AWS general medium security documentation change
Summary
Added new FIPS-compliant API endpoints (.api.aws domains) for all regions in KMS service endpoints table
Security assessment
The addition of FIPS-validated endpoints enhances security compliance for government and regulated industries. FIPS endpoints indicate cryptographic module validation required for certain security certifications. This change helps users maintain compliance with federal security standards.
Diff
diff --git a/general/latest/gr/kms.md b/general/latest/gr/kms.md index 1b9a001e9..03b3e0ab5 100644 --- a//general/latest/gr/kms.md +++ b//general/latest/gr/kms.md @@ -19,35 +19,35 @@ Region Name | Region | Endpoint | Protocol -US East (Ohio) | us-east-2 | kms.us-east-2.amazonaws.com kms-fips.us-east-2.amazonaws.com | HTTPS HTTPS -US East (N. Virginia) | us-east-1 | kms.us-east-1.amazonaws.com kms-fips.us-east-1.amazonaws.com | HTTPS HTTPS -US West (N. California) | us-west-1 | kms.us-west-1.amazonaws.com kms-fips.us-west-1.amazonaws.com | HTTPS HTTPS -US West (Oregon) | us-west-2 | kms.us-west-2.amazonaws.com kms-fips.us-west-2.amazonaws.com | HTTPS HTTPS -Africa (Cape Town) | af-south-1 | kms.af-south-1.amazonaws.com kms-fips.af-south-1.amazonaws.com | HTTPS HTTPS -Asia Pacific (Hong Kong) | ap-east-1 | kms.ap-east-1.amazonaws.com kms-fips.ap-east-1.amazonaws.com | HTTPS HTTPS -Asia Pacific (Hyderabad) | ap-south-2 | kms.ap-south-2.amazonaws.com kms-fips.ap-south-2.amazonaws.com | HTTPS HTTPS -Asia Pacific (Jakarta) | ap-southeast-3 | kms.ap-southeast-3.amazonaws.com kms-fips.ap-southeast-3.amazonaws.com | HTTPS HTTPS -Asia Pacific (Malaysia) | ap-southeast-5 | kms.ap-southeast-5.amazonaws.com kms-fips.ap-southeast-5.amazonaws.com | HTTPS HTTPS -Asia Pacific (Melbourne) | ap-southeast-4 | kms.ap-southeast-4.amazonaws.com kms-fips.ap-southeast-4.amazonaws.com | HTTPS HTTPS -Asia Pacific (Mumbai) | ap-south-1 | kms.ap-south-1.amazonaws.com kms-fips.ap-south-1.amazonaws.com | HTTPS HTTPS -Asia Pacific (Osaka) | ap-northeast-3 | kms.ap-northeast-3.amazonaws.com kms-fips.ap-northeast-3.amazonaws.com | HTTPS HTTPS -Asia Pacific (Seoul) | ap-northeast-2 | kms.ap-northeast-2.amazonaws.com kms-fips.ap-northeast-2.amazonaws.com | HTTPS HTTPS -Asia Pacific (Singapore) | ap-southeast-1 | kms.ap-southeast-1.amazonaws.com kms-fips.ap-southeast-1.amazonaws.com | HTTPS HTTPS -Asia Pacific (Sydney) | ap-southeast-2 | kms.ap-southeast-2.amazonaws.com kms-fips.ap-southeast-2.amazonaws.com | HTTPS HTTPS -Asia Pacific (Taipei) | ap-east-2 | kms.ap-east-2.amazonaws.com kms-fips.ap-east-2.amazonaws.com | HTTPS HTTPS -Asia Pacific (Thailand) | ap-southeast-7 | kms.ap-southeast-7.amazonaws.com kms-fips.ap-southeast-7.amazonaws.com | HTTPS HTTPS -Asia Pacific (Tokyo) | ap-northeast-1 | kms.ap-northeast-1.amazonaws.com kms-fips.ap-northeast-1.amazonaws.com | HTTPS HTTPS -Canada (Central) | ca-central-1 | kms.ca-central-1.amazonaws.com kms-fips.ca-central-1.amazonaws.com | HTTPS HTTPS -Canada West (Calgary) | ca-west-1 | kms.ca-west-1.amazonaws.com kms-fips.ca-west-1.amazonaws.com | HTTPS HTTPS -Europe (Frankfurt) | eu-central-1 | kms.eu-central-1.amazonaws.com kms-fips.eu-central-1.amazonaws.com | HTTPS HTTPS -Europe (Ireland) | eu-west-1 | kms.eu-west-1.amazonaws.com kms-fips.eu-west-1.amazonaws.com | HTTPS HTTPS -Europe (London) | eu-west-2 | kms.eu-west-2.amazonaws.com kms-fips.eu-west-2.amazonaws.com | HTTPS HTTPS -Europe (Milan) | eu-south-1 | kms.eu-south-1.amazonaws.com kms-fips.eu-south-1.amazonaws.com | HTTPS HTTPS -Europe (Paris) | eu-west-3 | kms.eu-west-3.amazonaws.com kms-fips.eu-west-3.amazonaws.com | HTTPS HTTPS -Europe (Spain) | eu-south-2 | kms.eu-south-2.amazonaws.com kms-fips.eu-south-2.amazonaws.com | HTTPS HTTPS -Europe (Stockholm) | eu-north-1 | kms.eu-north-1.amazonaws.com kms-fips.eu-north-1.amazonaws.com | HTTPS HTTPS -Europe (Zurich) | eu-central-2 | kms.eu-central-2.amazonaws.com kms-fips.eu-central-2.amazonaws.com | HTTPS HTTPS -Israel (Tel Aviv) | il-central-1 | kms.il-central-1.amazonaws.com kms-fips.il-central-1.amazonaws.com | HTTPS HTTPS -Mexico (Central) | mx-central-1 | kms.mx-central-1.amazonaws.com kms-fips.mx-central-1.amazonaws.com | HTTPS HTTPS -Middle East (Bahrain) | me-south-1 | kms.me-south-1.amazonaws.com kms-fips.me-south-1.amazonaws.com | HTTPS HTTPS -Middle East (UAE) | me-central-1 | kms.me-central-1.amazonaws.com kms-fips.me-central-1.amazonaws.com | HTTPS HTTPS -South America (São Paulo) | sa-east-1 | kms.sa-east-1.amazonaws.com kms-fips.sa-east-1.amazonaws.com | HTTPS HTTPS -AWS GovCloud (US-East) | us-gov-east-1 | kms.us-gov-east-1.amazonaws.com kms-fips.us-gov-east-1.amazonaws.com | HTTPS HTTPS -AWS GovCloud (US-West) | us-gov-west-1 | kms.us-gov-west-1.amazonaws.com kms-fips.us-gov-west-1.amazonaws.com | HTTPS HTTPS +US East (Ohio) | us-east-2 | kms.us-east-2.amazonaws.com kms-fips.us-east-2.api.aws kms.us-east-2.api.aws kms-fips.us-east-2.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +US East (N. Virginia) | us-east-1 | kms.us-east-1.amazonaws.com kms-fips.us-east-1.api.aws kms-fips.us-east-1.amazonaws.com kms.us-east-1.api.aws | HTTPS HTTPS HTTPS HTTPS +US West (N. California) | us-west-1 | kms.us-west-1.amazonaws.com kms.us-west-1.api.aws kms-fips.us-west-1.amazonaws.com kms-fips.us-west-1.api.aws | HTTPS HTTPS HTTPS HTTPS +US West (Oregon) | us-west-2 | kms.us-west-2.amazonaws.com kms-fips.us-west-2.amazonaws.com kms.us-west-2.api.aws kms-fips.us-west-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Africa (Cape Town) | af-south-1 | kms.af-south-1.amazonaws.com kms.af-south-1.api.aws kms-fips.af-south-1.api.aws kms-fips.af-south-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Hong Kong) | ap-east-1 | kms.ap-east-1.amazonaws.com kms.ap-east-1.api.aws kms-fips.ap-east-1.api.aws kms-fips.ap-east-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Hyderabad) | ap-south-2 | kms.ap-south-2.amazonaws.com kms-fips.ap-south-2.amazonaws.com kms.ap-south-2.api.aws kms-fips.ap-south-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Jakarta) | ap-southeast-3 | kms.ap-southeast-3.amazonaws.com kms.ap-southeast-3.api.aws kms-fips.ap-southeast-3.api.aws kms-fips.ap-southeast-3.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Malaysia) | ap-southeast-5 | kms.ap-southeast-5.amazonaws.com kms-fips.ap-southeast-5.amazonaws.com kms-fips.ap-southeast-5.api.aws kms.ap-southeast-5.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Melbourne) | ap-southeast-4 | kms.ap-southeast-4.amazonaws.com kms-fips.ap-southeast-4.amazonaws.com kms-fips.ap-southeast-4.api.aws kms.ap-southeast-4.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Mumbai) | ap-south-1 | kms.ap-south-1.amazonaws.com kms.ap-south-1.api.aws kms-fips.ap-south-1.amazonaws.com kms-fips.ap-south-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Osaka) | ap-northeast-3 | kms.ap-northeast-3.amazonaws.com kms-fips.ap-northeast-3.amazonaws.com kms-fips.ap-northeast-3.api.aws kms.ap-northeast-3.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Seoul) | ap-northeast-2 | kms.ap-northeast-2.amazonaws.com kms.ap-northeast-2.api.aws kms-fips.ap-northeast-2.api.aws kms-fips.ap-northeast-2.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Singapore) | ap-southeast-1 | kms.ap-southeast-1.amazonaws.com kms-fips.ap-southeast-1.amazonaws.com kms.ap-southeast-1.api.aws kms-fips.ap-southeast-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Sydney) | ap-southeast-2 | kms.ap-southeast-2.amazonaws.com kms-fips.ap-southeast-2.api.aws kms-fips.ap-southeast-2.amazonaws.com kms.ap-southeast-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Taipei) | ap-east-2 | kms.ap-east-2.amazonaws.com kms-fips.ap-east-2.api.aws kms-fips.ap-east-2.amazonaws.com kms.ap-east-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Thailand) | ap-southeast-7 | kms.ap-southeast-7.amazonaws.com kms.ap-southeast-7.api.aws kms-fips.ap-southeast-7.api.aws kms-fips.ap-southeast-7.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Tokyo) | ap-northeast-1 | kms.ap-northeast-1.amazonaws.com kms-fips.ap-northeast-1.api.aws kms.ap-northeast-1.api.aws kms-fips.ap-northeast-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Canada (Central) | ca-central-1 | kms.ca-central-1.amazonaws.com kms.ca-central-1.api.aws kms-fips.ca-central-1.api.aws kms-fips.ca-central-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Canada West (Calgary) | ca-west-1 | kms.ca-west-1.amazonaws.com kms-fips.ca-west-1.api.aws kms-fips.ca-west-1.amazonaws.com kms.ca-west-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Frankfurt) | eu-central-1 | kms.eu-central-1.amazonaws.com kms.eu-central-1.api.aws kms-fips.eu-central-1.api.aws kms-fips.eu-central-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Europe (Ireland) | eu-west-1 | kms.eu-west-1.amazonaws.com kms-fips.eu-west-1.api.aws kms-fips.eu-west-1.amazonaws.com kms.eu-west-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (London) | eu-west-2 | kms.eu-west-2.amazonaws.com kms-fips.eu-west-2.amazonaws.com kms.eu-west-2.api.aws kms-fips.eu-west-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Milan) | eu-south-1 | kms.eu-south-1.amazonaws.com kms-fips.eu-south-1.amazonaws.com kms-fips.eu-south-1.api.aws kms.eu-south-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Paris) | eu-west-3 | kms.eu-west-3.amazonaws.com kms-fips.eu-west-3.amazonaws.com kms-fips.eu-west-3.api.aws kms.eu-west-3.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Spain) | eu-south-2 | kms.eu-south-2.amazonaws.com kms-fips.eu-south-2.amazonaws.com kms.eu-south-2.api.aws kms-fips.eu-south-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Stockholm) | eu-north-1 | kms.eu-north-1.amazonaws.com kms-fips.eu-north-1.amazonaws.com kms.eu-north-1.api.aws kms-fips.eu-north-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Zurich) | eu-central-2 | kms.eu-central-2.amazonaws.com kms-fips.eu-central-2.amazonaws.com kms-fips.eu-central-2.api.aws kms.eu-central-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Israel (Tel Aviv) | il-central-1 | kms.il-central-1.amazonaws.com kms-fips.il-central-1.amazonaws.com kms-fips.il-central-1.api.aws kms.il-central-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Mexico (Central) | mx-central-1 | kms.mx-central-1.amazonaws.com kms.mx-central-1.api.aws kms-fips.mx-central-1.amazonaws.com kms-fips.mx-central-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Middle East (Bahrain) | me-south-1 | kms.me-south-1.amazonaws.com kms-fips.me-south-1.api.aws kms.me-south-1.api.aws kms-fips.me-south-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Middle East (UAE) | me-central-1 | kms.me-central-1.amazonaws.com kms-fips.me-central-1.amazonaws.com kms-fips.me-central-1.api.aws kms.me-central-1.api.aws | HTTPS HTTPS HTTPS HTTPS +South America (São Paulo) | sa-east-1 | kms.sa-east-1.amazonaws.com kms-fips.sa-east-1.api.aws kms.sa-east-1.api.aws kms-fips.sa-east-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +AWS GovCloud (US-East) | us-gov-east-1 | kms.us-gov-east-1.amazonaws.com kms-fips.us-gov-east-1.amazonaws.com kms-fips.us-gov-east-1.api.aws kms.us-gov-east-1.api.aws | HTTPS HTTPS HTTPS HTTPS +AWS GovCloud (US-West) | us-gov-west-1 | kms.us-gov-west-1.amazonaws.com kms.us-gov-west-1.api.aws kms-fips.us-gov-west-1.amazonaws.com kms-fips.us-gov-west-1.api.aws | HTTPS HTTPS HTTPS HTTPS @@ -66,0 +67 @@ Cryptographic operations (ECC & SM2) request rate | Each supported Region: 1,000 +Cryptographic operations (ML-DSA) request rate | Each supported Region: 1,000 per second | [Yes](https://console.aws.amazon.com/servicequotas/home/services/kms/quotas/L-3C995F2B) | Maximum requests for cryptographic operations with ML-DSA CMKs per second. This shared quota applies to Sign and Verify requests using ML-DSA CMKs. When you reach this quota, KMS rejects this type of request for the remainder of the interval.