Reference map of AWS frontend URLs grouped by function and access scope.
Sign-in & identity
Billing & cost management
| URL | Purpose | Scope |
|---|
| /billing | Billing dashboard — invoices, payments | Billing |
| /cost-management | Cost Explorer — spend analysis, forecasts | Billing |
| /budgets | AWS Budgets — alerts and thresholds | Billing |
| calculator.aws | AWS Pricing Calculator (public) | All accounts |
Organizations & governance
| URL | Purpose | Scope |
|---|
| /organizations | AWS Organizations — account hierarchy, SCPs | Organizations |
| /controltower | Control Tower — landing zone, guardrails | Organizations |
| /servicecatalog | Service Catalog — approved product portfolios | Organizations |
| /config | AWS Config — compliance rules, resource inventory | Admin |
Security
| URL | Purpose | Scope |
|---|
| /securityhub | Security Hub — findings, CIS benchmarks | Admin |
| /guardduty | GuardDuty — threat detection | Admin |
| /cloudtrail | CloudTrail — API audit logs | Admin |
| /inspector | Inspector — vulnerability scanning | Admin |
| /detective | Detective — security investigation | Admin |
| /wafv2 | WAF — web application firewall rules | Admin |
Developer & deployment
| URL | Purpose | Scope |
|---|
| /cloudformation | CloudFormation — IaC stacks | Developer |
| /codepipeline | CodePipeline — CI/CD pipelines | Developer |
| /cloudshell | CloudShell — browser-based CLI | Developer |
| health.aws.amazon.com | AWS Health Dashboard — service status | All accounts |
Standalone portals (outside console)
Key pattern: Console paths are relative to {region}.console.aws.amazon.com. Standalone portals use the short .aws TLD and generally require no login.
Diagram
graph TD
subgraph SignIn["Sign-in & identity"]
CON["console.aws.amazon.com<br/>Main console"]
SIGN["signin.aws.amazon.com<br/>Root / IAM login"]
ALIAS["alias.signin.aws.amazon.com<br/>Account-specific IAM"]
SSO["d-xxx.awsapps.com/start<br/>Identity Center SSO"]
end
subgraph Billing["Billing & cost"]
BILL["/billing<br/>Invoices, payments"]
COST["/cost-management<br/>Cost Explorer"]
BUD["/budgets<br/>Budget alerts"]
CALC["calculator.aws<br/>Public pricing"]
end
subgraph Governance["Organizations & governance"]
ORG["/organizations<br/>Account hierarchy, SCPs"]
CT["/controltower<br/>Landing zone"]
SC["/servicecatalog<br/>Approved products"]
CFG["/config<br/>Compliance rules"]
end
subgraph Security["Security"]
SH["/securityhub<br/>Findings, CIS"]
GD["/guardduty<br/>Threat detection"]
TRAIL["/cloudtrail<br/>API audit logs"]
INS["/inspector<br/>Vuln scanning"]
DET["/detective<br/>Investigation"]
WAF["/wafv2<br/>WAF rules"]
IAM["/iam<br/>Users, roles"]
end
subgraph Dev["Developer & deployment"]
CFN["/cloudformation<br/>IaC stacks"]
CP["/codepipeline<br/>CI/CD"]
CS["/cloudshell<br/>Browser CLI"]
HEALTH["health.aws.amazon.com<br/>Service status"]
end
subgraph Standalone["Standalone portals"]
DOCS["docs.aws.amazon.com"]
REPOST["repost.aws"]
SKILL["skillbuilder.aws"]
MKT["marketplace.aws"]
end
CON --> SIGN
CON --> SSO
SIGN --> ALIAS
CON --> Security
CON --> Dev
CON --> Billing
CON --> Governance
