aws-cdk-lib/aws-iam.ServicePrincipal: No Longer Translating Endpoints for GovCloud #31905
Closed
1 task done
Labels
@aws-cdk/aws-iam
Related to AWS Identity and Access Management
bug
This issue is a bug.
closed-for-staleness
This issue was automatically closed because it hadn't received any attention in a while.
p1
potential-regression
Marking this issue as a potential regression to be checked by team member
response-requested
Waiting on additional info and feedback. Will move to "closing-soon" in 7 days.
Describe the bug
I have a service sitting on CDK 2.140.0, works fine, when using service principal to allow our StateMachine to assume a role we created, ServicePrincipal properly uses the URI that is correct for Gov Cloud: "states.us-gov-west-1.amazonaws.com". After upgrading CDK, it stops translating "states.amazonaws.com" to the correct URI. Is this intentional? Do we need to update our code? This was a handy feature, getting the correct URI from service principal for our region, wanted to make sure it wasn't remove unintentionally.
Regression Issue
Last Known Working CDK Version
2.140.0
Expected Behavior
ServicePrincipal translates input to the correct URI for states in gov cloud.
Current Behavior
ServicePrincipal uses the commercial cloud URI for states.
Reproduction Steps
Create a role
This previously resulted in:
Now it results in:
Possible Solution
I admittedly haven't cracked the code, so not sure on this one.
Additional Information/Context
No response
CDK CLI Version
2.140.0
Framework Version
No response
Node.js Version
18.20.4
OS
Same regardless of OS
Language
TypeScript
Language Version
4.8.3
Other information
No response
The text was updated successfully, but these errors were encountered: