Your AWS GovCloud (US) account ID and its alias
To sign in to an AWS GovCloud (US) account as an IAM user, you must have an account alias or an account ID for the AWS GovCloud (US) account. If you are signed in to the AWS Management Console or have configured the AWS CLI or an AWS SDK with your account credentials, you can find the account alias or account ID for the AWS GovCloud (US) account. If you cannot sign in, ask your administrator for the information that you need to sign in.
Note
Account aliases are not secrets, and they will appear in your public-facing sign-in page URL. Do not include any sensitive information in your account alias.
Topics
Finding your AWS GovCloud (US) account ID
You can find the account ID for your AWS GovCloud (US) account using the following methods.
Note
AWS Support can’t help you recover this information.
Finding your AWS GovCloud (US) account ID using the AWS Management Console for AWS GovCloud (US)
You can retrieve your AWS GovCloud (US) account ID by Signing in to AWS GovCloud (US). In the navigation bar, choose Support, and then Support Center. Your currently signed-in 12-digit account number (ID) appears in the Support Center navigation pane.
Finding your AWS GovCloud (US) account ID using the standard AWS Management Console
You can retrieve your AWS GovCloud (US) account ID by signing in to the standard AWS Management Console as the root user of the associated standard AWS account. In the navigation bar, choose your account name on the top right of the window, and then choose Account. On the Account Settings page, under AWS GovCloud (US), choose the Sign up for AWS GovCloud (US) button. You will be directed to a page that indicates you already have access and displays your account ID.
Finding your AWS GovCloud (US) account ID using the AWS CLI
With AWS GovCloud (US) account credentials use the following command to view your user ID, account ID, and your user ARN:
If your AWS GovCloud (US) account was created using the CreateGovCloudAccount API, use the following command view your AWS GovCloud (US) account ID and its associated standard AWS account ID. This call must be made from the standard AWS Organizations management account or by a member account that is a delegated administrator for an AWS service.
Finding your AWS GovCloud (US) account ID using the API
With AWS GovCloud (US) account credentials, use the following API to view your user ID, account ID, and your user ARN:
If your AWS GovCloud (US) account was created using the CreateGovCloudAccount API, use the following command view your AWS GovCloud (US) account ID and its associated standard AWS account ID. This call must be made from the standard AWS Organizations management account or by a member account that is a delegated administrator for an AWS service.
Finding your associated standard AWS account ID
Note
AWS Support can’t help you recover this information.
Finding your associated standard AWS account ID using the AWS Management Console for AWS GovCloud (US)
You can retrieve your associated standard AWS account ID by signing into your AWS GovCloud (US) account.
In the navigation bar, choose Support, and then Support Center. In the Support Center navigation pane, choose Your support cases and open the most recently created support case by choosing its Case ID or Subject. In the Case details, look for the email address listed in the Opened by field. If your account email address has not changed since opening the case, this will be your account email address. Sign in as the root user of your standard AWS account using this email and follow Finding your AWS account ID in the AWS Identity and Access Management User Guideguide.
Note
If you have never opened a support case or believe the email address has since changed, create a support case for account and billing and resolve it immediately. Review the case's Open by field to see the associated account email.
Finding your associated standard AWS account ID using the AWS CLI
If your AWS GovCloud (US) account was created using CreateGovCloudAccount API, use the following command view your AWS GovCloud (US) account ID and its associated standard AWS account ID. This call must be made from the standard AWS Organizations management account or by a member account that is a delegated administrator for an AWS service.
Finding your associated standard AWS account ID using the API
If your AWS GovCloud (US) account was created using the CreateGovCloudAccount API, use the following command view your AWS GovCloud (US) account ID and its associated standard AWS account ID. This call must be made from the standard AWS Organizations management account or by a member account that is a delegated administrator for an AWS service.
About account aliases
If you want the URL for your sign-in page to contain your company name (or other friendly identifier) instead of your AWS GovCloud (US) account ID, you can create an account alias. This section provides information about AWS account aliases and lists the API operations that you use to create an alias.
Your sign-in page URL has the following format, by default.
https://Your_Account_ID.signin.aws.amazon.com/console/
If you create an AWS account alias for your AWS GovCloud (US) ID, your sign-in page URL looks like the following example.
https://Your_Account_Alias.signin.aws.amazon.com/console/
The original URL containing your AWS GovCloud (US) ID remains active and can be used after you create your AWS account alias.
Tip
To create a bookmark for your account sign-in page in your web browser, you should manually type the sign-in URL in the bookmark entry. Don't use your web browser's "bookmark this page" feature.
Creating, deleting, and listing an AWS account alias
You can use the AWS Management Console, the IAM API, or the command line interface to create or delete your AWS GovCloud (US) account alias.
Considerations
-
Your AWS GovCloud (US) account can have only one alias. If you create a new alias for your AWS GovCloud (US) account, the new alias overwrites the previous alias, and the URL containing the previous alias stops working.
-
The account alias must be unique across all Amazon Web Services products. It must contain only digits, lowercase letters, and hyphens. For more information on limitations on AWS account entities, see IAM and AWS STS quotas, name requirements, and character limits.
-
Changes to your AWS GovCloud (US) account alias or the associated standard AWS account alias will not overwrite the other alias. They can each be customized without interference of the other. See Creating, deleting, and listing an AWS account alias in the AWS Identity and Access Management User Guideto learn more about customizing the associated standard AWS account alias.
Creating, editing, and deleting aliases (console)
You can create, edit, and delete an account alias from the AWS Management Console for AWS GovCloud (US).
To create, edit, or remove an account alias (console)
-
Sign in to the AWS Management Console for AWS GovCloud (US) and open the IAM console at https://console.amazonaws-us-gov.com/iam/
. -
In the navigation pane, choose Dashboard.
-
In the AWS account section, find Account Alias, and choose Create. If an alias already exists, then choose Edit.
-
Type the name you want to use for your alias, then choose Save changes.
-
To remove the alias, next to Account Alias choose Delete, and then choose Delete. The sign-in URL reverts to using your AWS account ID.
Creating, deleting, and listing aliases (AWS CLI)
Note
You must use AWS GovCloud (US) credentials.
To create an alias for your AWS Management Console for AWS GovCloud (US) sign-in page URL, run the following command:
To delete an AWS account ID alias, run the following command:
To display your AWS account ID alias, run the following command:
Creating, deleting, and listing aliases (AWS API)
Note
You must use AWS GovCloud (US) credentials.
To create an alias for your AWS Management Console for AWS GovCloud (US) sign-in page URL, call the following operation:
To delete an alias for your AWS Management Console for AWS GovCloud (US) sign-in page URL, call the following operation:
To display your AWS account ID alias, call the following operation:
