Assume Role With Web Identity doesn't respect region about aws-cli HOT 3 CLOSED

I think this is expected behaviour. IAM will always reach out to the global sts.amazonaws.com (which is in us-east-1). The region parameter is for API operations after IAM auth has completed.

Instead you have to specify the endpoint URL I think? There's a similar issue with some more context / solutions here: #4370

from aws-cli.

apparently

export AWS_STS_REGIONAL_ENDPOINTS=regional

is what you need according to that issue.

from aws-cli.

Thanks for reaching out. What @arianvp mentioned above is correct, and here is the documentation for that environment variable: https://docs.aws.amazon.com/sdkref/latest/guide/feature-sts-regionalized-endpoints.html

Noted in the documentation is the following:

All new SDK major versions releasing after July 2022 will default to regional. New SDK major versions might remove this setting and use regional behavior. To reduce future impact regarding this change, we recommend you start using regional in your application when possible.

I'll also note that 1.18.69 is an extremely old version. The latest v1 version is 1.33.1. Also we highly recommend migrating to v2 if possible.

Converting this to a Q&A discussion as it is the expected behavior and not a bug.

from aws-cli.