AWS STS now supports cross-partition federation for AWS identities

AWS STS Cross-Partition Access

AWS Security Token Service (AWS STS) now allows workloads to use their IAM identity in one partition to get temporary credentials for an IAM role in a different partition, enhancing security by avoiding long-term credential storage.

Key Features

• Use IAM identity in one partition to get temporary credentials for a role in another partition.
• Exchange a short-lived token from AWS STS for temporary AWS credentials using existing APIs.
• Control access, apply governance, and audit token use in AWS CloudTrail across partitions.

What to do

• Request a short-lived token from AWS STS in your partition.
• Exchange the token for temporary credentials in the other partition.
• Manage access and audit usage in both partitions.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.