aws / aws/git-remote-codecommit

Using regional sts endpoint by default

Open
#35 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
289
Forks
40
PR merge metrics
No merged PRs in 30d

Description

Currently, GRC uses a global sts endpoint(sts.amazonaws.com).
AWS CLI v2 and major sdk use regional sts endpoint by default.
We need to configure `sts_regional_endpoints = regional` for aws profiles when using vpc endpoints on isolated subnets even if using AWS CLI v2.

```
[profile cross-account]
role_arn = arn:aws:iam::1234567890:role/cross-account
source_profile = default
region = us-west-2
sts_regional_endpoints = regional
```

AWS STS Regionalized endpoints
https://docs.aws.amazon.com/sdkref/latest/guide/feature-sts-regionalized-endpoints.html
> Note: All new SDK major versions will default to regional in the future.

> AWS CLI v2 Partial Default value is regional.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.