View a markdown version of this page

Comparing AMS Accelerate and AWS Support - AWS Prescriptive Guidance

Comparing AMS Accelerate and AWS Support

Comparing AMS Accelerate and AWS Support

Key differences in AMS Accelerate and AWS Support governance responsibilities

The AWS Support and AMS Accelerate support models mainly differ in the following governance areas:

  • Network traffic protection (encryption, integrity, and identity)

  • Customer-side data encryption and data integrity authentication

  • Server-side encryption (file system and data)

In the AMS Accelerate support model, AWS is responsible for these governance areas. In the AWS Support model, you are responsible for them.

For more information about the different types of support models offered by AWS Support, see Compare AWS Support plans in the AWS Support documentation.

AWS Support and AMS Accelerate responsibility matrix

The following table shows the high-level governance responsibilities of you, as the customer, and AWS in both the AWS Support and AMS Accelerate support models.

Governance area

 AWS Support: Who's responsible (AWS or you)

 

AMS Accelerate: Who's responsible (AWS or you)

AWS Regions

AWS

AWS

AWS Availability Zones

AWS

AWS

AWS Edge locations

AWS

AWS

AWS Global Cloud Infrastructure

AWS

AWS

AWS compute

AWS

AWS

AWS storage

AWS

AWS

AWS database

AWS

AWS

AWS networking

AWS

AWS

Network traffic protection (encryption, integrity, identity)

You

AWS

Customer-side data encryption and data integrity authentication

You

AWS

Server-side encryption (file system and data)

You

AWS

Operating system, network, and firewall configuration

You

You

Platform and application identity and access management

You

You

Customer data

You

You

Note

Each operational process has its own, responsible, accountable, consulted, and informed (RACI) matrix. For more information, see Roles and responsibilities in the AMS Accelerate User Guide.

Support model options

The following diagram shows the different support models that you can apply to each AWS account.

Note

An AWS Control Tower landing zone that includes multiple AWS accounts can have more than one support model.