[tyingq]

Good advice, though AWS still has some services that don't work completely independently. Cloudfront, because of certificates. Route53. The control API for IAM (adding/removing roles, etc). And I wish they didn't have global-looking endpoints (like https://sts.amazonaws.com) that aren't really global or resilient.

[ranman]

STS will let you use regional endpoints now, right?

[tyingq]

Yes. It's just that the "global endpoint" is misleading. They don't repoint it if it fails. It really shouldn't exist given that's how it functions.