AWS STS now supports cross-partition federation for AWS identities

AWS Security Token Service (STS) now supports cross-partition federation, enabling workloads to use IAM identities from one partition to access roles in another partition securely.

• Workloads exchange short-lived STS tokens for temporary credentials across partitions without long-term credentials
• Uses existing GetWebIdentityToken and AssumeRoleWithWebIdentity APIs for seamless integration
• Supports commercial AWS Regions, GovCloud (US), China Regions, and European Sovereign Cloud
• Enables consolidated security reporting, compliance auditing, and centralized operations tooling
• Available at no additional charge with full CloudTrail audit logging in both partitions

This launch improves security posture for organizations operating workloads across multiple AWS partitions by eliminating reliance on long-term credentials.