From 1d1b1a983ddeb57b7996d861be8aed5c727347ff Mon Sep 17 00:00:00 2001 From: Andrew Asseily Date: Thu, 16 Jul 2026 14:23:16 -0400 Subject: [PATCH] Add the issuer domain for EUSC --- .changes/next-release/bugfix-sso-31940.json | 5 +++++ awscli/customizations/sso/resolve.py | 1 + tests/unit/customizations/sso/test_resolve.py | 2 ++ 3 files changed, 8 insertions(+) create mode 100644 .changes/next-release/bugfix-sso-31940.json diff --git a/.changes/next-release/bugfix-sso-31940.json b/.changes/next-release/bugfix-sso-31940.json new file mode 100644 index 000000000000..7cacf8a11045 --- /dev/null +++ b/.changes/next-release/bugfix-sso-31940.json @@ -0,0 +1,5 @@ +{ + "type": "bugfix", + "category": "``sso``", + "description": "Fix SSO login failure in the EUSC partition by adding the issuer domain ``identitycenter.amazonaws.eu`` to the SSO start URL resolver allowlist." +} diff --git a/awscli/customizations/sso/resolve.py b/awscli/customizations/sso/resolve.py index 442e8a659657..a2e06ec43960 100644 --- a/awscli/customizations/sso/resolve.py +++ b/awscli/customizations/sso/resolve.py @@ -37,6 +37,7 @@ _AWS_OWNED_EXACT = ( 'identitycenter.amazonaws.com', 'identitycenter.amazonaws.com.cn', + 'identitycenter.amazonaws.eu', ) _REGION_PATTERNS = ( diff --git a/tests/unit/customizations/sso/test_resolve.py b/tests/unit/customizations/sso/test_resolve.py index 5ad2e45167d3..aac173ab9102 100644 --- a/tests/unit/customizations/sso/test_resolve.py +++ b/tests/unit/customizations/sso/test_resolve.py @@ -47,6 +47,7 @@ class TestIsAwsOwnedDomain: 'ssoins-abc123.portal.cn-north-1.app.amazonwebservices.com.cn', 'ssoins-abc123.eusc-de-east-1.portal.amazonaws.eu', 'ssoins-abc123.portal.eusc-de-east-1.api.amazonwebservices.eu', + 'identitycenter.amazonaws.eu', ], ) def test_aws_owned_returns_true(self, hostname): @@ -112,6 +113,7 @@ def test_extracts_region(self, hostname, expected_region): 'd-abc123.awsapps.cn', 'identitycenter.amazonaws.com', 'identitycenter.amazonaws.com.cn', + 'identitycenter.amazonaws.eu', 'aws.mycompany.com', ], )