AWS signin: Root sign-in now multi-Region; CloudTrail coverage guidance

Service: signin · 2026-09-27 · Documentation medium

File: signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.md · Type: logging

Summary

Adds notes that AWS root user sign-in is now served across US East (N. Virginia), US East (Ohio), and US West (Oregon) for resiliency, and that CloudTrail ConsoleLogin events for root sign-ins are recorded in the processing Region, so monitoring/alerting must cover all three Regions.

Security assessment

The change documents that root sign-in audit events may land in any of three Regions, warning that incomplete monitoring could create blind spots in detecting root account sign-in activity. This is audit/logging visibility guidance with security impact, not a fix for a specific vulnerability.

Evidence

+In AWS CloudTrail, `ConsoleLogin` events for root user sign-ins are recorded in the Region that processed the request—US East (N. Virginia), US East (Ohio), or US West (Oregon). To maintain full visibility into root user sign-in activity, make sure your monitoring and alerting cover all three Regions.

Diff

diff --git a/signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.md b/signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.md
index cc6dd4a33..d23d95bf1 100644
--- a//signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.md
+++ b//signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.md
@@ -18,0 +19,4 @@ This sign-in method is only supported for accounts created with Sign up for AWS
+###### Note
+
+AWS root user sign-in is now served across US East (N. Virginia), US East (Ohio), and US West (Oregon), with sign-in traffic distributed across all three Regions. This change reduces reliance on US East (N. Virginia) and improves resiliency during service disruptions.
+
@@ -105,0 +110,4 @@ If you want more information about the AWS account root user, refer to the follo
+###### Note
+
+In AWS CloudTrail, `ConsoleLogin` events for root user sign-ins are recorded in the Region that processed the request—US East (N. Virginia), US East (Ohio), or US West (Oregon). To maintain full visibility into root user sign-in activity, make sure your monitoring and alerting cover all three Regions. For more information, see [AWS Management Console sign-in events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-aws-console-sign-in-events.html#cloudtrail-event-reference-aws-console-sign-in-events-root) in the _AWS CloudTrail User Guide_.
+