AWS SDKs include endpoints for secret region partitions(github.com)
github.com
AWS SDKs include endpoints for secret region partitions
https://github.com/aws/aws-sdk-js-v3/blob/c96f35f972c44706a391bb07e0a897e73b8d6dfe/clients/client-cloudfront/endpoints.ts#L4
7 comments
https://aws.amazon.com/blogs/publicsector/announcing-the-new...
Oh the irony... Not so secret when you blog about it.
Why is this news worthy? The regions have been available since late 2018
In addition to the three partitions (global, china and us gov) documented at https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-n... AWS sdks include two additional partitions: us-iso and us-iso-b, which have endpoints in the "c2s.ic.gov" and "sc2s.sgov.gov" dns hierarchy, respectively.
Reposted with a clearer title from https://news.ycombinator.com/item?id=23297872 with permission.
Reposted with a clearer title from https://news.ycombinator.com/item?id=23297872 with permission.
The OP posted the same link 9 days ago.. And it's not really noteworthy, as there is nothing secret about secret region partitions.
So how'd amazon get control of those .gov domains?
The GSA publishes their regulations for registering .gov domains: https://www.gsa.gov/policy-regulations/policy/information-in... . In short, an authorized representative of the agency (head or CIO) needs to send a letter: https://home.dotgov.gov/registration/authorization-templates... . It's safe to assume that, since those partitions were created as part of a federal contract, those letters were a normal part of the buildout.