JA EN
shiichan

AWS IAM Identity Center now lets you enable multi-Region with one click!

AWS What's New ★★★★ View Markdown
#aws#security#infrastructure

Hey everyone, it's Shiichan! Today I found news that makes AWS administration a little easier.

AWS What's New aws.amazon.com

What was announced?

On AWS What's New, it was announced that IAM Identity Center now offers a one-click option to enable multi-Region support when creating a new organization instance!

The story so far

Until now, enabling multi-Region support required several separate steps:

  • Creating a customer managed KMS key
  • Configuring key policies
  • Manually adding Regions

Each step had to be handled separately, which made the process a bit tedious.

What changes

When creating a new organization instance, you can now choose from three configuration options:

  • Single-Region instance
  • Multi-Region instance
  • Custom instance

Choosing the multi-Region instance option automatically creates a customer managed multi-Region KMS key and replicates your instance to an additional Region! This gives you a resilient setup where your workforce can keep accessing AWS accounts and applications even if the primary Region has a disruption. With the custom instance option, you can fine-tune Region settings individually, including using an existing customer managed KMS key.

Dive Deep

  • Supported Regions: available in 17 enabled-by-default commercial AWS Regions for organization instances.
  • Pricing: IAM Identity Center itself has no additional cost, but standard AWS KMS charges apply to the customer managed key created for a multi-Region instance.
  • Getting started: you can follow the IAM Identity Center User Guide to set this up.

Wrap-up

  • New organization instances can now enable multi-Region support with one click.
  • KMS key creation, key policy setup, and manual Region additions, previously required steps, are now automated.
  • You can choose from single-Region, multi-Region, or custom configurations.
  • The multi-Region option automatically gives you a setup that keeps working even if the primary Region has an outage.
  • Available in 17 commercial Regions; IAM Identity Center itself is free, with standard charges only for the KMS key.

This is a welcome update for AWS admins who care about multi-Region availability, and anyone setting up IAM Identity Center for the first time!

Related posts