At the bottom of the screen, choose the Services tab. You will see a list of all of AWS services that are supported in the application.
If any of your services are in alarm, you will see the number of alarms in red.
Choose any service to view more information about that service.
For a list of supported services, see Supported AWS Regions and services (p. 6).
Supported Regions
Supported AWS Regions and services
In this section, you’ll learn which AWS Regions and services are supported by the Console Mobile Application.
Supported Regions
The Console Mobile Application supports the following Regions:
• US East (Ohio)
• US East (N. Virginia)
• US West (N. California)
• US West (Oregon)
• South America (Sao Paulo)
Opt in Regions
Opt in Regions are not enabled by default. You must choose to enable them in the console before they can be used in the Console Mobile Application. The following opt in Regions are supported:
• Africa (Cape Town)
• Asia Pacific (Hong Kong)
• Europe (Milan)
• Middle East (Bahrain)
NoteIf your sign in identity uses access keys, you will not be able to use opt-in Regions in the Console Mobile Application.
Supported services
Supported services
The Console Mobile Application supports the following AWS services:
• Amazon API Gateway
• AWS Billing and Cost Management
• AWS CloudFormation
• AWS CloudTrail
• Amazon CloudWatch
• Amazon DynamoDB
• AWS Elastic Beanstalk
• Amazon Elastic Compute Cloud (Amazon EC2)
• Amazon Elastic Container Service (Amazon ECS)
• Elastic Load Balancing
• AWS Identity and Access Management (IAM)
• AWS Lambda
• AWS OpsWorks
• AWS Personal Health Dashboard
• Amazon Relational Database Service (Amazon RDS)
• Amazon Route 53
• Amazon Simple Queue Service
• Amazon Simple Storage Service (Amazon S3)
• Amazon Virtual Private Cloud (Amazon VPC)
NoteThe Console Mobile Application supports a select subset of features for the AWS services listed above. If you don’t see a feature you want to use on the app, you can contact us. You can also leave feedback in the app by choosing the menu icon in the upper left, then choosing Feedback.
Add your comments, optionally include logs, and then choose Submit.
If you use AWS Billing and Cost Management, note that you need to have API permissions to use that service on the mobile application. See the example IAM policy in Getting started with AWS Console Mobile Application (p. 3).
Data protection
Security
Cloud security at AWS is the highest priority. As an AWS customer, you benefit from data centers and network architectures that are built to meet the requirements of the most security-sensitive organizations.
Security is a shared responsibility between AWS and you. The shared responsibility model describes this as security of the cloud and security in the cloud:
Security of the cloud – AWS is responsible for protecting the infrastructure that runs AWS services in the AWS Cloud. AWS also provides you with services that you can use securely. Third-party auditors regularly test and verify the effectiveness of our security as part of the AWS Compliance Programs. To learn about the compliance programs that apply to AWS Console Mobile Application, see AWS Services in Scope by Compliance Program.
Security in the cloud – Your responsibility is determined by the AWS service that you use. You are also responsible for other factors including the sensitivity of your data, your company’s requirements, and applicable laws and regulations.
This documentation helps you understand how to apply the shared responsibility model when using Console Mobile Application. The following topics show you how to configure Console Mobile Application to meet your security and compliance objectives. You also learn how to use other AWS services that help you to monitor and secure your Console Mobile Application resources.
Topics
• Data protection (p. 8)
• Resilience in AWS Console Mobile Application (p. 9)
• Compliance validation for AWS Console Mobile Application (p. 9)
• Security best practices for AWS Console Mobile Application (p. 10)
Data protection
The AWS shared responsibility model applies to data protection in the Console Mobile Application.
As described in this model, AWS is responsible for protecting the global infrastructure that runs all of the AWS Cloud. You are responsible for maintaining control over your content that is hosted on this infrastructure. This content includes the security configuration and management tasks for the AWS services that you use. For more information about data privacy, see the Data Privacy FAQ.
For data protection purposes, we recommend that you protect AWS account credentials and set up individual user accounts with AWS Identity and Access Management (IAM). That way each user is given only the permissions necessary to fulfill their job duties. We also recommend that you secure your data in the following ways:
• Use multi-factor authentication (MFA) with each account.
• Use SSL/TLS to communicate with AWS resources. The Console Mobile Application does this for you, ensuring a secure connection between the application and your AWS resources.
• Set up API and user activity logging with AWS CloudTrail.
• Use AWS encryption solutions, along with all default security controls within AWS services.
Resilience
We strongly recommend that you never put sensitive identifying information, such as your customers' account numbers, into free-form fields such as a Name field. This includes when you work with Console Mobile Application or other AWS services using the console, API, AWS CLI, or AWS SDKs. Any data that you enter into the Console Mobile Application or other services might get picked up for inclusion in diagnostic logs. When you provide a URL to an external server, don’t include credentials information in the URL to validate your request to that server.
Resilience in AWS Console Mobile Application
The AWS global infrastructure is built around AWS Regions and Availability Zones. AWS Regions provide multiple physically separated and isolated Availability Zones, which are connected with low-latency, high-throughput, and highly redundant networking. With Availability Zones, you can design and operate applications and databases that automatically fail over between zones without interruption. Availability Zones are more highly available, fault tolerant, and scalable than traditional single or multiple data center infrastructures.
For more information about AWS Regions and Availability Zones, see AWS Global Infrastructure.
For specific information about AWS Regions supported by the Console Mobile Application, see Supported regions (p. 6).
Compliance validation for AWS Console Mobile Application
Third-party auditors assess the security and compliance of AWS Console Mobile Application as part of multiple AWS compliance programs. These include SOC, PCI, FedRAMP, HIPAA, and others.
For a list of AWS services in scope of specific compliance programs, see AWS Services in Scope by Compliance Program. For general information, see AWS Compliance Programs.
You can download third-party audit reports using AWS Artifact. For more information, see Downloading Reports in AWS Artifact.
Your compliance responsibility when using AWS services is determined by the sensitivity of your data, your company’s compliance objectives, and applicable laws and regulations. AWS provides the following resources to help with compliance:
• Security and Compliance Quick Start Guides – These deployment guides discuss architectural considerations and provide steps for deploying security- and compliance-focused baseline environments on AWS.
• Architecting for HIPAA Security and Compliance Whitepaper – This whitepaper describes how companies can use AWS to create HIPAA-compliant applications.
NoteNot all services are compliant with HIPAA.
• AWS Compliance Resources – This collection of workbooks and guides might apply to your industry and location.
• Evaluating Resources with Rules in the AWS Config Developer Guide – The AWS Config service assesses how well your resource configurations comply with internal practices, industry guidelines, and regulations.
• AWS Security Hub – This AWS service provides a comprehensive view of your security state within AWS that helps you check your compliance with security industry standards and best practices.
Security best practices
Security best practices for AWS Console Mobile Application
We recommend taking some basic security precautions when using the Console Mobile Application on your device. These measures will help protect your AWS account in the event that your device is lost or stolen.
• Make sure your device is protected by biometrics or a PIN code if your device allows.
• Enable biometrics on the Console Mobile Application.
• If your device is lost or stolen, perform a remote wipe by logging into your Apple or Google account on another device. This option should be available for most iOS and Android devices.
I lost my device, what should I do?
Troubleshooting
In this section, you’ll find answers to some common questions and concerns.
I lost my device, what should I do?
If you lose your device, we recommend deactivating the IAM user you used to sign into the Console Mobile Application. We also recommend performing a remote wipe on your device.