Skip to content

Generating regional STS endpoints to allow for default EBS encryption in opt-in regions #284

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 6 commits into from
Feb 4, 2025
Merged

Generating regional STS endpoints to allow for default EBS encryption in opt-in regions #284

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
724e5fb
Moving assume_role method to process_enable_ebs_encryption_by_default…
boueya Jan 24, 2025
47960b1
Merge branch 'aws-samples:main' into ebs_sts_regional_endpoint
boueya Jan 31, 2025
4c0947d
Using AWS_STS_REGIONAL_ENDPOINTS env variable instead of generating r…
boueya Feb 4, 2025
93021cd
Merge branch 'aws-samples:main' into ebs_sts_regional_endpoint
boueya Feb 4, 2025
ffad75b
Adding entry to changelog and updating table of contents.
boueya Feb 4, 2025
8c38f62
Resolving linting issue W293
boueya Feb 4, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,9 @@
## Table of Contents<!-- omit in toc -->

- [Introduction](#introduction)
- [2025-02-04](#2025-02-04)
- [2025-01-21](#2025-01-21)
- [2025-01-08](#2025-01-08)
- [2024-09-18](#2024-09-18)
- [2024-08-22](#2024-08-22)
- [2024-07-17](#2024-07-17)
Expand Down Expand Up @@ -64,6 +67,10 @@ All notable changes to this project will be documented in this file.

- Added [Bedrock](aws_sra_examples/solutions/genai/bedrock_org) solution to deploy the sra-bedrock-org solution for GenAI deep-dive Bedrock capability one security controls. See https://github.com/aws-samples/aws-security-reference-architecture-examples (sra-1u3sd7f8n)

### Updated<!-- omit in toc -->

- Updated [EC2 Default EBS Encryption](aws_sra_examples/solutions/ec2/ec2_default_ebs_encryption) solution with STS environment variable to enable enforcement in opt-in regions.

## 2025-01-21

### Updated<!-- omit in toc -->
Expand Down
3 changes: 3 additions & 0 deletions aws_sra_examples/solutions/ec2/ec2_default_ebs_encryption/lambda/src/app.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,6 +76,9 @@ def assume_role(role: str, role_session_name: str, account: str = None, session:
Returns:
Session object for the specified AWS account
"""
# set regional endpoint environment variable to account for potential opt-in regions
os.environ["AWS_STS_REGIONAL_ENDPOINTS"] = "regional"

if not session:
session = boto3.Session()
sts_client: STSClient = session.client("sts", config=BOTO3_CONFIG)
Expand Down