Comparing AMS Accelerate and Support - AWS Prescriptive Guidance

Comparing AMS Accelerate and Support

Key differences in AMS Accelerate and Support governance responsibilities

The Support and AMS Accelerate support models mainly differ in the following governance areas:

  • Network traffic protection (encryption, integrity, and identity)

  • Customer-side data encryption and data integrity authentication

  • Server-side encryption (file system and data)

In the AMS Accelerate support model, AWS is responsible for these governance areas. In the Support model, you are responsible for them.

For more information about the different types of support models offered by Support, see Compare Support plans in the Support documentation.

Support and AMS Accelerate responsibility matrix

The following table shows the high-level governance responsibilities of you, as the customer, and AWS in both the Support and AMS Accelerate support models.

Governance area Support: Who's responsible (AWS or you) AMS Accelerate: Who's responsible (AWS or you)

AWS Regions

AWS

AWS

AWS Availability Zones

AWS

AWS

AWS Edge locations

AWS

AWS

AWS Global Cloud Infrastructure

AWS

AWS

AWS compute

AWS

AWS

AWS storage

AWS

AWS

AWS database

AWS

AWS

AWS networking

AWS

AWS

Network traffic protection (encryption, integrity, identity)

You

AWS

Customer-side data encryption and data integrity authentication

You

AWS

Server-side encryption (file system and data)

You

AWS

Operating system, network, and firewall configuration

You

You

Platform and application identity and access management

You

You

Customer data

You

You

Note

Each operational process has its own, responsible, accountable, consulted, and informed (RACI) matrix. For more information, see Roles and responsibilities in the AMS Accelerate User Guide.

Support model options

The following diagram shows the different support models that you can apply to each AWS account.

Diagram showing AWS account types and support levels, including AWS Managed Services options.
Note

An AWS Control Towerlanding zone that includes multiple AWS accounts can have more than one support model.