In the AWS European Sovereign Cloud, customers can now exchange IAM credentials for cryptographically signed JSON Web Tokens to authenticate to third-party clouds or SaaS without long-term secrets. This feature helps meet stringent European sovereignty and security requirements.
Administrators can enforce fine-grained control of token issuance and verify token use through auditing, easing compliance challenges. This outbound identity federation mechanism provides a streamlined and secure method for trusted interactions beyond AWS boundaries while maintaining governance.
Source & further reading
AWS IAM identity federation to external services is now available in AWS European Sovereign Cloud Region ↗Source published 2026-08-18. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.