AWS GovCloud (US) Sign Up - AWS GovCloud (US)

AWS GovCloud (US) Sign Up

In order to sign up for an AWS GovCloud (US) account, you need to be an individual or entity that meets the requirement of AWS GovCloud (US).

  • The account holder must be a U.S. entity incorporated to do business in the United States and is based on U.S. soil.

  • The account holder must be a U.S. Person defined as a U.S. Citizen or active Green Card holder.

  • The account holder must be able to handle International Traffic and Arms Regulation (ITAR) export controlled data.

There are two options for creating an AWS GovCloud(US) account as a direct consumer.

Option 1: Creating an AWS GovCloud (US) from a standalone AWS account

If you are a direct customer of AWS and do not purchase AWS through an AWS Solution Provider or an AWS Reseller, follow the steps below. If you are using AWS Organizations to manage accounts, we recommend using the AWS Organizations API.

  1. Create a new AWS standard account by signing up for a new account.

  2. Log in to the new AWS Account with the root credentials. If you do not have the root credentials, create a support ticket to recover the credentials.

  3. Navigate to the “My Account” page at the top right of the AWS Console.

  4. At the bottom of the “My Account” page, there will be a GovCloud (US) section. If you do not see this section, ensure you logged in with the root credentials otherwise, create a support ticket. Click “Sign up for AWS GovCloud (US).”

  5. This will navigate you to the AWS GovCloud (US) Sign Up Portal where it will ask you to accept the AWS GovCloud (US) legal agreement and provide additional information, so we can verify your eligibility for an AWS GovCloud (US) account.

Option 2: Creating an AWS GovCloud (US) with AWS Organizations

AWS Organizations helps you centrally govern your environment as you grow and scale your workloads on AWS. AWS Organizations manages a set of accounts within each partition and can help create accounts across partitions. For example, you can create an AWS Organizations within the AWS US Standard regions to manage accounts in those regions. You will need to create a separate AWS Organizations in AWS GovCloud (US) to manage accounts in the AWS GovCloud (US) partition.

  1. Follow the steps above to create a standalone AWS GovCloud (US) account that is mapped to your AWS Organizations master account.

  2. Call the AWS Organizations CreateGovCloudAccount API from the AWS Standard account that is your Organization master. This will create two accounts, one in the AWS Standard Region Organization and an associated AWS GovCloud (US) Account. This API will create roles for accessing the new AWS Standard account from the Standard Organization and will create roles in the AWS GovCloud (US) account that is mapped to your management account for accessing the new AWS GovCloud (US) account.

  3. The API call will return success but is executed asynchronously and may take a few minutes to complete. For more information, visit the AWS Organizations documentation.

    In order to get the account numbers being created, please run the describe-create-account-status command.


    describe-create-account-status --create-account-request-id [value].

    aws organizations describe-create-account-status --create-account-request-id car-examplecreateaccountrequestid111

    See here for more information.

  4. Once complete, you can log in to your AWS GovCloud (US) management account and switch role into the new AWS GovCloud (US) account.

  5. After creating the standalone account in the AWS GovCloud (US), you can invite it to an organization in the AWS GovCloud (US) only.

Creating an AWS GovCloud (US) account through a Reseller or Solution Provider

Contact your AWS Solution Provider or AWS Reseller to sign up for an AWS GovCloud (US) account.

Solution Providers or Resellers

If you are a Solution Provider and wish to resell Authorized Services in the AWS GovCloud (US) Regions please contact your AWS business representative by going to the AWS GovCloud (US) Contact Us page and completing the form to start the sign-up process.

AWS Marketplace

Software vendors who want to be listed in the AWS Marketplace for AWS GovCloud (US) must have a direct agreement with AWS. Software vendors who want to be listed in the AWS GovCloud (US) Region should sign up as a Direct Customer whether they are resellers or not.

Close Account

Use the AWS Management Console to close your AWS account. The steps below provide a high-level overview.

If you close the account that you're using for the AWS Firewall Manager administrator, AWS and Firewall Manager handle the closure as follows:

AWS retains the policy data for the account for 90 days from the effective date of the administrator account closure. At the end of the 90 day period, AWS permanently deletes all policy data for the account.

  • To retain findings for more than 90 days, you can archive the policies. You can also use a custom action with an EventBridge rule to store the findings in an S3 bucket.

  • As long as AWS retains the policy data, when you reopen the closed account, AWS reassigns the account as the service administrator and recovers the service policy data for the account.

  • For more information, see Closing an account.


For customers in the AWS GovCloud (US) Regions:

  • Before closing your account, back up and then delete your policy data and other account resources. You will no longer have access to them after you close the account.

You can close your AWS account using the following procedure.

To close your AWS account

  1. Sign in as the root user of the account that you want to close, using the email address and password that are associated with the account.

    If you sign in as an AWS Identity and Access Management (IAM) user or role, you can't close an account.

  2. On the navigation bar in the upper-right corner, choose your account name (or alias), and then choose My Account.

  3. On the Account Settings page, scroll to the end of the page to the Close Account section. Read and ensure that you understand the text next to the check box. After you close an AWS account, you can no longer use it to access AWS services.

  4. Select the check box to accept the terms, and then choose Close Account.

  5. In the confirmation box, choose Close Account.