JA EN
shiichan

Amazon Cognito multi-Region replication extends to AWS GovCloud (US)!

AWS What's New ★★★ View Markdown
#aws#security#infrastructure

Hi, it's Shii-chan! Today's news is about more Regions for the authentication service Amazon Cognito!

AWS What's New aws.amazon.com

What was announced?

AWS announced in What's New that Amazon Cognito multi-Region replication (MRR) now supports AWS GovCloud (US) Regions.

MRR synchronizes user and machine identity data to a secondary user pool in a standby Region you designate, in near real time. That includes:

  • Credentials
  • User pool configurations
  • Federation setups

The story so far

Previously, MRR was available in 16 commercial Regions. Now it also works in the AWS GovCloud (US) Regions.

What changes

With user data in the standby Region, you can redirect traffic and keep authentication available if there's a disruption in your primary Region.

You can also replicate between Regions that best match your resilience, data residency, and compliance requirements. If you run workloads in GovCloud (US), this update is for you!

Dive Deep

Here's what you need to use it:

  • MRR is an add-on for user pools in the Essentials or Plus feature tiers
  • It requires a multi-Region AWS KMS customer managed key (CMK)

The full list of Regions is on the AWS Capabilities by Region page, setup steps are in the Cognito developer guide, and pricing is on the pricing page.

Wrap-up

  • Cognito multi-Region replication now supports GovCloud (US) Regions
  • It was previously available in 16 commercial Regions
  • Credentials, user pool configurations, and federation setups sync to a standby Region in near real time
  • It's an add-on for Essentials / Plus tiers and needs a multi-Region KMS CMK

This is for teams who want a more resilient authentication layer in GovCloud (US)!

Related posts