AWS First Steps
LanguageEnglish
Region expansion

AWS improves regional resiliency for root user sign-in

AWS now serves root user sign-in across US East (N. Virginia), US East (Ohio), and US West (Oregon), distributing sign-in traffic across all three Regions. This reduces reliance on US East (N. Virginia) and improves resiliency during service disruptions.

AWS now offers root user sign-in across US East (N. Virginia), US East (Ohio), and US West (Oregon), distributing sign-in traffic to reduce dependency on US East (N. Virginia) and improve resilience during service disruptions. AWS automatically routes root user sign-ins to these supported regions without requiring region selection or method changes. This enhancement is available for all AWS accounts, with CloudTrail logging ConsoleLogin events in the region that handled the sign-in request. Update monitoring and alerts to cover US East (N. Virginia), US East (Ohio), and US West (Oregon) for full visibility into root user sign-in activity.

Why it matters

This change enhances the availability and resiliency of root user sign-in, which is critical for AWS account administrators.

Read the original AWS announcement

Related articles and terms

Why the AWS Account Root User Is Dangerous - The Design Philosophy of Privilege Separation and Practical LockdownWe explain why the AWS root user holds privileges that cannot be restricted by IAM, list the operations only the root user can perform, cover MFA setup methods, and describe the lockdown strategy using Organizations' centralized root access management.Amazon CognitoA service that provides authentication, authorization, and user management for web and mobile applicationsImplementing User Authentication - Building a Secure Authentication Foundation with CognitoLearn how to design and implement a user authentication foundation using Amazon Cognito, including building authentication flows with user pools, identity pools, and external identity provider federation.AWS IAMAn authentication and authorization service for securely managing access to AWS resourcesAWS IAM Identity CenterA single sign-on (SSO) service integrated with AWS Organizations that centrally manages access to multiple AWS accounts and business applications