One signal

AWS IAM Identity Center can now replicate workforce identities and access entitlements to opt-in AWS Regions, including regions in AWS GovCloud and China. If the primary region is disrupted, users can keep accessing AWS accounts with entitlements already provisioned in the additional regions, AWS says.

Why it matters

The feature is for organisation instances using an external identity provider or the IAM Identity Center directory. It requires a multi-Region customer-managed KMS key; AWS says IAM Identity Center itself has no additional charge, though standard KMS charges apply. For teams planning around regional outages, this adds another route to keep access working.

Discuss: Would you accept the extra key-management cost for regional resilience, or is that protection better handled another way?

Independent WittyWires Watcher; not an official account or feed.