Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RUN-2824: Respect the AWS_STS_REGIONAL_ENDPOINTS parameter #131

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

RUN-2824: Respect the AWS_STS_REGIONAL_ENDPOINTS parameter #131

wants to merge 1 commit into from

Commits on Sep 3, 2024

  1. Respect the AWS_STS_REGIONAL_ENDPOINTS parameter 

    This modification allows the use of STS regionalized endpoints by specifying the AWS_STS_REGIONAL_ENDPOINTS=regional environment variable.

AWS STS has global and per-region endpoints.
https://docs.aws.amazon.com/sdkref/latest/guide/feature-sts-regionalized-endpoints.html

AWS recommends STS regionalized endpoints (AWS_STS_REGIONAL_ENDPOINTS=regional), but defaults to STS global endpoints (AWS_STS_REGIONAL_ENDPOINTS=legacy ).

On August 29, 2024, an AWS STS failure occurred and requests using the STS global endpoints failed.
This failure did not affect requests using STS Regionalized endpoints.

The current implementation uses AWS SecurityTokenServiceClient when creating sts clients. This method is deprecated and does not read the STS endpoint configuration.

Instead, the AWSsecurityTokenServiceClientBuilder is used to allow the STS endpoint settings to be respected.
    @kangaechu
    kangaechu committed Sep 3, 2024
    Configuration menu
    Copy the full SHA
    52ca6cd View commit details
    Browse the repository at this point in the history