AWS Console - Manage AWS resources & receive notifications

The AWS Console Mobile Application, offered by Amazon Web Services, enables users to access and manage a selected range of resources while receiving push notifications, ensuring they stay connected to their AWS assets even when away from their desk.

This application allows users to set up and receive notifications for various AWS services, monitor resources via a tailored dashboard, and access configuration details, metrics, and alarms for specific AWS services. The Dashboard provides authorized users with a snapshot of account status, offering real-time information through Amazon CloudWatch, the AWS Health Dashboard, AWS Billing and Cost Management, and Recently Accessed Services. You can check for existing issues and navigate to the relevant CloudWatch alarm screen to obtain detailed insights along with graphs and adjustment options. Additionally, you can view the status of particular AWS services, examine detailed resource screens, and execute certain actions.

To use the Console Mobile Application, you need to have an active AWS account. During the initial setup, the app allows for simultaneous sign-ins to multiple identities. The login process utilizes biometric authentication (on compatible devices), making it easy and rapid to access AWS resources.

The Console Mobile Application is compatible with several services including Amazon API Gateway, AWS Billing and Cost Management, AWS Cost Explorer, AWS CloudFormation, AWS CloudShell, AWS CloudTrail, Amazon CloudWatch, Amazon DynamoDB, AWS Elastic Beanstalk, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Container Service (Amazon ECS), Elastic Load Balancing, AWS Identity and Access Management, AWS Lambda, AWS OpsWorks, AWS Personal Health Dashboard, Amazon Relational Database Service (Amazon RDS), Amazon Route 53, Amazon Simple Queue Service features, Amazon Simple Storage Service (Amazon S3), and Amazon Virtual Private Cloud (Amazon VPC). Furthermore, it supports 16 additional AWS services, which include AWS Systems Manager, AWS Developer Tools, and Amazon Elastic Kubernetes Service (Amazon EKS), through an integrated mobile web browsing experience.

The Console Mobile Application is accessible across various regions, including US East (N. Virginia), US East (Ohio), US West (N. California), US West (Oregon), Africa (Cape Town), Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Jakarta), Asia Pacific (Melbourne), Asia Pacific (Mumbai), Asia Pacific (Osaka), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Milan), Europe (Paris), Europe (Spain), Europe (Stockholm), Europe (Zurich), Middle East (Bahrain), Middle East (UAE), and South America (São Paulo).

We frequently release updates featuring new tools. Share your ideas for features you would like to see and how you intend to use them through the Feedback option in the Console Mobile Application's menu. We're eager to hear from you!

AWS Console Mobile Application FAQs

How do I sign in?

The Console Mobile Application supports several authentication methods, including owner/root credentials, IAM user credentials, and federated login via AWS Single Sign-On, Microsoft Active Directory and third-party identity providers. An owner account is the AWS login that created the account. An IAM user is an identity that has been created by an administrator through the IAM service. Note that IAM users need to also provide their account alias, which can be found at the top of the Management Console sign-in screen. We recommend using either IAM user credentials or a federated role to log in to the Console Mobile Application.

For security reasons, we recommend that you secure your device with a passcode and that you follow an AWS best practice by creating and using an IAM user's credentials to sign in to the app. If you lose your device, an IAM user can be deactivated to prevent unauthorized access. Root accounts cannot be deactivated.

Click here to learn more about the different types of AWS security credentials.

Can I sign-in with biometric authentication?

You can setup biometrics authentication on supported iOS and Android devices running Console Mobile Application v2.0+.

Which password managers does the AWS Console Mobile App support?

The AWS Console Mobile App supports password managers that are integrated with the mobile operating systems maintained by Apple (iOS) and Google (Android). E.g., iCloud Passwords and Keychain, Google Chrome Password Manager, Samsung Pass, etc.

What hardware authenticators does the AWS Console Mobile App support for MFA?

The AWS Console Mobile App supports all FIDO certified hardware authenticators (E.g., YubiKey) for MFA. Click here for a complete list of FIDO certified hardware authenticators.

Which software authenticators does the AWS Console Mobile App support for MFA?

The AWS Console Mobile App supports software authenticators such as Google Authenticator, Microsoft Authenticator, and LastPass Authenticator. Click here for a full list of supported software authenticators.

What if my organization’s mobile device management policy does not allow the use of password managers or auto-fill?

If your organization does not allow the use of password managers or auto-fill, then you will need to sign in to your AWS identity in the AWS Console Mobile App by entering your AWS identity’s password.

Can I assume IAM roles?

Yes, on iOS and Android V2.0+.

Where can I download the app?

Download the Console Mobile Application from the Apple App Store, the Google Play Store, or the Amazon App Store.

What versions of iOS and Android are supported?

iOS 14.0+ and Android 8.0+ are supported.

Does the Console Mobile application support tablets?

The Console Mobile application is optimized for iOS and Android mobile devices with a screen size < 7”, however it works on larger mobile screen sizes as well.

Can I view my current AWS usage charges?

Yes, you can view your current usage charges in the Console Mobile Application. Simply visit your Billing Preferences page and select the checkbox to Receive Billing Alerts. In order to view usage charges, your identity must have permission to view CloudWatch.

Is MFA supported?

Yes. We recommend using either a hardware MFA device or a virtual MFA on a separate mobile device for the greatest level of account protection.

Can I create resources?

Currently the only way to create resources from the mobile app is to do so through the AWS CloudShell service using the AWS Command Line Interface (AWS CLI). Otherwise, you can view and sometimes modify resources within the app's graphical user interface, however you cannot create resources through the graphical user interface.

Can I download S3 objects?

You can use The Console Mobile Application to generate a pre-signed URL for an S3 object. A pre-signed URL grants time-limited permission to download the object. Read more about pre-signed URLs here.

In order to open a pre-signed URL for an S3 object in your device's browser, use the app to navigate to the S3 object's detail page and tap "View in browser". Your device configuration will determine what actions are possible with the object.

Which CloudWatch dashboards can I access?

You can search and view all CloudWatch custom dashboards that your AWS identity has permissions to access. CloudWatch automatic dashboards are not yet supported in the AWS Console Mobile App.

I lost my mobile device. What should I do?

We strongly recommend that in addition to using a password or biometric lock on your mobile device, you use an IAM user to manage AWS resources. If you lose your mobile device, you can remove the IAM user's access.

Can I provide feedback?

Yes. Click the Feedback button in the Console Mobile Application's menu. We’re eager to hear about your experience.