Skip to main content

Amazon Security Token Service Now Supports Internet Protocol version 6 (IPv6)

Posted on: Nov 20, 2025

Amazon Security Token Service (STS) now supports Internet Protocol version 6 (IPv6) addresses via new dual-stack endpoints. You can connect to STS over the public internet using IPv6, IPv4, or dual-stack (both IPv4 and IPv6) clients. Dual-stack support is also available when you access STS endpoints privately from your Amazon Virtual Private Cloud (VPC) using Amazon PrivateLink, allowing you to invoke STS APIs without traversing the public internet.

This capability is available in Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. To get started, configure your STS client to use the new dual-stack endpoints using the configuration instructions in the Amazon IAM User Guide.