AWS IAM documentation change
Summary
Revised STS endpoint documentation to reflect current regional routing behavior instead of future plans
Security assessment
Clarifies existing STS endpoint routing behavior without introducing new security features. Changes focus on operational reliability rather than direct security improvements.
Diff
diff --git a/IAM/latest/UserGuide/disaster-recovery-resiliency.md b/IAM/latest/UserGuide/disaster-recovery-resiliency.md index 90c3b7eba..b226cf96c 100644 --- a//IAM/latest/UserGuide/disaster-recovery-resiliency.md +++ b//IAM/latest/UserGuide/disaster-recovery-resiliency.md @@ -15,5 +15 @@ IAM is a critical AWS service. Every operation performed in AWS must be authenti -AWS STS requests always go to a single global endpoint by default. You can use a Regional AWS STS endpoint to reduce latency or provide additional redundancy for your applications. To learn more, see [Manage AWS STS in an AWS Region](./id_credentials_temp_enable-regions.html). - -###### Note - -Starting in early 2025, in AWS Regions that are [enabled by default](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html), AWS STS requests to the global endpoint (`https://sts.amazonaws.com`) will be automatically served in the same AWS Region as your workloads. These changes will be gradually deployed by mid-2025. These changes will not be deployed to opt-in Regions. We recommend that you use the appropriate AWS STS regional endpoints. For more information, see [AWS STS global endpoint changes](./id_credentials_temp_region-endpoints.html#reference_sts_global_endpoint_changes). +In Regions that are [enabled by default](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html), requests to the AWS STS global endpoint are automatically served in the same Region where the request originates. In opt-in Regions, requests to the AWS STS global endpoint are served by a single AWS Region, US East (N. Virginia). You can use a Regional AWS STS endpoint to reduce latency or provide additional redundancy for your applications. To learn more, see [Manage AWS STS in an AWS Region](./id_credentials_temp_enable-regions.html).