# AWS DataSync adds short-lived credentials for Google and Azure transfers

_Published Wednesday, November 4, 2026 at 5:45 PM EST · Infrastructure, Security · Latest · Tier 2 — Notable_

AWS has added OpenID Connect authentication to DataSync Enhanced mode for Google Cloud Storage and Microsoft Azure Blob Storage. The feature uses an AWS Identity and Access Management role to obtain short-lived credentials from Google Cloud or Microsoft Entra ID and refresh them automatically.

The change lets customers transfer data without long-term HMAC keys or SAS tokens, supporting security policies that prohibit those credentials. Customers configure an IAM role through the AWS CLI, API or CloudFormation. Availability covers all AWS Regions that support DataSync Enhanced mode.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/11/datasync-enhanced-oidc-google-azure/)

---
Canonical: https://techandbusiness.org/newswire/HmrmZYICE88TTmKf4BSM6m
Published: 2026-11-04T22:45:47.874Z
Story chronology: 2026-11-04T08:00:00.000Z
Retrieved: 2026-11-05T01:50:51.865Z
Publisher: Tech & Business (techandbusiness.org)