CODEWITHSUNDEEP
amazon-web-servicesamazon-cognitoaws-regionsaws-credentials
cd123
cd123

Reputation: 13

Can the AWS Credentials from Cognito send request to other Regions?

I created a user pool and an identity pool in one region.

Can I use the credentials from the identity pool (accessKeyId, secretAccessKey, securityToken) to access data in another region?

Upvotes: 0

Views: 114

Answers (1)

Maurice
Maurice

Reputation: 13197

All IAM credentials are global credentials, so by default this would work.

You can limit this by applying policies with the aws:RequestedRegion condition - more on that in the docs.

These policies can be either applied to the role Cognito creates credentials for or via a Service Control Policy, that limits which regions the account has access to.

Upvotes: 2

Related Questions