AWS IAM outbound identity federation now supports interface VPC endpoints for OIDC discovery
AWS IAM ยท 2026-09-25
Actions
Technical Details
| Regions | all commercial AWS Regions, AWS GovCloud (US) Regions, and China Regions |
|---|---|
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update IAM configurations to utilize VPC endpoints for OIDC discovery, ensuring workloads in VPCs without internet access can still verify JWTs securely.
For Platform Teams
Integrate VPC endpoints for OIDC discovery into your architecture to simplify secure access to external services and reduce operational toil associated with managing long-lived credentials.
For Executives
Evaluate adopting VPC endpoints for OIDC discovery to enhance security by keeping verification key retrieval traffic within the AWS network, meeting stringent network security requirements for VPCs with restricted internet access.
Source
Related AWS IAM Updates
- CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center (2026-09-14)
- AWS Builder ID adds recovery options and multi-factor authentication for third-party logins (2026-09-08)
- IAM Roles Anywhere now provides a Java plugin for the AWS SDK (2026-08-25)
- AWS IAM now supports 20 managed policies per role by default (2026-08-19)
- IAM Policy Autopilot now supports Terraform plan files (2026-08-18)