# AWS adds temporary credential exchange across cloud partitions

_Published Monday, November 9, 2026 at 5:09 PM EST · Security, Infrastructure · Latest · Tier 2 — Notable_

AWS says its Security Token Service now lets workloads exchange their identity in one AWS partition for temporary credentials in another, removing the need to store long-term credentials for that access. Partitions group AWS Regions and maintain independent identity systems.

Workloads request a short-lived token locally and exchange it for credentials in the destination partition. Organizations can restrict role access and audit token use through CloudTrail in both partitions.

The feature carries no additional charge and is available across commercial, GovCloud, China and European Sovereign Cloud regions. Organizations with public key infrastructure can alternatively use IAM Roles Anywhere.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/11/aws-sts-cross-partition)

---
Canonical: https://techandbusiness.org/newswire/3hDNlB7Y9UMv81k73EsBZj
Published: 2026-11-09T22:09:46.871Z
Story chronology: 2026-11-09T20:03:00.000Z
Retrieved: 2026-11-10T00:16:28.509Z
Publisher: Tech & Business (techandbusiness.org)