IAM Engineer: 2026-09-28

1. AWS IAM outbound identity federation now supports interface VPC endpoints for OIDC discovery

   AWS, 2026-09-25. Read, 2 min.

   AWS IAM outbound identity federation now supports interface VPC endpoints for the OIDC discovery APIs, so the discovery metadata and JWKS verification key endpoints can be reached through AWS PrivateLink without traffic crossing the public internet. Previously those endpoints were reachable only over the public internet, so a verifying workload in a VPC without internet access could not retrieve them.

   Why it matters for this role: Design token verification for internet-isolated workloads around an interface VPC endpoint for the STS OIDC discovery APIs, now available in all commercial, GovCloud (US), and China Regions.

IAM Engineer