bomonike

URLs and permission role prefixes for each AWS service, grouped by service category.

Overview

Why this?

Questions in certification exams often insert distractors such as names of services which do not exist. Even though there are hundreds of servicess, being familiar with the names of all services available would help you be more confident during exams.

For that reason, discontinued services are listed here as well.

This reference was prepared because Amazon does not provide, on one page, useful links to each service.

Click the category title (in larger font) for the marketing page of that category.

Individual services listed are grouped by service category. Not all services are listed on marketing pages.
The service prefix name shown for each service is the code used in granting permissions.
Click the service prefix for details about IAM Actions, resources, and condition keys to grant fine-grained permissions to that service.
Click the name of the service for the marketing page for the service.
- Press commad+F to find for part of a service name within this page.
- On top of each service’s page, click Sign in to console for the console GUI.
“[UG]” goes to the User Guide page,
- Within each User Guide page may optionally also be links to [API] documentation for the service.
”???” appears when a prefix or service webpage is not known.

About Names of Services

Service names begin with either “Amazon” or “AWS”. Which one used by a particular service is inconsistent because a naming convention has never been published.

“Amazon” prefix (e.g., Amazon S3, Amazon EC2, Amazon RDS) tends to be used for core building blocks of cloud computing - foundational infrastructure services that have been around since the early days of AWS. Such services are typically a discrete, provisionable service/resource (a bucket, an instance, a database, etc.).
“AWS” prefix (e.g., AWS Lambda, AWS IAM, AWS CloudFormation) tends to be used for higher-level, platform-wide, or management/orchestration services that operate across the infrastructure rather than being a discrete resource that is individually provisioned. Such services are typically a tool, framework, or platform capability (identity management, deployment, governance, etc.).

Notable exception:

Amazon CloudWatch is a monitoring/management tool that spans the infrastructure.
AWS Glue is a data service that is provisioned.
“SageMaker AI” and “Kiro” are being marketed without the Amazon/AWS prefix.
“Kiro” are installed locally on your computer.
“PartyRock.aws” is a URL SaaS publicly available, so no service prefix.

NOTE: Amazon Web Service (AWS) offer several types of services:

“SaaS” (System as a Service) which works completely from the browser like Microsoft 365, Google Drive, or Salesforce.
“PaaS” (Platform as a Service)

Analytics

“Optimize performance and scale for analytics and AI workloads”

athena: Amazon Athena Query S3 data using SQL [UG]
cleanrooms: AWS Clean Rooms analyze and collaborate on your collective datasets to gain new insights without revealing underlying data to one another. [UG]
datapipeline:: AWS Data Pipeline = Glue
datazone: Amazon DataZone Data catalog and governance
elasticmapreduce: Amazon EMR (Elastic Map Reduce) Big data processing with Hadoop/Spark
discontinued: Elasticsearch Service (legacy)
cloudsearch:: Amazon CloudSearch Managed search service. [UG]
glue: AWS Glue Serverless data integration (ETL) [UG]
lakeformation: AWS Lake Formation Build and manage data lakes. [UG]
kafka: Amazon MSK Managed Apache Kafka service. [UG]
kafkaconnect: ??? Amazon Managed Streaming for Kafka Connect
kafka-cluster: ??? Apache Kafka APIs for Amazon MSK clusters
opensearch: Amazon OpenSearch Service Search, analyze, and visualize data. [UG]
quicksight: Amazon QuickSight Business intelligence and dashboards. [UG]
redshift: Amazon Redshift Query S3 data from Redshift. [UG]
redshift-data: ??? Amazon Redshift Data API
redshift-serverless: ??? Amazon Redshift Serverless

Application Integration (Messaging)

“Integrate distributed systems and serverless applications with less code”

events: Amazon EventBridge Serverless event bus. [UG]
pipes: ??? Amazon EventBridge Pipes
scheduler: ??? Amazon EventBridge Scheduler
schema: ??? Amazon EventBridge Schemas
firehose: Amazon (Kinesis) Firehose Collect, process, and analyze real-time, streaming data so you can get timely insights and react quickly to new information. [UG]
kinesis: Amazon Kinesis Data Streams [UG]
kinesisvideo: Amazon Kinesis Video Streams real-time video streaming.
kinesisanalytics: ??? Amazon Kinesis Analytics V2
???: Amazon MQ Managed message broker (ActiveMQ, RabbitMQ). [UG]
ses: Amazon SES (Simple Email Service V2) sending and receiving. [UG]
sns: Amazon SNS (Simple Notification Service) Pub/sub messaging and mobile push notifications. [UG]
sqs: Amazon SQS Message queuing service. [UG]
states: AWS Step Functions Orchestrate distributed applications. coordinate the components of distributed applications as a series of steps in a visual workflow. You can quickly build and run state machines to execute the steps of your application in a reliable and scalable fashion. [UG]
swf: Simple Workflow Service. build applications that coordinate work across distributed components. In Amazon SWF, a task represents a logical unit of work that is performed by a component of your application. Coordinating tasks across the application involves managing intertask dependencies, scheduling, and concurrency in accordance with the logical flow of the application. Amazon SWF gives you full control over implementing tasks and coordinating them without worrying about underlying complexities such as tracking their progress and maintaining their state. [UG]
<a target=”_blank” href=”https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsappsync.html”“>appsync</a>: AWS AppSync Managed GraphQL API service. [UG]
appflow: Amazon AppFlow API to integrate SaaS apps with AWS services to securely transfer data. No-code. [UG]

Artificial intelligence (AI)

“Build and scale the next wave of AI innovation on AWS”

augmentedai: sagemaker-a2i-runtime: Amazon Augmented AI (A2I) API a2i-runtime.sagemaker to integrate human reviews with Amazon Textract to verify or override ML predictions. [UG]
bedrock: Amazon Bedrock Foundation models for generative AI. [UG]
bedrock-agentcore: ??? Amazon Bedrock AgentCore - Deploy and operate highly effective agents securely, at scale using any framework and model.
comprehend: Amazon Comprehend Natural language processing (NLP). [UG]
comprehendmedical:
ecs-mcp: ??? Amazon ECS MCP Service
forecast: Amazon Forecast Time-series forecasting. [UG]
frauddetector: Fraud Detector. [UG]
kendra: Amazon Kendra Intelligent enterprise search. [UG]
kendra-ranking: Amazon Kendra Intelligent Ranking
none: AWS Kiro.dev AI Agent development IDE & CLI (incorporates Amazon Q). [UG]
lex: Amazon Lex Build conversational chatbots. [UG]
nova-act: Amazon Nova Act SaaS to use a custom Nova 2 Lite model to build fleets of reliable agents to automate production UI workflows at scale (navigating & filling forms, extracting info).
???: Amazon Nova Forge use HyperPod CLI to build custom frontier models. Reinforment Learning in customer environment with proprietary data. [UG]
none: PartyRock.aws Website to create reusable, useful and delightful apps with generative AI prompts. [UG] VIDEO
personalize: Amazon Personalize Real-time personalization and recommendations. [UG]
polly: Amazon Polly Text-to-speech service. [UG]
rekognition: Amazon Rekognition Image and video analysis. [UG]
q: Amazon Q AI-powered assistant for developers and businesses. [UG]
qbusiness: ??? Amazon Q Business
qapps: ??? Amazon Q Business Q Apps
qdeveloper: ??? Amazon Q Developer
wisdom: ??? Amazon Q in Connect helps customer service agents quickly find the information they need by searching all connected sources at once in Salesforce and ServiceNow, as well as company wikis, FAQs, and file systems. Uses Contact Lens to understand customer issues.
sagemaker: Amazon SageMaker (AI) Build, train, and deploy ML models. [UG]
???: SageMaker Clarify > detect and mitigate bias (data skew) in ML models before and after deployment.
???: SageMaker Model Miner > Monitor models in production to detect quality issues or performance degradation, such as model & data drift and feature distribution. Notify users of deviations found.
???: SageMaker Model Cards > Document (version controlled) critical details of ML models for governance. Features include model overview, intended uses, risk ratings, evalution metrics, definitions, training details.
Amazon SageMaker data science assistant
Amazon SageMaker geospatial capabilities
Amazon SageMaker Unified Studio MCP
Amazon SageMaker with MLflow
textract: Amazon Textract Extract text and data from documents. [UG]
transcribe: Amazon Transcribe Speech-to-text service. [UG]
translate: Amazon Translate Language translation service. [UG]
appstudio: AWS App Studio Build enterprise-grade applications, using natural language. [UG]
transform: AWS Transform Modernize .NET applications to Linux-ready cross-platform .NET. Migrate IBM z/OS and VMware to AWS EC2. Modernize [UG]
AWS Transform custom
discontinued: AWS DeepLens Deep learning enabled video camera.
discontinued December 15, 2025: AWS DeepRacer Autonomous racing car for ML learning.

Blockchain (Web3)

blockchain: Amazon Managed Blockchain Create and manage blockchain networks
blockchain:Amazon Managed Blockchain Query
qldb: Amazon QLDB Immutable, cryptographically verifiable ledger database

Messaging Business applications

“Cloud and native applications built on and by AWS”

connect: Amazon Connect a cloud contact center as a service (CCaaS) solution that offers easy, self-service configuration and enables dynamic, personal, and natural customer engagement at any scale. Creates an Amazon Q Domain (Assistant) and an integration with pre-configured connectors such as Salesforce, Zendesk, Microsoft SharePoint, ServiceNow, Amazon S3, etc. [UG]
mobiletargeting: Amazon Pinpoint Multi-channel marketing communications. service-specific resources, actions, and condition context keys for use in IAM permission policies. [UG]
chime: Amazon Chime Communications service. [UG]

Cloud Financial Management

“Transform your business with cost transparency, control, forecasting, and optimization”

account: ??? AWS Account Management
billing: Billing and Cost Management - View and pay bills, analyze and govern your spending, and optimize your costs.
billingconductor: AWS Billing Conductor Simplifying your billing practice.
budgets: AWS Budgets Set custom cost and usage budgets. UG]
ce: AWS Cost Explorer Visualize and manage AWS costs. UG]
aws-marketplace: AWS Marketplace - Digital catalog where you can find, buy, and deploy software.

Compute

“Run instances, containers, and serverless computing”

app-runner: AWS App Runner Deploy containerized web apps easily. [UG]
batch: AWS Batch Batch computing at any scale. [UG]
ec2: Amazon EC2 Virtual servers in the cloud. [UG]
???: Amazon EC2 Auto Scaling
???: Amazon EC2 Image Builder
???: Amazon EC2 Instance Connect
lambda: AWS Lambda Run code without managing servers (serverless). [UG]
lightsail: AWS Lightsail Simple virtual private servers. [UG]
elasticbeanstalk: Elastic Beanstalk Deploy and scale web applications.
discontinued September 10, 2025: AWS RoboMaker > Develop, test, and deploy robotics applications.

The service failed to gain enough traction in the market. It was essentially built for iRobot (maker of the Roomba), and there wasn’t sufficient due diligence to determine if it was useful for anyone else.

On December 14, 2025, iRobot filed for Chapter 11 bankruptcy protection. After 35 years, the company is` acquired by China’s Shenzhen Picea Robotics — the manufacturer contracted to build Roombas.

AWS Batch is the primary recommended replacement. Migrating means containerizing your ROS/Gazebo simulation apps into Docker images, pushing them to ECR, then creating Batch compute environments and job queues to run those containers. The tradeoff is that you lose integrated RoboMaker features like the WorldForge GUI and on-demand development IDE, but gain more control over instance types, unlimited scaling, and better cost optimization through Spot instances — with no Batch service fee. NBC Sports Sonnet 4.6

Containers (Compute)

ecr: ??? Amazon Elastic Container Registry - Fully-managed Docker container registry : Share and deploy container software, publicly or privately. Competes with Artifactory. [UG]
ecs: Amazon Elastic Container Service for orchestration. [UG]
Amazon Elastic Container Registry Public
eks: Amazon Elastic Kubernetes Service. [UG]
???: Red Hat OpenShift Service on AWS - Fully managed Red Hat OpenShift service on AWS
fargate is a part of AmazonECS: Serverless compute capacity provider for containers obtained from ECR. [UG]

Database

“Power AI and data-driven applications at any scale”

(datalakes): Streaming, Data lakehouse, Data warehouse, Data lake, Data processing, Business intelligence, Search analytics, Data and AI governance

cassandra: Amazon Keyspaces (for Apache Cassandra) Managed open-source Cassandra-compatible database. [UG]
dax: ??? Amazon DynamoDB Accelerator (DAX)
docdb-elastic: Amazon DocumentDB Elastic Clusters MongoDB-compatible document database. [UG]
dynamodb: Amazon DynamoDB Fast, flexible NoSQL database. [UG]
elasticache: Amazon ElastiCache In-memory caching (Redis, Memcached). [UG]
neptune: Amazon Neptune Graph database service. [UG]
neptune-graph: Amazon Neptune Analytics
~~qldb~~
: Amazon Quantum Ledger Database (QLDB) Fully managed ledger database. Available Sep. 10, 2019. Ended July 31, 2025.
rds: Amazon RDS (Relational Database System) Managed MySQL, PostgreSQL, SQL Server, etc.). [UG]
(rds) aurora? Amazon Aurora High-performance MySQL and PostgreSQL compatible database. [UG]
redshift: Amazon Redshift Fast, scalable data warehouse. [UG]
timestream: Amazon Timestream Time series database. [UG]
memorydb: Amazon MemoryDB for Redis Redis-compatible, durable in-memory database. [UG]

Developer Tools

“Develop applications on AWS faster and easier”

braket: Amazon Braket Explore and experiment with quantum computing. [UG]
cloud9: AWS Cloud9 Cloud-based IDE. [UG]
cloudshell: AWS CloudShell Browser-based shell. [UG]
codeartifact: AWS CodeArtifact Managed artifact repository. [UG]
codebuild: AWS CodeBuild Build and test code. [UG]
codecommit: AWS CodeCommit Git repository hosting. [UG]
codedeploy: AWS CodeDeploy Automate code deployments. [UG]
codeguru: AWS CodeGuru AI-powered code reviews and performance recommendations. [UG]
codepipeline: AWS CodePipeline Continuous integration and delivery. [UG]
codestar: AWS CodeStar > pre-configured, end-to-end CI/CD pipelines and project templates.
AWS CodeStar Connections
AWS CodeStar Notifications
xray: AWS X-Ray Trace and analyze distributed applications. [UG]

End User Computing

“Run cloud-native virtual desktops, secure web browsers, and streaming apps”

appstream: Amazon AppStream 2.0 Stream desktop applications. [UG]
workdocs: Amazon WorkDocs Secure document collaboration. [No UG]
workmail: Amazon WorkMail Secure email and calendaring. [UG]
workmailmessageflow: ??? Amazon WorkMail Message Flow
workspaces: Amazon WorkSpaces Virtual desktops in the cloud. [UG]
worklink: ??? Amazon WorkLink > Secure mobile access to internal websites.

Game Tech

Build breakthrough gaming experiences

gamelift: Amazon GameLift Servers Game server hosting purpose-built to power the world’s most demanding games. No UG.
gameliftstreams: ??? Amazon GameLift Streams - Managed service for low-latency, high frame rate game streaming at global scale. No UG.

IoT (Internet of Things)

iot: AWS IoT Core Connect devices to the cloud. [UG]
iotanalytics: AWS IoT Analytics Analytics for IoT devices.
AWS IoT Core Device Advisor
AWS IoT Device Tester
iotevents: AWS IoT Events Detect and respond to IoT events.
AWS IoT Fleet Hub for Device Management
AWS IoT FleetWise
greengrass: AWS IoT Greengrass V2 Local compute, messaging, and sync for devices. Version 2 [UG]
AWS IoT Jobs DataPlane
AWS IoT Managed Integrations
iotsitewise: AWS IoT SiteWise Collect and organize industrial equipment data. [UG]
AWS IoT TwinMaker
AWS IoT Wireless
???: AWS IoT Device Management Register, organize, and manage IoT devices. [UG]

Management Tools (& Monitoring)

“Organize, track, and optimize how you use AWS”

action-recommendations: ??? Action Recommendations > actions in the AWS Management Console.
cloudformation: AWS CloudFormation Infrastructure as code. [UG]
cloudtrail: AWS CloudTrail Track user activity and API usage. [UG]
cloudwatch: Amazon CloudWatch Monitoring and observability. [UG]
compute-optimizer: ??? Compute Optimizer Automation
config: AWS Config Resource inventory and configuration history. [UG]
health: ??? AWS Health APIs and Notifications</a>, HealthImaging, HealthLake, HealthOmics
logs: ??? CloudWatch Logs
organizations: AWS Organizations Manage multiple AWS accounts. [UG]
servicecatalog: AWS Service Catalog Create and manage approved service catalogs. [UG]
ssm: AWS Systems Manager Operational insights and automation. [UG]
trustedadvisor: AWS Trusted Advisor Optimize costs, performance, and security.
controltower: AWS Control Tower Set up and govern multi-account environments
license-manager: AWS License Manager Manage software licenses

Cloud Operations Show on YouTube

Media Services

“Create digital content, and build live and on-demand video workflows”

elastictranscoder: Amazon Elastic Transcoder Media transcoding in the cloud. [UG]
mediaconvert: AWS Elemental MediaConvert File-based video transcoding. [UG]
medialive: AWS Elemental MediaLive Live video processing. [UG]
mediapackage: AWS Elemental MediaPackage Video origination and packaging. [UG]
mediapackage-vod: ??? MediaPackage VOD
mediastore: AWS Elemental MediaStore Media storage optimized for video. [UG]
MediaTailor

Migration & Modernization

“Migrate faster and modernize with confidence (Transfer)”

mgh: AWS Migration Hub Track migrations from a central location. [UG]
mgn: AWS Application Migration Service Lift-and-shift migration.
dms: AWS Database Migration Service Migrate databases to AWS. [UG]
sms: AWS Server Migration Service Migrate on-premises servers to AWS.
datasync: AWS DataSync Fast data transfer to/from AWS. [UG]
?transfer: AWS Transfer Family Managed file transfers (SFTP, FTPS, FTP).
snowball: AWS Snowball Physical devices for data migration.

Networking & Content Delivery

“Run every workload on a secure and reliable global network”

apigateway: AWS API Gateway Management V2 Connect VPCs and on-premises networks [UG]
appmesh: AWS App Mesh Application-level networking for microservices. [UG]
cloudfront: Amazon CloudFront Global content delivery network (CDN). [UG]
directconnect: AWS Direct Connect Dedicated network connection to AWS. [UG]
elasticloadbalancing: Elastic Load Balancing V2 Distribute incoming traffic across targets. [UG]
globalaccelerator: AWS Global Accelerator “Improve global application availability and performance” using AWS-assigned 2 local AnyCast IP addresses on AWS Edge locations (Points of Presence) routed through AWS’ optimized private backbone CDN. AWS auto-switches among listening Enpoint Groups in a Region ALB, NLB, Elastic IP, EC2 instance. [UG] VIDEO
route53globalresolver: Amazon Route 53 Global Resolver Scalable DNS and domain registration. [UG]
route53resolver: Route53 Resolver [UG]
vpc-lattice: Amazon VPC Lattice Isolated cloud networks. [UG]
vpce: AWS PrivateLink between VPC (Virtual Private Connectivity) and service resources.
groundstation: AWS Ground Station Communicate with satellites. [UG]
verified-access: AWS Verified Access (VPN) Secure connections to AWS ???. [UG]

Security & Identity (& Compliance)

Compliance
access-analyzer: ??? AWS IAM Access Analyzer.
acm: AWS Certificate Manager Provision and manage SSL/TLS certificates. [UG]
cognito-identity: Amazon Cognito Identity Federated User authentication and authorization. [UG]
cognito-sync: Amazon Cognito Sync
cognito-idp: Amazon Cognito User Pools
detective: Amazon detective analyze, investigate, and quickly identify the root cause of security findings or suspicious activities. [UG]
guardduty: Amazon GuardDuty Threat detection service. [UG]
iam: AWS IAM Identity and access management. [UG]
- IAM Identity Center (IDC) gives users a central SSO login page to access multiple AWS accounts and applications.
inspector2: Amazon Inspector Automated security assessment.
kms: AWS KMS Managed encryption key service. [UG]
macie2: Amazon Macie Discover and protect sensitive data. [UG]
ram: ??? Resource Access Manager
secretsmanager: AWS Secrets Manager Securely store and rotate secrets. [UG]
securityhub: AWS Security Hub Centralized security and compliance. [UG]
shield: AWS Shield DDoS protection. [UG]
sso: (Single Sign On) ??? AWS IAM Identity Center
sts: ??? Security Token Service
wafv2: AWS WAF Web application firewall. [UG]
ds: AWS Directory Service Managed Active Directory
cloudhsm: ??? AWS CloudHSM Hardware security module. [UG]
fms: ??? AWS Firewall Manager service Central firewall management. [UG]

Storage

“Store and manage data for every workload at scale”

s3: Amazon S3 (Simple Storage Service) for scalable object storage. [UG]
glacier: Amazon S3 Glacier Low-cost archive storage. [UG]
S3 Express, S3 Object Lambda, S3 on Outposts, S3 Tables, S3 Vectors
ebs: Amazon EBS (Elastic Block Storage) for EC2 instances. [UG]
elasticfilesystem: Amazon Elastic File System for managed file storage for EC2. [UG]
fsxv: Amazon FSx Managed file systems (Windows, Lustre, NetApp, OpenZFS). [UG]
storagegateway: AWS Storage Gateway Hybrid cloud storage integration. [UG]
backup: AWS Backup Centralized backup across AWS services. [UG]

Services by AWS Region

AWS Regional Services List Services available by region

_{26-03-07 v023 icons :aws-svcs.md created 2026-02-18}