STSEndpointOverride
Specifies a custom endpoint for the AWS STS (Security Token Service). This can be used when connecting to a non-standard or regional STS endpoint.
Data Type
string
Default Value
""
Remarks
Use this property to specify a custom AWS Security Token Service (STS) endpoint, such as a VPC endpoint configured through AWS PrivateLink. This is useful in restricted environments where direct internet access to AWS services is blocked, and communication must occur through private endpoints.
Examples of when to set this property:
- You're connecting from a secure on-premises network or datacenter with no internet access.
- You’ve configured VPC endpoints for STS in AWS and need the driver to communicate through these endpoints.
- The default endpoint (for example, https://sts.us-east-1.amazonaws.com) is not reachable due to firewall or network policies.
Notes:
- If no protocol is included, the driver assumes https://.
- If not specified, the default AWS STS endpoint is used.
- You must still ensure the VPC endpoint is reachable and properly configured on your network.
For example: STSEndpointOverride=vpce-123abc456defghij-sts.us-east-1.vpce.amazonaws.com.