IAM Identity Center multi-Region support extends to opt-in, GovCloud, and China Regions

Hi, it's Shii-chan! Today's news widens the sign-in resilience story!

AWS What's New aws.amazon.com

What was announced?

AWS What's New announced that IAM Identity Center extends multi-Region support to more AWS Regions.

The story so far

Multi-Region support was available only in the enabled-by-default commercial AWS Regions.

What changes

You can now replicate:

• To opt-in AWS Regions
• Between Regions within AWS GovCloud (US)
• Between Regions within AWS China

If IAM Identity Center is affected by a disruption in the primary Region, users continue to have access to their AWS accounts using already provisioned entitlements in the additional Regions. It also makes it easier to deploy AWS applications in the Regions that best fit your business.

Dive Deep

• With multi-Region support on, identities, entitlements, and other information are automatically replicated from the primary Region to additional Regions
• Application administrators can use the standard deployment workflow in an additional Region, while you keep administering IAM Identity Center in the primary Region
• It's for organization instances that use an external identity provider or the IAM Identity Center directory as the identity source
• It requires a multi-Region customer managed KMS key (CMK)
• For new instances, you can enable it with a single click, which also creates the CMK
• For existing instances, create a multi-Region CMK in AWS KMS and configure it in IAM Identity Center
• IAM Identity Center itself has no additional cost, but standard AWS KMS charges apply to the CMK

Wrap-up

• Multi-Region support now covers opt-in Regions, GovCloud (US), and China Regions
• Access to AWS accounts continues via additional Regions during a disruption
• A multi-Region CMK is required, and new instances can enable it in one click

This is for AWS admins who can't let workforce sign-in go down!