What is .aws?
Brand TLDs operate under Specification 13 of ICANN's registry agreement. It lets a trademark owner keep every second-level name for itself, so you won't find .aws names for sale at any registrar.
.aws entered the DNS root zone on March 25, 2016, 10 years ago. It came out of ICANN's New gTLD Program, the 2012 application round that grew the root from 22 generic TLDs to well over a thousand.
On the technical side, .aws is served by 8 authoritative name servers, every one of them reachable over IPv6. It is also DNSSEC-signed: the root zone carries a DS record for .aws, which lets validating resolvers check its answers cryptographically. Registration data is published over RDAP.
.aws FAQ
What country is .aws?
None. .aws is a generic top-level domain, so it isn't tied to any country.
Who owns the .aws domain extension?
AWS Registry LLC operates .aws as its registry, under a registry agreement with ICANN.
When was .aws created?
.aws was delegated to the DNS root zone on March 25, 2016.
Is .aws a valid domain?
Yes. .aws is an active top-level domain in the DNS root zone, delegated in 2016, so .aws addresses work in every browser.
Can I buy a .aws domain?
No. .aws is a brand TLD under ICANN Specification 13, so names are reserved for AWS Registry LLC.
Is .aws DNSSEC-signed?
Yes, the root zone holds a DS record for .aws.
Sources
Data from IANA root zone version 2026102000. Last changed February 7, 2025. Spotted something wrong? Tell us.