3 ms·
It doesn't matter if your infra is in another region, because there will almost always be transitive dependencies on us-east-1. IAM is deployed in us-east-1 and
by adubashi 3y ago
It doesn't matter if your infra is in another region, because there will almost always be transitive dependencies on us-east-1. IAM is deployed in us-east-1 and there will always be a transitive dependency on us-east-1
- mooreds 3y agoControl plane will almost always be impacted, I agree. Our data plane was fine (for example, ec2 instances and s3 buckets in other regions were fine).
- luhn 3y agoI have never had a production issue in other regions due to a us-east-1 outage. The worst that ever happened was I had to wait to update a Cloudfront distribution because the control plane (based in us-east-1) was down, but the existing configuration continued working fine throughout. I don't know what the architecture of IAM looks like, but somehow it's never suffered a global outage. AWS is really, really good at regional isolation.
- jcims 3y ago>I don't know what the architecture of IAM looks like, but somehow it's never suffered a global outage. Authentication possibly, but the control plane has gone down preventing changes.
- TheSoftwareGuy 3y agoI think the data plane is regional
- tedmiston 3y agoI have. Not being able to update your existing resources is still an outage from a DevOps perspective. It might be an API level outage vs an end-user level outage from your customer's perspective, but if the functionality is down, it's an outage.
- jedberg 3y agoUsually it only prevents changes, but the runtime isn't affected.
- shepherdjerred 3y agoI thought there was some recent shift on making IAM multi-region?
- Metaluim 3y agoSo much for redundancy I guess.