808bits

Amazon Web Services, Inc.

39 FIPS 140 certificates · 21 active · data as of 2026-09-08

Amazon Web Services, Inc. holds 39 FIPS 140 certificates in NIST's Cryptographic Module Validation Program, covering Amazon, AWS and AWS-LC. 21 are still active, 18 have moved to the historical list.

3 certificates on the 140-2 sunset list. Every FIPS 140-2 validation still active moves to the historical list on 2026-09-21. What that means and the full list.
CertModuleStandardStatusLevelValidated
5476Amazon Linux 2023 GnuTLS Cryptographic ModuleFIPS 140-3active · sunsets 2031-08-1012026-08-11
5438Amazon Linux 2023 OpenSSL FIPS ProviderFIPS 140-3active · sunsets 2031-07-2612026-07-27
5429AWS-LC Cryptographic Module (dynamic)FIPS 140-3active · sunsets 2029-08-1312026-07-20
5369Amazon Linux 2023 Kernel Cryptographic APIFIPS 140-3active · sunsets 2029-09-2212026-07-06
5332AWS Scalable Network Crypto Modules, version 1.1FIPS 140-3active · sunsets 2031-06-1512026-06-16
5314AWS-LC 3 Cryptographic Module (static)FIPS 140-3active · sunsets 2031-06-0412026-06-05
5310AWS Nitro Card Security Engine SSMAEFIPS 140-3active · sunsets 2031-06-0312026-06-04
5298AWS-LC 3 Cryptographic Module (dynamic)FIPS 140-3active · sunsets 2031-06-0212026-06-03
5256AWS Link Encryption ModuleFIPS 140-3active · sunsets 2031-05-0412026-05-05
5242AWS OpenSSL FIPS Module (based on the OpenSSL FIPS Provider)FIPS 140-3active · sunsets 2030-03-1012026-04-14
5146AWS-LC Cryptographic Module (dynamic)FIPS 140-3active · sunsets 2031-01-2512026-01-26
5021Amazon Linux 2023 OpenSSL FIPS ProviderFIPS 140-3active · sunsets 2030-05-2512025-05-26
5015Amazon Linux 2023 GnuTLS Cryptographic ModuleFIPS 140-3active · sunsets 2030-05-0412025-05-05
5014Amazon Linux 2023 NSS Cryptographic ModuleFIPS 140-3active · sunsets 2030-05-0112025-05-02
4971Amazon Linux 2023 Libgcrypt Cryptographic ModuleFIPS 140-3active · sunsets 2030-02-2312025-02-24
4884AWS Key Management Service HSMFIPS 140-3active · sunsets 2026-11-1732024-11-18
4816AWS-LC Cryptographic Module (static)FIPS 140-3active · sunsets 2029-09-3012024-10-01
4631AWS-LC Cryptographic ModuleFIPS 140-3active · sunsets 2028-10-0512023-10-06
4523AWS Key Management Service HSMFIPS 140-2active · sunsets 2026-09-2132023-05-19
4490AWS OpenSSL FIPS ProviderFIPS 140-2active · sunsets 2026-09-2112023-04-26
4177AWS Key Management Service HSMFIPS 140-2active · sunsets 2026-09-2122022-03-15
4808Amazon Linux 2023 Kernel Cryptographic APIFIPS 140-3historical12024-09-23
4759AWS-LC Cryptographic Module (dynamic)FIPS 140-3historical12024-08-14
4593Amazon Linux 2 Kernel Crypto API Cryptographic ModuleFIPS 140-2historical12023-09-12
4565Amazon Linux 2 NSS Cryptographic ModuleFIPS 140-2historical12023-08-30
4548Amazon Linux 2 OpenSSL Cryptographic ModuleFIPS 140-2historical12023-07-10
4472Amazon Linux 2 GnuTLS Cryptographic ModuleFIPS 140-2historical12023-04-14
3739AWS Nitro Card Security EngineFIPS 140-2historical12020-10-29
3709Amazon Linux 2 Kernel Crypto API Cryptographic ModuleFIPS 140-2historical12020-09-14
3652Amazon Linux 2 Libreswan Cryptographic ModuleFIPS 140-2historical12020-05-08
3646Amazon Linux 2 NSS Cryptographic ModuleFIPS 140-2historical12020-04-20
3643Amazon Linux 2 GnuTLS Cryptographic ModuleFIPS 140-2historical12020-04-20
3618Amazon Linux 2 Libgcrypt Cryptographic ModuleFIPS 140-2historical12020-02-19
3617AWS Key Management Service HSMFIPS 140-2historical22020-02-19
3567Amazon Linux 2 OpenSSH Client Cryptographic ModuleFIPS 140-2historical12019-11-20
3562Amazon Linux 2 OpenSSH Server Cryptographic ModuleFIPS 140-2historical12019-11-14
3553Amazon Linux 2 OpenSSL Cryptographic ModuleFIPS 140-2historical12019-10-23
3139AWS Key Management Service HSMFIPS 140-2historical22018-02-26
3009AWS Key Management Service HSMFIPS 140-2historical22017-09-05

NIST records the vendor as free text, so one company can appear under several spellings. Those are grouped here. Corporate families are not: a product line can change owner, and the certificates stay with the registration that earned them. The nShield modules run from nCipher Corporation through Thales to Entrust, and this tracker keeps those as three vendors because that is how NIST holds them.