How to use Regional AWS STS endpoints
Security Blog
This article explains how to use Regional AWS Security Token Service (AWS STS) endpoints instead of the global legacy endpoint to improve resiliency and performance.
Specifically, the article covers:
- Difference between global legacy and Regional AWS STS endpoints
- Benefits of using Regional AWS STS endpoints (resiliency, isolation, performance)
- Configuring Regional AWS STS endpoints for AWS CLI and SDKs
- Using VPC endpoints with AWS STS
- Logging and analyzing AWS STS requests using CloudTrail, CloudWatch Logs, and Athena
- Conclusion recommending the use of Regional AWS STS endpoints
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Apr 18
2025
2025
AWS STS global endpoint now serves your requests locally in regions enabled by default
Mar 14
2024
2024
Streamline access to most used AWS services using VPC Endpoints
Mar 5
2024
2024
How to access AWS resources from Microsoft Entra ID tenants using AWS Security Token Service
Mar 6
2024
2024
Effectively track AWS data transfer costs for cross-region Amazon EBS Snapshot Copy
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.