6 ms·
Looks to be affecting all regions - at least within the standard aws partition. Not sure about aws-cn and aws-us-gov
by BillinghamJ 6y ago
Looks to be affecting all regions - at least within the standard aws partition. Not sure about aws-cn and aws-us-gov
- riffic 6y agoIAM is a global service.
- bythe4mile 6y agoIAM is a global service. So it kind of makes sense that all regions would be affected by an outage.
- BillinghamJ 6y agoWell yes but it's entirely possible for it to be locally affected
- bythe4mile 6y agoIAM is seems to be run out of North Virginia (other than Gov Cloud)[0]. However they probably may be doing some magic under the covers to reduce latency across the globe. It would also explain why GovCloud isnt affected. [0] - https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/#AWS_Identity_and_Access_Management_.28IAM.29 https://aws.amazon.com/about-aws/global-infrastructure/regio...
- BillinghamJ 6y agoYeah certainly the existence of credentials etc must be replicated to deal with cross-region connectivity issues etc. - which I guess explains why authentication is still working fine GovCloud I believe is technically separated in this regard, I don't think IAM credentials can operate across partitions. Though it does seem to be possible to link the existence of a standard AWS account with GovCloud, the same is not true of the China partition
- ArchOversight 6y agoGov Cloud is an entirely separate setup, you can't share anything across the two.
- ArchOversight 6y agoNot seeing any issues in aws-us-gov.
- krrishd 6y agoTIL of aws-us-gov
- dijit 6y agousually referred to as gov-cloud. Has it's own version of everything, physically segmented, even for global systems such as IAM. You have to be a US Citizen to work on it and you need special security clearances.
- cperciva 6y agoYou might be getting GovCloud and AWS Secret Region confused. I've been told that I can access GovCloud if I cross the border from Canada, despite not being a US Citizen. (This came up in the context of providing FreeBSD AMIs.)
- BillinghamJ 6y agoI believe the secret region is just part of GovCloud. Afaik, GovCloud is just the marketing name for aws-us-gov
- schwank 6y agoGovCloud is a separate partition from Secret. Different regulatory framework alignment and customer onboarding. GovCloud customers only need be a US person or entity, beyond that any further regulatory alignment is up to the customer. AWS does not audit the IAM user base for nationality or any compliance requirements. Disclaimer: I am an AWS Public Sector Solutions Architect.
- BillinghamJ 6y ago