AWS IAM identity federation arrives in the European Sovereign Cloud

AWS extended IAM identity federation to its European Sovereign Cloud, letting workloads running in the Germany Region authenticate to external services using short-lived JSON Web Tokens rather than long-lived static credentials. Short-lived JWTs reduce the blast radius of credential leakage and align with zero-trust practices, and bringing them to the Sovereign Cloud removes a practical gap that could have forced customers to compromise on either sovereignty or modern auth.

The AWS European Sovereign Cloud is an independent, EU-located cloud engineered to keep data and operations within European jurisdiction — a response to intensifying regulatory pressure around where and how European data is processed. Identity federation is a foundational capability; without it, integrating sovereign-cloud workloads with external identity providers and services is clumsy.

Strategically, the release is another brick in AWS's sovereignty wall this week, alongside in-country OpenAI inference in India and new infrastructure in Israel. The pattern is clear: AWS is racing to make its sovereign and regional offerings functionally equivalent to its mainline cloud so that compliance-bound customers don't have to give up features to satisfy regulators.

The competitive stakes are European enterprise and public-sector accounts wary of US cloud dependence, where Microsoft and Google are also building sovereign options and local players like Mistral pitch home-grown alternatives. Watch how completely the Sovereign Cloud reaches feature parity and whether European regulators accept it as sufficient for the most sensitive workloads.