3 ms·

Good advice, though AWS still has some services that don't work completely independently. Cloudfront, because of certificates. Route53. The control API for IAM

by tyingq 5y ago

Good advice, though AWS still has some services that don't work completely independently. Cloudfront, because of certificates. Route53. The control API for IAM (adding/removing roles, etc). And I wish they didn't have global-looking endpoints (like https://sts.amazonaws.com https://sts.amazonaws.com) that aren't really global or resilient.

ranman 5y ago
STS will let you use regional endpoints now, right?
- tyingq 5y ago
  Yes. It's just that the "global endpoint" is misleading. They don't repoint it if it fails. It really shouldn't exist given that's how it functions.