AWS Frontend URLs — Access Scope Map

Reference map of AWS frontend URLs grouped by function and access scope.

Sign-in & identity

URL	Purpose	Scope
console.aws.amazon.com	Main AWS Management Console	All accounts
signin.aws.amazon.com	Root / IAM user sign-in page	All accounts
{alias}.signin.aws.amazon.com	Account-specific IAM sign-in	Organizations
d-xxx.awsapps.com/start	IAM Identity Center (SSO) portal	Organizations
/iam	IAM Console — users, roles, policies	Admin

Billing & cost management

URL	Purpose	Scope
/billing	Billing dashboard — invoices, payments	Billing
/cost-management	Cost Explorer — spend analysis, forecasts	Billing
/budgets	AWS Budgets — alerts and thresholds	Billing
calculator.aws	AWS Pricing Calculator (public)	All accounts

Organizations & governance

URL	Purpose	Scope
/organizations	AWS Organizations — account hierarchy, SCPs	Organizations
/controltower	Control Tower — landing zone, guardrails	Organizations
/servicecatalog	Service Catalog — approved product portfolios	Organizations
/config	AWS Config — compliance rules, resource inventory	Admin

Security

URL	Purpose	Scope
/securityhub	Security Hub — findings, CIS benchmarks	Admin
/guardduty	GuardDuty — threat detection	Admin
/cloudtrail	CloudTrail — API audit logs	Admin
/inspector	Inspector — vulnerability scanning	Admin
/detective	Detective — security investigation	Admin
/wafv2	WAF — web application firewall rules	Admin

Developer & deployment

URL	Purpose	Scope
/cloudformation	CloudFormation — IaC stacks	Developer
/codepipeline	CodePipeline — CI/CD pipelines	Developer
/cloudshell	CloudShell — browser-based CLI	Developer
health.aws.amazon.com	AWS Health Dashboard — service status	All accounts

Standalone portals (outside console)

URL	Purpose	Scope
aws.amazon.com	Marketing site, documentation, pricing	All accounts
docs.aws.amazon.com	Official documentation	All accounts
repost.aws	re:Post — community Q&A	All accounts
workshops.aws	Hands-on workshop catalog	All accounts
skillbuilder.aws	AWS Skill Builder — training & certs	All accounts
marketplace.aws	AWS Marketplace — 3rd party software	All accounts
phd.aws.amazon.com	Personal Health Dashboard	Admin

---

Key pattern: Console paths are relative to {region}.console.aws.amazon.com. Standalone portals use the short .aws TLD and generally require no login.

Diagram

graph TD
subgraph SignIn["Sign-in & identity"]
CON["console.aws.amazon.com<br/>Main console"]
SIGN["signin.aws.amazon.com<br/>Root / IAM login"]
ALIAS["alias.signin.aws.amazon.com<br/>Account-specific IAM"]
SSO["d-xxx.awsapps.com/start<br/>Identity Center SSO"]
end
subgraph Billing["Billing & cost"]
BILL["/billing<br/>Invoices, payments"]
COST["/cost-management<br/>Cost Explorer"]
BUD["/budgets<br/>Budget alerts"]
CALC["calculator.aws<br/>Public pricing"]
end
subgraph Governance["Organizations & governance"]
ORG["/organizations<br/>Account hierarchy, SCPs"]
CT["/controltower<br/>Landing zone"]
SC["/servicecatalog<br/>Approved products"]
CFG["/config<br/>Compliance rules"]
end
subgraph Security["Security"]
SH["/securityhub<br/>Findings, CIS"]
GD["/guardduty<br/>Threat detection"]
TRAIL["/cloudtrail<br/>API audit logs"]
INS["/inspector<br/>Vuln scanning"]
DET["/detective<br/>Investigation"]
WAF["/wafv2<br/>WAF rules"]
IAM["/iam<br/>Users, roles"]
end
subgraph Dev["Developer & deployment"]
CFN["/cloudformation<br/>IaC stacks"]
CP["/codepipeline<br/>CI/CD"]
CS["/cloudshell<br/>Browser CLI"]
HEALTH["health.aws.amazon.com<br/>Service status"]
end
subgraph Standalone["Standalone portals"]
DOCS["docs.aws.amazon.com"]
REPOST["repost.aws"]
SKILL["skillbuilder.aws"]
MKT["marketplace.aws"]
end
CON --> SIGN
CON --> SSO
SIGN --> ALIAS
CON --> Security
CON --> Dev
CON --> Billing
CON --> Governance