Understanding the Dependency Between Salesforce and AWS

When a Salesforce page slows down or an integration stops delivering records, teams often ask a simple question: “Is AWS down, or is Salesforce down?” That question is understandable, but it can lead to the wrong investigation. Salesforce is a software provider, AWS is a cloud infrastructure provider, and the relationship between them changes depending on the Salesforce product, org, region, network path, and integration design.

A verified update gives the relationship useful context. Salesforce Help published an updated Hyperforce FAQ on August 4, 2026. It says Hyperforce is available on Amazon Web Services (AWS), with Google Cloud Platform availability planned from late 2026, and that Salesforce manages infrastructure placement using technical and operational factors. The same FAQ says some products or features may initially be available on Hyperforce on AWS while they are not yet available on GCP. This does not mean every Salesforce service is hosted on AWS, that every customer chooses the underlying provider, or that an AWS incident automatically becomes a Salesforce incident. This guide explains the dependency in those layers, using information checked on September 16, 2026.

What does the Salesforce–AWS dependency actually mean?

“Dependency” can describe several different relationships. The most important distinction is between a managed service dependency and a customer-created integration:

LayerWhat is connectedWho usually controls itWhat a failure may look like
Salesforce applicationCRM products, APIs, identity, metadata, and business logicSalesforceLogin failures, API errors, slow pages, or unavailable features
Hyperforce infrastructureSalesforce application stacks deployed on public-cloud infrastructureSalesforce manages the placement; the cloud provider operates its underlying servicesRegional capacity, networking, storage, or infrastructure effects
Customer integrationSalesforce connected to AWS services such as applications, data stores, or event pipelinesYour integration and operations teams, with provider-specific controlsTimeouts, authentication errors, missing events, or failed writes
Network pathInternet, private connectivity, DNS, firewalls, routing, or Direct ConnectCustomer, telecom, AWS, and Salesforce depending on the pathOnly one office, VPC, region, or application cannot connect
Data and complianceWhere data is stored, processed, backed up, and transferredShared across product configuration, contracts, and architectureResidency questions, blocked transfers, or an audit finding

The table is a troubleshooting model, not a statement that every Salesforce product uses every AWS component. Check the product-specific documentation and your order configuration before making an architectural or compliance decision.

Two cloud architects review a conceptual diagram connecting a CRM application layer, public cloud infrastructure, and an enterprise network
Cloud architects review a conceptual dependency map; the image represents the layers discussed in this article and is not a live Salesforce or AWS system diagram.

Is Hyperforce the same thing as AWS?

No. Hyperforce is Salesforce’s infrastructure architecture. Salesforce describes it as a public-cloud architecture managed as code, designed to support global delivery, data residency, security, scalability, and agility. AWS is one public-cloud provider on which Hyperforce is available. The platform name, the Salesforce product, and the underlying cloud provider are therefore different parts of the stack.

The updated Salesforce FAQ says Salesforce manages infrastructure placement based on technical and operational factors. For a customer, that means an org running on Hyperforce should not be treated like an AWS account where the customer chooses an Availability Zone, changes an EC2 instance, or opens a security group. Salesforce operates the managed SaaS environment. Your team can still have AWS dependencies around it—for example, a data pipeline, private connection, event consumer, or application hosted in your AWS account—but those are separate from Salesforce’s own infrastructure placement.

Salesforce also notes that services not hosted on Hyperforce continue to operate as before, and that product availability can differ by public-cloud provider. For current product and provider details, consult the Salesforce Hyperforce FAQ and migration guide. Treat that page as versioned operational guidance rather than a permanent promise: Salesforce says the document is informational and subject to change.

Which parts of the relationship are direct?

Salesforce may run selected Hyperforce workloads on AWS

This is the closest thing to a direct infrastructure dependency. If a particular Salesforce org and product are placed on Hyperforce on AWS, an incident in a relevant AWS region or service could become one factor in Salesforce availability. But the actual customer-facing failure may be caused by Salesforce application code, a Salesforce control plane, a dependency in another region, a routing problem, or a product-specific service. Seeing AWS as the underlying provider is not enough to identify the root cause.

Your company may connect Salesforce to AWS

This is often the dependency customers notice first. A Salesforce org may send data to an AWS-hosted service, receive events from a queue, call an API in a VPC, read from a data platform, or use an AWS service as part of an application workflow. In this design, Salesforce can be healthy while your AWS endpoint, credentials, network route, or event consumer is failing. The reverse is also possible: AWS can be healthy while the Salesforce API or authentication layer is unavailable.

Private Connect and Direct Connect solve different problems

Salesforce Private Connect is a cross-cloud integration pattern for connecting a Salesforce org with a customer’s AWS services. AWS Direct Connect is a network connectivity option that can provide a path from an on-premises environment to AWS and, through a public virtual interface, to Hyperforce. They are not interchangeable controls.

The joint Salesforce and AWS guidance says Salesforce Express Connect is not compatible with Hyperforce, and describes AWS Direct Connect with a public virtual interface as an option for some customers that need direct connectivity to Hyperforce. It also distinguishes Private Connect, which connects a Salesforce org to a customer’s AWS services. Read the AWS guidance for accessing Hyperforce with Direct Connect before changing network architecture. Availability, routing, and contract requirements still need to be checked for your org.

Does an AWS outage automatically cause a Salesforce outage?

No. A Salesforce incident and an AWS incident can overlap, but they are not synonyms. Salesforce publishes service status through its Trust site, while AWS publishes service health and account-specific events through AWS Health. Start with the service that is failing and the exact region or instance involved, rather than assuming the largest provider in the stack is responsible.

Use this comparison during an incident:

Observed symptomFirst place to lookInterpretation to test
All Salesforce users cannot log in or use multiple productsSalesforce Trust, org instance, and Salesforce support channelSalesforce-wide or instance-level service disruption
Only one AWS-backed integration failsApplication logs, AWS Health, credentials, DNS, and endpoint metricsCustomer integration or AWS service issue
Only one office or VPC cannot reach SalesforceRoutes, firewall rules, DNS, Direct Connect, and trusted IP configurationNetwork-path or local configuration issue
Salesforce UI works but a scheduled sync stallsAPI limits, OAuth token, queue depth, retries, and integration logsWorkflow or API dependency rather than core availability
One product or feature is unavailableProduct-specific Salesforce status and release documentationComponent-level issue, maintenance, or feature dependency

This distinction affects escalation. If Salesforce Trust reports an incident affecting your instance, collect the incident number and avoid making destructive configuration changes. If Trust is clear but your AWS endpoint shows errors, preserve request IDs and investigate the AWS side. If both appear healthy, compare a direct Salesforce API test, an AWS endpoint test, and the full integration path; a problem between healthy services is still possible.

How does data residency change the dependency?

Hyperforce can change where Salesforce applications and data are hosted, but “regional” does not mean “every byte stays in one country in every situation.” Salesforce says customer data is generally stored in the country where the org is located when the services in use are available there. It also warns that some products may have components in different countries or include integrations to services that are not yet on Hyperforce.

That caveat is important when AWS is part of the design. You need to map at least four locations: the Salesforce org and its Hyperforce operating region, the AWS region holding the connected service or data, the location of integration workers and logs, and the location of backup or disaster-recovery copies. An AWS region selected by your team does not override Salesforce’s product architecture, and a Salesforce data-residency option does not automatically place your external AWS data in the same region.

Use the Salesforce Hyperforce public-cloud infrastructure overview and your organization’s Trust and Compliance Documentation to validate the products, regions, and commitments that apply to your environment. For regulated data, have privacy, security, and legal teams review the actual service terms rather than relying on a general architecture diagram.

What resilience should a Salesforce–AWS architecture include?

Resilience begins with avoiding a single synchronous chain for every business action. If a Salesforce transaction must wait for an AWS service, define what happens when the AWS service is slow or unavailable. Depending on the business process, a queue, retry with exponential backoff, idempotency key, circuit breaker, dead-letter path, or manual reconciliation may be safer than repeated synchronous calls.

Use bounded retries. A retry that continues while Salesforce or AWS is degraded can multiply traffic and turn a short incident into a larger backlog. Record the original request, the retry count, the response code, and the final disposition. Make duplicate delivery safe before enabling automatic replay of events.

Separate recovery objectives for the Salesforce side from objectives for the AWS side. A backup of an AWS database does not restore a Salesforce org configuration, and a Salesforce recovery option does not restore an external AWS application. Salesforce describes an Out of Region Disaster Recovery capability for a secure backup of an instance in a secondary Hyperforce region, but availability and contractual scope must be verified for the products and edition you use. Do not present that option as a universal failover plan.

What should an operations team document?

  • System map: Salesforce org, products, API endpoints, AWS services, queues, databases, DNS names, and network paths.
  • Ownership map: which team owns Salesforce configuration, AWS resources, integration code, identity, certificates, and vendor escalation.
  • Dependency map: which workflows can pause, which can queue, and which require immediate human action.
  • Regional map: Salesforce org location, Hyperforce provider information when documented, AWS regions, backup locations, and cross-border transfers.
  • Incident evidence: timestamps in UTC, Salesforce instance, AWS account and region, request IDs, transaction IDs, status pages, and sanitized logs.
  • Recovery test: a documented test that proves records are not duplicated, missing, reordered, or written to the wrong environment after reconnection.

Do not hard-code assumptions about public-cloud IP ranges, provider placement, or product behavior into a long-lived runbook. Review the current Salesforce and AWS documentation after a Hyperforce migration, a new region launch, a connectivity change, or a major integration release.

How can you identify the failed layer quickly?

  1. Write down the exact failed action, user, org, timestamp, endpoint, and region.
  2. Check Salesforce Trust for the relevant instance and product, then check AWS Health for the account and region involved.
  3. Run a safe, read-only test from a second network or environment if policy permits.
  4. Compare Salesforce UI behavior, Salesforce API behavior, the AWS endpoint directly, and the end-to-end workflow.
  5. Classify the result as Salesforce service, AWS service, customer network, authentication, integration logic, or data issue.
  6. Escalate with evidence and pause automated retries if they are increasing load or creating duplicates.

A useful result is not simply “Salesforce uses AWS.” The useful result is a bounded statement such as: “The Salesforce org is reachable, AWS is healthy, but the integration worker cannot resolve the private endpoint,” or “Salesforce Trust reports an instance issue, so our AWS-side retries are being held.” That level of precision tells the next team what to change—and what not to change.

Bottom line

Salesforce and AWS are closely connected in parts of the modern cloud architecture, especially where Hyperforce runs on AWS or where a customer deliberately integrates Salesforce with AWS services. The relationship is not a single all-or-nothing dependency. It is a stack of managed hosting, application services, network paths, data locations, and customer-built integrations.

For current planning, use the August 4, 2026 Salesforce Hyperforce FAQ as the starting point, then verify the specific products and regions in your org. For incident response, test each layer independently and preserve evidence before changing configuration. The goal is not to eliminate every dependency; it is to know which dependency exists, who owns it, how failure appears, and how the business recovers without creating a second problem.

Official references

Leave a Comment

Salesforce Outage 2025: A Practical Retrospective on Major Disruptions

Salesforce Outage 2025: A Practical Retrospective on Major Disruptions

Review notable Salesforce outages in 2025, what failed, how long selected incidents lasted, and the practical resilience lessons teams can apply.

Developing a Business Continuity Plan for Salesforce Downtime

Developing a Business Continuity Plan for Salesforce Downtime

Build a practical Salesforce downtime continuity plan with impact analysis, RTO/RPO targets, manual workarounds, integration controls, and recovery checks.

How to Contact Salesforce Support During a Major System Failure

How to Contact Salesforce Support During a Major System Failure

Learn how to contact Salesforce Support during a major outage: check Trust Status, choose the right channel, open a strong case, and track recovery.

Salesforce Workbench Errors: Troubleshooting API Tools During Downtime

Salesforce Workbench Errors: Troubleshooting API Tools During Downtime

Troubleshoot Salesforce Workbench login, REST Explorer, timeout, 503, API-version, and limit errors during downtime with a practical diagnostic checklist.

StoreForce Experiencing Issues? How Retail Teams Can Protect Workforce Operations

StoreForce Experiencing Issues? How Retail Teams Can Protect Workforce Operations

StoreForce issues can disrupt scheduling, timekeeping, and employee workflows. Learn how to assess impact, keep stores operating, verify recovery, and know when to escalate.

What Are the Main Causes Behind Widespread Cloud Platform Downtimes?

What Are the Main Causes Behind Widespread Cloud Platform Downtimes?

Understand the main causes of widespread cloud downtime, how failures cascade, what to check first, and how to design a more resilient recovery plan.

Datorama (Marketing Cloud) Down: What Marketers Need to Know

Datorama (Marketing Cloud) Down: What Marketers Need to Know

If Datorama or Marketing Cloud Intelligence seems down, use this evidence-based checklist to verify the outage, protect reporting quality, and know when data is trustworthy again.

Salesforce Heroku Outage: What Happens to Deployed Applications?

Salesforce Heroku Outage: What Happens to Deployed Applications?

A practical look at how Heroku outages can affect deployed apps, dynos, routing, databases, deploys, Heroku Connect, logs, and recovery.

Understanding the Dependency Between Salesforce and AWS

Understanding the Dependency Between Salesforce and AWS

Understand how Salesforce and AWS connect through Hyperforce, integrations, networking, data residency, outages, and shared operational responsibilities.

Is Salesforce Affected by the Recent AWS Outage? What Users Should Check First

Is Salesforce Affected by the Recent AWS Outage? What Users Should Check First

An AWS outage does not automatically mean Salesforce is down. Learn how Hyperforce, regions, instances, and Salesforce Trust determine whether your org is affected.