Comments (3)
I think this is expected behaviour. IAM will always reach out to the global sts.amazonaws.com
(which is in us-east-1
). The region parameter is for API operations after IAM auth has completed.
Instead you have to specify the endpoint URL I think? There's a similar issue with some more context / solutions here: #4370
from aws-cli.
apparently
export AWS_STS_REGIONAL_ENDPOINTS=regional
is what you need according to that issue.
from aws-cli.
Thanks for reaching out. What @arianvp mentioned above is correct, and here is the documentation for that environment variable: https://docs.aws.amazon.com/sdkref/latest/guide/feature-sts-regionalized-endpoints.html
Noted in the documentation is the following:
All new SDK major versions releasing after July 2022 will default to
regional
. New SDK major versions might remove this setting and useregional
behavior. To reduce future impact regarding this change, we recommend you start usingregional
in your application when possible.
I'll also note that 1.18.69 is an extremely old version. The latest v1 version is 1.33.1. Also we highly recommend migrating to v2 if possible.
Converting this to a Q&A discussion as it is the expected behavior and not a bug.
from aws-cli.
Related Issues (20)
- Alpine 3.20 release HOT 10
- cannot import name 'SSOTokenFetcher' from 'botocore.utils' (C:\Python\Python310\lib\site-packages\botocore\utils.py) HOT 1
- libpython3.11.so.1.0: pwritev2: symbol not found HOT 3
- Duplicate Example headings - sync HOT 2
- Segmentation Fault on ArmV8 with Crypto Extensions HOT 2
- Inaccurate AWS Bedrock User Guide HOT 3
- ec2 subcommand fails when given --tag-specifications HOT 1
- aws cli glue HOT 2
- ec2 modify-instance-attribute not working with binary file (fileb://) HOT 2
- 'aws configure get' should support sso-session configurations HOT 3
- trailing semicolon in login URL in aws sso login not friendly for recognization or click HOT 3
- sqs commands seem to ignore `AWS_ENDPOINT_URL` HOT 4
- aws cli can't connect to any region/endpoint and throws Bad file descriptor HOT 2
- `aws sesv2 list-contacts` returns an empty result when filtering with `FilteredStatus=OPT_OUT` HOT 7
- Health uses invalid endpoints when region is set HOT 3
- `SSL validation` error occurs when uploading large (500GB) file HOT 2
- `AWS_USE_FIPS_ENDPOINT` should handle non-existing fips endpoints HOT 2
- Upgrade GLIBC > 2.34 on ARM64 image to support IAM Roles Anywhere Credential Helper HOT 2
- delete stack doesn't have --deletion-mode option HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-cli.