Broker - Amazon MQ


A broker is a message broker environment running on Amazon MQ. It is the basic building block of Amazon MQ. The combined description of the broker instance class (m5, t3) and size (large, micro) is a broker instance type (for example, mq.m5.large). For more information, see Broker instance types.

  • A single-instance broker is comprised of one broker in one Availability Zone. The broker communicates with your application and with an Amazon EBS or Amazon EFS storage volume.

  • An active/standby broker is comprised of two brokers in two different Availability Zones, configured in a redundant pair. These brokers communicate synchronously with your application, and with Amazon EFS.

For more information, see Broker Architecture.

You can enable automatic minor version upgrades to new minor versions of the broker engine, as Apache releases new versions. Automatic upgrades occur during the maintenance window defined by the day of the week, the time of day (in 24-hour format), and the time zone (UTC by default).

For information about creating and managing brokers, see the following:

Supported wire-level protocols

You can access your brokers by using any programming language that ActiveMQ supports and by enabling TLS explicitly for the following protocols:


An ActiveMQ broker has several attributes, for example:

  • A name (MyBroker)

  • An ID (b-1234a5b6-78cd-901e-2fgh-3i45j6k178l9)

  • An Amazon Resource Name (ARN) (arn:aws:mq:us-east-2:123456789012:broker:MyBroker:b-1234a5b6-78cd-901e-2fgh-3i45j6k178l9)

  • An ActiveMQ Web Console URL (

    For more information, see Web Console in the Apache ActiveMQ documentation.


    If you specify an authorization map which doesn't include the activemq-webconsole group, you can't use the ActiveMQ Web Console because the group isn't authorized to send messages to, or receive messages from, the Amazon MQ broker.

  • Wire-level protocol endpoints:

    • amqp+ssl://

    • mqtt+ssl://

    • ssl://


      This is an OpenWire endpoint.

    • stomp+ssl://

    • wss://

    For more information, see Configuring Transports in the Apache ActiveMQ documentation.


For an active/standby broker, Amazon MQ provides two ActiveMQ Web Console URLs, but only one URL is active at a time. Likewise, Amazon MQ provides two endpoints for each wire-level protocol, but only one endpoint is active in each pair at a time. The -1 and -2 suffixes denote a redundant pair.

For a full list of broker attributes, see the following in the Amazon MQ REST API Reference: