AWS SDKs include endpoints for secret region partitions

AWS SDKs include endpoints for secret region partitions(github.com)

13 points by ta20190717 6 years ago

joaofs 6 years ago |

https://aws.amazon.com/blogs/publicsector/announcing-the-new...

rafaelturk 6 years ago | |

Oh the irony... Not so secret when you blog about it.

klohto 6 years ago |

Why is this news worthy? The regions have been available since late 2018

ta20190717 6 years ago |

In addition to the three partitions (global, china and us gov) documented at https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-n... AWS sdks include two additional partitions: us-iso and us-iso-b, which have endpoints in the "c2s.ic.gov" and "sc2s.sgov.gov" dns hierarchy, respectively.

Reposted with a clearer title from https://news.ycombinator.com/item?id=23297872 with permission.

jafingi 6 years ago |

The OP posted the same link 9 days ago.. And it's not really noteworthy, as there is nothing secret about secret region partitions.

londons_explore 6 years ago |

So how'd amazon get control of those .gov domains?

ath0 6 years ago | |

The GSA publishes their regulations for registering .gov domains: https://www.gsa.gov/policy-regulations/policy/information-in... . In short, an authorized representative of the agency (head or CIO) needs to send a letter: https://home.dotgov.gov/registration/authorization-templates... . It's safe to assume that, since those partitions were created as part of a federal contract, those letters were a normal part of the buildout.