AWS IAM Identity Center extends multi-Region support to more AWS Regions

IAM Identity Center streamlines access management for employee identities across AWS accounts and applications by connecting once to AWS. Multi-Region support was previously available only in default commercial AWS Regions, but is now extended to AWS GovCloud (US) and AWS China Regions. When enabled, IAM Identity Center automatically replicates identities, entitlements, and other data from the primary Region to additional Regions. This ensures users can continue accessing AWS accounts with already provisioned entitlements if the primary Region fails. Application administrators can deploy applications to additional Regions using standard workflows while IAM Identity Center remains managed in the primary Region. Multi-Region support is available for organization instances using either an external identity provider or IAM Identity Center directories as identity sources, requiring multi-Region customer-managed KMS keys (CMKs). New instances can enable multi-Region support in one click, which also creates a CMK. For existing instances, you must create a multi-Region CMK in AWS KMS and configure it in IAM Identity Center. Standard AWS KMS charges apply for CMK storage and usage, while IAM Identity Center is provided at no additional cost.

Why it matters

IAM Identity Center integrates employee identities into AWS and simplifies access management. This update enhances resilience and deployment flexibility, particularly for users in government and China markets.