amazonaws.com

    ds-fips.us-east-1.amazonaws.com

    Amazon API Gateway

    apigateway-fips.us-west-1.amazonaws.com

    apigateway-fips.us-west-2.amazonaws.com

    apigateway-fips.us-east-2.amazonaws.com

    apigateway-fips.us-east-1.amazonaws.com

    Amazon Cloud Directory

    clouddirectory-fips.us-west-1.amazonaws.com

    clouddirectory-fips.us-east-2.amazonaws.com

    clouddirectory-fips.us-east-1.amazonaws.com

    AWS Cloud Formation  

    cloudformation-fips.us-east-1.amazonaws.com

    cloudformation-fips.us-east-2.amazonaws.com

    cloudformation-fips.us-west-1.amazonaws.com

    cloudformation-fips.us-west-2.amazonaws.com

    AWS CloudTrail

    cloudtrail-fips.us-west-1.amazonaws.com

    cloudtrail-fips.us-west-2.amazonaws.com

    cloudtrail-fips.us-east-2.amazonaws.com

    cloudtrail-fips.us-east-1.amazonaws.com

    Amazon Cognito

    cognito-sync-fips.us-west-2.amazonaws.com

    cognito-identity-fips.us-west-2.amazonaws.com

    cognito-idp-fips.us-west-2.amazonaws.com

    .auth-fips.us-west-2.amazoncognito.com

    cognito-sync-fips.us-east-2.amazonaws.com

    cognito-identity-fips.us-east-2.amazonaws.com

    cognito-idp-fips.us-east-2.amazonaws.com

    .auth-fips.us-east-2.amazoncognito.com

    cognito-sync-fips.us-east-1.amazonaws.com

    cognito-identity-fips.us-east-1.amazonaws.com

    cognito-idp-fips.us-east-1.amazonaws.com

    .auth-fips.us-east-1.amazoncognito.com

    AWS Config

    config-fips.us-west-1.amazonaws.com

    config-fips.us-west-2.amazonaws.com

    config-fips.us-east-2.amazonaws.com

    config-fips.us-east-1.amazonaws.com    

    AWS Database Migration Service (DMS)

    dms-fips.us-west-1.amazonaws.com

    dms-fips.us-west-2.amazonaws.com

    dms-fips.us-east-2.amazonaws.com

    dms-fips.us-east-1.amazonaws.com

    Amazon DynamoDB

    dynamodb-fips.us-west-1.amazonaws.com

    dynamodb-fips.us-west-2.amazonaws.com

    dynamodb-fips.us-east-2.amazonaws.com

    dynamodb-fips.us-east-1.amazonaws.com

    Amazon Elastic Block Store (EBS) 直接使用 EC2
    Amazon Elastic Compute Cloud (EC2)

    ec2-fips.us-west-1.amazonaws.com

    ec2-fips.us-west-2.amazonaws.com

    ec2-fips.us-east-2.amazonaws.com

    ec2-fips.us-east-1.amazonaws.com

    Amazon ElastiCache

    elasticache-fips.us-east-1.amazonaws.com

    elasticache-fips.us-east-2.amazonaws.com

    elasticache-fips.us-west-1.amazonaws.com

    elasticache-fips.us-west-2.amazonaws.com

    Elastic Load Balancing

    elasticloadbalancing-fips.us-west-1.amazonaws.com

    elasticloadbalancing-fips.us-west-2.amazonaws.com

    elasticloadbalancing-fips.us-east-2.amazonaws.com

    elasticloadbalancing-fips.us-east-1.amazonaws.com

    Amazon EMR (Amazon EMR)

    elasticmapreduce-fips.us-west-1.amazonaws.com

    elasticmapreduce-fips.us-west-2.amazonaws.com

    elasticmapreduce-fips.us-east-1.amazonaws.com

    elasticmapreduce-fips.us-east-2.amazonaws.com

    Amazon Glacier

    glacier-fips.us-west-1.amazonaws.com

    glacier-fips.us-west-2.amazonaws.com

    glacier-fips.us-east-2.amazonaws.com

    glacier-fips.us-east-1.amazonaws.com

    AWS Identity and Access Management (IAM) iam-fips.amazonaws.com (僅 IAD 區域)
    Amazon Inspector

    inspector-fips.us-west-1.amazonaws.com

    inspector-fips.us-west-2.amazonaws.com

    inspector-fips.us-east-1.amazonaws.com

    Amazon Kinesis Streams

    kinesis-fips.us-west-1.amazonaws.com

    kinesis-fips.us-west-2.amazonaws.com

    kinesis-fips.us-east-2.amazonaws.com

    kinesis-fips.us-east-1.amazonaws.com

    AWS Key Management Service (KMS)

    kms-fips.us-west-1.amazonaws.com

    kms-fips.us-west-2.amazonaws.com

    kms-fips.us-east-2.amazonaws.com

    kms-fips.us-east-1.amazonaws.com

    AWS Lambda

    lambda-fips.us-west-1.amazonaws.com

    lambda-fips.us-west-2.amazonaws.com

    lambda-fips.us-east-2.amazonaws.com

    lambda-fips.us-east-1.amazonaws.com

    Amazon Quicksight

    fips-us-west-2.quicksight.aws.amazon.com

    fips-us-east-2.quicksight.aws.amazon.com

    fips-us-east-1.quicksight.aws.amazon.com

    Amazon Relational Database Service (RDS)

    rds-fips.us-west-1.amazonaws.com

    rds-fips.us-west-2.amazonaws.com

    rds-fips.us-east-2.amazonaws.com

    rds-fips.us-east-1.amazonaws.com

    Amazon Redshift

    redshift-fips.us-west-1.amazonaws.com

    redshift-fips.us-west-2.amazonaws.com

    redshift-fips.us-east-2.amazonaws.com

    redshift-fips.us-east-1.amazonaws.com

    Amazon Route 53

    api-fips.route53-eu-west-1.com

    route53-fips.amazonaws.com

    Amazon Simple Storage Service (S3)

    s3-fips.us-east-2.amazonaws.com

    s3-fips.dualstack.us-west-1.amazonaws.com

    s3-fips.dualstack.us-west-2.amazonaws.com

    s3-fips.dualstack.us-east-2.amazonaws.com

    s3-fips.dualstack.us-east-1.amazonaws.com

    s3-fips.us-west-1.amazonaws.com

    s3-fips.us-west-2.amazonaws.com

    s3-fips.us-east-1.amazonaws.com

    AWS Shield

    shield-fips.us-east-1.amazonaws.com

    AWS Snowball

    不需要 FIPS

    Amazon Simple Notification Service (SNS)

    sns-fips.us-west-1.amazonaws.com

    sns-fips.us-west-2.amazonaws.com

    sns-fips.us-east-2.amazonaws.com

    sns-fips.us-east-1.amazonaws.com

    Amazon Simple Queue Service (SQS)

    sqs-fips.us-west-1.amazonaws.com

    AWS Security Token Service (STS)

    sts-fips.us-west-1.amazonaws.com

    sts-fips.us-west-2.amazonaws.com

    sts-fips.us-east-2.amazonaws.com

    sts-fips.us-east-1.amazonaws.com

    Amazon Simple Workflow Service (SWF)

    swf-fips.us-west-1.amazonaws.com

    swf-fips.us-west-2.amazonaws.com

    swf-fips.us-east-2.amazonaws.com

    swf-fips.us-east-1.amazonaws.com

    AWS Systems Manager

    ssm-fips.us-west-1.amazonaws.com

    ssm-fips.us-west-2.amazonaws.com

    ssm-fips.us-east-2.amazonaws.com

    ssm-fips.us-east-1.amazonaws.com

    Amazon Virtual Private Cloud (VPC)

    直接使用 EC2

    AWS WAF

    waf-regional-fips.us-west-1.amazonaws.com

    waf-regional-fips.us-west-2.amazonaws.com

    waf-regional-fips.us-east-1.amazonaws.com

    waf-fips.amazonaws.com

    waf-regional-fips.eu-west-1.amazonaws.com

    waf-regional-fips.ap-northeast-1.amazonaws.com

    Amazon WorkDocs

    workdocs-fips.us-west-2.amazonaws.com

    workdocs-fips.us-east-1.amazonaws.com

    如需所有 AWS 端點的清單,請參閱 AWS 一般參考中的區域和端點

  • AWS GovCloud (US) 的 FIPS 端點有哪些?

    下表列出 AWS 區域 GovCloud (US) 中各種 AWS 服務可用的每個 FIPS 端點:

    AWS 服務     AWS GovCloud (US) 端點    
    AWS Certificate Manager

    acm.us-gov-west-1.amazonaws.com

    Amazon API Gateway

    apigateway-fips.us-gov-west-1.amazonaws.com

    Amazon EC2 Autoscaling

    autoscaling.us-gov-west-1.amazonaws.com

    AWS CloudFormation

    cloudformation.us-gov-west-1.amazonaws.com

    AWS CloudHSM

    cloudhsm.us-gov-west-1.amazonaws.com

    AWS CloudTrail

    cloudtrail.us-gov-west-1.amazonaws.com

    Amazon CloudWatch (事件)

    events.us-gov-west-1.amazonaws.com

    Amazon CloudWatch (日誌)

    logs.us-gov-west-1.amazonaws.com

    AWS CodeDeploy

    codedeploy.us-gov-west-1.amazonaws.com

    AWS Config

    config.us-gov-west-1.amazonaws.com

    AWS Database Migration Service (DMS)

    dms.us-gov-west-1.amazonaws.com

    Amazon DynamoDB

    dynamodb.us-gov-west-1.amazonaws.com

    Amazon Elastic Block Store (EBS) ec2.us-gov-west-1.amazonaws.com
    Amazon Elastic Compute Cloud (EC2)

    ec2.us-gov-west-1.amazonaws.com

    Amazon ElastiCache

    elasticache-fips.us-gov-west-1.amazonaws.com

    Elastic Load Balancing

    elasticloadbalancing.us-gov-west-1.amazonaws.com

    Amazon EMR (Amazon EMR)

    elasticmapreduce.us-gov-west-1.amazonaws.com

    Amazon Glacier

    glacier.us-gov-west-1.amazonaws.com

    AWS Identity and Access Management (IAM)

    iam.us-gov.amazonaws.com

    Amazon Inspector inspector-fips.us-gov-west-1.amazonaws.com
    Amazon Kinesis Streams

    kinesis.us-gov-west-1.amazonaws.com

    AWS Key Management Service (KMS)

    kms-fips.us-gov-west-1.amazonaws.com

    AWS Lambda

    lambda-fips.us-gov-west-1.amazonaws.com

    Amazon Polly polly-fips.us-gov-west-1.amazonaws.com
    Amazon Rekognition   rekognition-fips.us-gov-west-1.amazonaws.com

    Amazon Relational Database Service (RDS)

    rds.us-gov-west-1.amazonaws.com

    Amazon Redshift

    redshift.us-gov-west-1.amazonaws.com

    AWS Server Migration Service (SMS)
    sms-fips.us-gov-west-1.amazonaws.com

    Amazon Simple Storage Service (S3)

    s3-fips.dualstack.us-gov-west-1.amazonaws.com

    s3-fips-us-gov-west-1.amazonaws.com

    AWS Shield

    僅有一個端點

    AWS Snowball

    不需要 FIPS

    Amazon Simple Notification Service (SNS)

    sns.us-gov-west-1.amazonaws.com

    Amazon Simple Queue Service (SQS)

    sqs.us-gov-west-1.amazonaws.com

    AWS Security Token Service (STS)

    sts.us-gov-west-1.amazonaws.com

    Amazon Simple Workflow Service (SWF)

    swf.us-gov-west-1.amazonaws.com

    AWS Systems Manager ssm.us-gov-west-1.amazonaws.com

    Amazon Virtual Private Cloud (VPC)

    ec2.us-gov-west-1.amazonaws.com

    如需所有 AWS 端點的清單,請參閱 AWS 一般參考中的區域和端點

compliance-contactus-icon
有問題? 聯絡 AWS 業務代表
探索合規職缺?
立即申請 »
需要 AWS 合規更新?
在 Twitter 上關注我們 »