--- title: AWS IAM identity federation to external services is now... description: AWS IAM outbound identity federation is now available in the AWS European Sovereign Cloud (Germany) Region, letting workloads there exchange IAM credentials... canonical: https://daily.dev/posts/aws-iam-identity-federation-to-external-services-is-now-available-in-aws-european-sovereign-cloud-re-al76qpqq6 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: AWS IAM identity federation to external services is now available in AWS European Sovereign Cloud Region | daily.dev og:description: AWS IAM outbound identity federation is now available in the AWS European Sovereign Cloud (Germany) Region, letting workloads there exchange IAM credentials... og:url: https://daily.dev/posts/aws-iam-identity-federation-to-external-services-is-now-available-in-aws-european-sovereign-cloud-re-al76qpqq6 og:image: https://api.daily.dev/og/posts/aL76qpQQ6.png og:image:alt: AWS IAM identity federation to external services is now available in AWS European Sovereign Cloud Region og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # AWS IAM identity federation to external services is now available in AWS European Sovereign Cloud Region **[AWS](https://daily.dev/sources/aws)** · 2 min read · 0 upvotes · 0 comments ## Summary AWS IAM outbound identity federation is now available in the AWS European Sovereign Cloud (Germany) Region, letting workloads there exchange IAM credentials for short-lived, cryptographically signed JWTs to authenticate with third-party cloud providers, SaaS providers, and self-hosted applications. This removes the need for long-term credentials, and administrators can enforce token lifetime, audience, and signing algorithm via IAM policies, with usage auditable through CloudTrail. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Is AWS IAM outbound identity federation available in the AWS European Sovereign Cloud region? Yes, AWS IAM outbound identity federation is now available in the AWS European Sovereign Cloud (Germany) Region. Workloads there can exchange AWS IAM credentials for short-lived, cryptographically signed JSON Web Tokens to authenticate with external cloud providers, SaaS providers, and self-hosted applications without long-term credentials. _Teams building sovereign-region AWS architectures can track infrastructure updates like this one on daily.dev._ ### How can I let an AWS workload authenticate to a third-party SaaS service without storing long-term credentials? AWS IAM outbound identity federation lets a workload exchange its IAM credentials for a short-lived, cryptographically signed JWT that external services can validate. The token carries context about the AWS workload for fine-grained access control, and administrators set lifetime, audience, and signing algorithm via IAM policies while auditing usage through CloudTrail. _Developers wiring AWS workloads into external services can follow authentication patterns like this on daily.dev._ ## Similar posts on daily.dev - [AWS IAM Identity Center is now available in AWS European Sovereign Cloud \(Germany\) Region](https://daily.dev/posts/aws-iam-identity-center-is-now-available-in-aws-european-sovereign-cloud-germany-region-u8weqylyi) · AWS · 2 upvotes · 0 comments - [AWS flips switch on Euro cloud as sovereignty fears mount](https://daily.dev/posts/aws-flips-switch-on-euro-cloud-as-sovereignty-fears-mount-4ixvzmp31) · The Register · 0 upvotes · 0 comments - [Amazon S3 Access Grants are now available in the AWS European Sovereign Cloud \(Germany\) Region](https://daily.dev/posts/amazon-s3-access-grants-are-now-available-in-the-aws-european-sovereign-cloud-germany-region-cznli9bbo) · AWS · 0 upvotes · 0 comments - [Simplify access to external services using AWS IAM Outbound Identity Federation](https://daily.dev/posts/simplify-access-to-external-services-using-aws-iam-outbound-identity-federation-kfg5clfky) · AWS · 0 upvotes · 0 comments --- Tags: [#aws](https://daily.dev/tags/aws), [#authentication](https://daily.dev/tags/authentication), [#aws-iam](https://daily.dev/tags/aws-iam) [View this post on daily.dev](https://daily.dev/posts/aws-iam-identity-federation-to-external-services-is-now-available-in-aws-european-sovereign-cloud-re-al76qpqq6) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"AWS IAM identity federation to external services is now available in AWS European Sovereign Cloud Region","url":"https://daily.dev/posts/aws-iam-identity-federation-to-external-services-is-now-available-in-aws-european-sovereign-cloud-re-al76qpqq6","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/aws-iam-identity-federation-to-external-services-is-now-available-in-aws-european-sovereign-cloud-re-al76qpqq6"},"datePublished":"2026-08-19T00:08:24.255Z","dateModified":"2026-09-14T08:36:57.681Z","description":"AWS IAM outbound identity federation is now available in the AWS European Sovereign Cloud (Germany) Region, letting workloads there exchange IAM credentials...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e82c8cceed8771f89f06dfc50fa9305d?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e82c8cceed8771f89f06dfc50fa9305d?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"AWS","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"AWS","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/aws","url":"https://daily.dev/sources/aws"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/aws-iam-identity-federation-to-external-services-is-now-available-in-aws-european-sovereign-cloud-re-al76qpqq6","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"aws,authentication,aws-iam","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"AWS","item":"https://daily.dev/sources/aws"},{"@type":"ListItem","position":3,"name":"AWS IAM identity federation to external services is now available in AWS European Sovereign Cloud Region"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/aws-iam-identity-federation-to-external-services-is-now-available-in-aws-european-sovereign-cloud-re-al76qpqq6#faq","mainEntity":[{"@type":"Question","name":"Is AWS IAM outbound identity federation available in the AWS European Sovereign Cloud region?","acceptedAnswer":{"@type":"Answer","text":"Yes, AWS IAM outbound identity federation is now available in the AWS European Sovereign Cloud (Germany) Region. Workloads there can exchange AWS IAM credentials for short-lived, cryptographically signed JSON Web Tokens to authenticate with external cloud providers, SaaS providers, and self-hosted applications without long-term credentials. Teams building sovereign-region AWS architectures can track infrastructure updates like this one on daily.dev."}},{"@type":"Question","name":"How can I let an AWS workload authenticate to a third-party SaaS service without storing long-term credentials?","acceptedAnswer":{"@type":"Answer","text":"AWS IAM outbound identity federation lets a workload exchange its IAM credentials for a short-lived, cryptographically signed JWT that external services can validate. The token carries context about the AWS workload for fine-grained access control, and administrators set lifetime, audience, and signing algorithm via IAM policies while auditing usage through CloudTrail. Developers wiring AWS workloads into external services can follow authentication patterns like this on daily.dev."}}]} ```