Amazon Web Services (aws)
This page describes the Landing Zone catalogue aws as shipped with SWAO: the provider and its sovereignty model, the regions with their residency and certifications, how the catalogue is refreshed and how to use it as a target.
Provider and sovereignty model
Amazon Web Services (AWS) is the public cloud of Amazon Web Services, Inc., a US company. The catalogue covers the 34 commercial AWS regions worldwide and is generated from the endpoint data of the AWS SDK.
Sovereignty model: every region is operated by a US entity, so the US CLOUD Act and FISA Section 702 are recorded as extraterritorial exposure wherever the data resides. Frameworks that forbid this exposure (for example BSI C5) therefore block every AWS region, while frameworks without such requirements assess service availability only. In SWAO the catalogue is the hyperscaler reference point; compare it with aws-esc to see what the AWS European Sovereign Cloud offers.
Summary
| Property | Value |
|---|---|
| Provider ID (for targets) | aws |
| Catalogue name | AWS service catalogue |
| Regions | 34 |
| Distinct services | 288 |
| Operator jurisdiction | US entity (US-entity) |
| Extraterritorial exposure | US CLOUD Act (us_cloud_act), FISA Section 702 (fisa_702) |
| Certifications recorded | BSI_C5 (2 regions), FedRAMP_High (3 regions), IRAP (1 region), ISO_27001 (34 regions), MAS_TRM (1 region), PCI_DSS (11 regions), SOC_2 (30 regions) |
| Refresh mode | Automated: swao lz catalogue update --provider aws (Consultant and above) reads AWS SDK endpoint data (botocore) |
| Confidence | high |
| Last updated | 2026-09-04 |
| Schema version | 0.1 |
Default region for Europe | aws:eu-central-1 |
Default region for Germany | aws:eu-central-1 |
| Catalogue file in the public repository | lz-catalogues/aws.json |
Regions
The catalogue has 34 regions. The first table counts them by residency country; the second lists the 8 regions in the europe geography (EU member states plus Iceland, Liechtenstein, Norway, Switzerland and the United Kingdom) with their full sovereignty facts. swao lz catalogue show prints every region.
Regions by residency country
| Country | Regions | Region IDs |
|---|---|---|
| Australia (AU) | 2 | ap-southeast-2, ap-southeast-4 |
| Bahrain (BH) | 1 | me-south-1 |
| Brazil (BR) | 1 | sa-east-1 |
| Canada (CA) | 2 | ca-central-1, ca-west-1 |
| France (FR) | 1 | eu-west-3 |
| Germany (DE) | 1 | eu-central-1 |
| Hong Kong (HK) | 1 | ap-east-1 |
| India (IN) | 2 | ap-south-1, ap-south-2 |
| Indonesia (ID) | 1 | ap-southeast-3 |
| Ireland (IE) | 1 | eu-west-1 |
| Israel (IL) | 1 | il-central-1 |
| Italy (IT) | 1 | eu-south-1 |
| Japan (JP) | 2 | ap-northeast-1, ap-northeast-3 |
| Malaysia (MY) | 1 | ap-southeast-5 |
| Mexico (MX) | 1 | mx-central-1 |
| New Zealand (NZ) | 1 | ap-southeast-6 |
| Singapore (SG) | 1 | ap-southeast-1 |
| South Africa (ZA) | 1 | af-south-1 |
| South Korea (KR) | 1 | ap-northeast-2 |
| Spain (ES) | 1 | eu-south-2 |
| Sweden (SE) | 1 | eu-north-1 |
| Switzerland (CH) | 1 | eu-central-2 |
| Taiwan (TW) | 1 | ap-east-2 |
| Thailand (TH) | 1 | ap-southeast-7 |
| United Arab Emirates (AE) | 1 | me-central-1 |
| United Kingdom (GB) | 1 | eu-west-2 |
| United States (US) | 4 | us-east-1, us-east-2, us-west-1, us-west-2 |
European regions
| Region ID | Name | Residency country | Operator jurisdiction | Extraterritorial exposure | Certifications | Services | Geographies |
|---|---|---|---|---|---|---|---|
eu-central-1 | Europe (Frankfurt) | Germany (DE) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | BSI_C5, ISO_27001, SOC_2, PCI_DSS | 252 | germany, eu, europe |
eu-central-2 | Europe (Zurich) | Switzerland (CH) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 137 | europe |
eu-north-1 | Europe (Stockholm) | Sweden (SE) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | BSI_C5, ISO_27001, SOC_2, PCI_DSS | 194 | eu, europe |
eu-south-1 | Europe (Milan) | Italy (IT) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 159 | eu, europe |
eu-south-2 | Europe (Spain) | Spain (ES) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 150 | eu, europe |
eu-west-1 | Europe (Ireland) | Ireland (IE) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2, PCI_DSS | 254 | eu, europe |
eu-west-2 | Europe (London) | United Kingdom (GB) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2, PCI_DSS | 238 | europe |
eu-west-3 | Europe (Paris) | France (FR) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2, PCI_DSS | 193 | eu, europe |
Certifications
| Certification | Regions holding it |
|---|---|
BSI_C5 | eu-central-1, eu-north-1 |
FedRAMP_High | us-east-1, us-east-2, us-west-2 |
IRAP | ap-southeast-2 |
ISO_27001 | 34 regions |
MAS_TRM | ap-southeast-1 |
PCI_DSS | ap-northeast-1, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, us-east-1, us-east-2, us-west-1, us-west-2 |
SOC_2 | 30 regions |
Certifications are compared without regard to case or separators; C5 and BSI_C5 count as the same BSI C5 attestation. They are facts recorded in the catalogue, not verified by SWAO.
Using this catalogue
Name a region of this catalogue as a target of the Landing Zone Catalog Assessment, on the command line or in the app .swao.yml:
swao lz catalogue show aws
swao assess --type landing-zone-catalog --app <app-id> --lz-cat-targets "aws:eu-central-1"assessment:
landing_zone:
targets:
- aws:eu-central-1A geography such as aws:Europe instead of a region ID resolves to the default region shown in the summary.
To correct or extend the facts for one engagement, copy the catalogue into the workspace with swao lz catalogue copy aws and edit wsp/inputs/catalogs/lz-catalogues/aws/index.json; the workspace copy then takes precedence. See Adapting LZ catalogues.
Catalogue facts are point-in-time and are not legal advice. Check the date and confidence above and review the provider's contracts before you rely on a verdict.