Signing Up for AWS GovCloud (US) - AWS GovCloud (US)

Signing Up for AWS GovCloud (US)

In order to sign up for an AWS GovCloud (US) account, you need to be an individual or entity that meets the requirement of AWS GovCloud (US).

  • The account holder must be a U.S. entity incorporated to do business in the United States and is based on U.S. soil.

  • The account holder must be a U.S. Person defined as a U.S. Citizen or active Green Card holder.

  • The account holder must be able to handle International Traffic and Arms Regulation (ITAR) export controlled data.

AWS GovCloud (US) accounts are associated with standard AWS accounts for billing, service and support purposes. Customers are required to have an existing standard account before signing up for an AWS GovCloud (US) account. We recommend creating a new AWS account that will only be used for AWS GovCloud (US) sign up and billing (i.e. do not deploy any AWS workloads into AWS standard account). A dedicated AWS account for the new AWS GovCloud (US) account will enable you to transfer the AWS GovCloud (US) account to another party in the future and fully close the AWS GovCloud (US) accounts without afffecting your other AWS workloads.

If you are using AWS Organizations to manage accounts within AWS standard regions, you can create the new standard account from AWS Organizations console or using the AWS Organizations API. You can create AWS GovCloud (US) accounts from your standard Organization but aren't able to manage AWS GovCloud (US) accounts from your existing Organization within the standard regions, only the account that is mapped to the AWS GovCloud (US) account. You can create a new AWS Organizations within the AWS GovCloud (US) partition by creating a set of new accounts, creating a new AWS Organization root within one of the new accounts, and inviting the other AWS GovCloud (US) accounts to the new AWS Organization. Follow the steps for inviting accounts to an organization here. This will result in separate AWS Organizations one in each partition.

Creating an AWS GovCloud (US) from a standalone AWS account

If you are a direct customer of AWS and do not purchase AWS through an AWS Solution Provider or an AWS Reseller, follow the steps below. If you are using AWS Organizations to manage accounts, we recommend using the AWS Organizations API.

  1. Create a new AWS standard account by signing up for a new account.

  2. Log in to the new AWS Account with the root credentials. If you do not have the root credentials, create a support ticket to recover the credentials.

  3. Navigate to the “My Account” page at the top right of the AWS Console.

  4. At the bottom of the “My Account” page, there will be a GovCloud (US) section. If you do not see this section, ensure you logged in with the root credentials otherwise, create a support ticket. Click “Sign up for AWS GovCloud (US).”

  5. This will navigate you to the AWS GovCloud (US) Sign Up Portal where it will ask you to accept the AWS GovCloud (US) legal agreement and provide additional information, so we can verify your eligibility for an AWS GovCloud (US) account.

Creating an AWS GovCloud (US) with AWS Organizations

AWS Organizations helps you centrally govern your environment as you grow and scale your workloads on AWS. AWS Organizations manages a set of accounts within each partition and can help create accounts across partitions. For example, you can create an AWS Organizations within the AWS US Standard regions to manage accounts in those regions. You will need to create a separate AWS Organizations in AWS GovCloud (US) to manage accounts in the AWS GovCloud (US) partition.

  1. Follow the steps above to create a standalone AWS GovCloud (US) account that is mapped to your AWS Organizations master account.

  2. Call the AWS Organizations CreateGovCloudAccount API from the AWS Standard account that is your Organization master. This will create two accounts, one in the AWS Standard Region Organization and an associated AWS GovCloud (US) Account. This API will create roles for accessing the new AWS Standard account from the Standard Organization and will create roles in the AWS GovCloud (US) account that is mapped to your root account for accessing the new AWS GovCloud (US) account.

  3. The API call will return success but is executed asynchronously and may take a few minutes to complete. For more information, visit the AWS Organizations documentation.

  4. Once complete, you can log in to your AWS GovCloud (US) root account and switch role into the new AWS GovCloud (US) account.

Creating an AWS GovCloud (US) account through a Reseller or Solution Provider

Contact your AWS Solution Provider or AWS Reseller to sign up for an AWS GovCloud (US) account.

Solution Providers or Resellers

If you are a Solution Provider and wish to resell Authorized Services in the AWS GovCloud (US) Regions please contact your AWS business representative by going to the AWS GovCloud (US) Contact Us page and completing the form to start the sign-up process.

AWS Marketplace

Software vendors who want to be listed in the AWS Marketplace for AWS GovCloud (US) must have a direct agreement with AWS. Software vendors who want to be listed in the AWS GovCloud (US) Region should sign up as a Direct Customer whether they are resellers or not.