1개 답변
- 최신
- 최다 투표
- 가장 많은 댓글
4
I would take a look at this for some potential edge cases. In summary, you may need to allow us-east-1 and us-west-2 in addition to whatever regions your team is in since they host some of the global service endpoints (like IAM, Route 53, Global Accelerator, and a few others). For STS, I would use the regional endpoints if you aren't already.
답변함 2년 전
Good points. Thank you, Mike.