AWS Security Blog
Tag: STS
How to use Regional AWS STS endpoints
April 18, 2025: AWS has made changes to the AWS Security Token Service (AWS STS) global endpoint (sts.amazonaws.com) in Regions enabled by default to enhance its resiliency and performance. AWS STS requests to the global endpoint are automatically served in the same AWS Region as your workloads. These changes will not be deployed to opt-in […]
Announcing an update to IAM role trust policy behavior
April 16, 2024: Updated with information on AWS CloudTrail logging for roles that are still using the implicit trust behavior, and additional sample queries to find these roles. June 15, 2023: Enforcement has changed from a fixed date to an automated process starting June 30, 2023 that removed roles based on observed role assumption behavior. […]
AWS Security Token Service (STS) Is Now Active by Default in All AWS Regions
My previous blog post on November 11, 2015, reported that we were preparing to activate AWS Security Token Service (STS) by default in all AWS regions. As of today, AWS STS is active by default in all AWS regions, for all customers. This means that your applications and services can immediately take advantage of reduced […]
How Does HAQM Cognito Relate to Existing Web Identity Federation?
As you might have seen, AWS recently released HAQM Cognito, a user identity and data synchronization service that helps you securely manage and synchronize app data for your users across their mobile devices. If you develop mobile apps that call AWS services, you definitely want to check out HAQM Cognito. What is HAQM Cognito? HAQM […]
New in HAQM EMR: Support for Federated Users
AWS announced yesterday that HAQM Elastic MapReduce (EMR) added support for federated users. If you use HAQM EMR, you can now enable users to administer HAQM EMR clusters who are signed in to your corporate network using their corporate credentials—you no longer need to create IAM users for access to EMR. Up to now, federated […]