Repository navigation
aws sso login --sso-session <your-china-sso-session> does not work anymore #10464
Description
Describe the bug
aws-cli/2.35.14 Python/3.14.6 Darwin/25.5.0 source/arm64
this version gives a Failed to resolve start URL: HTTP 404 on chinese urls in .aws/config.
Regression Issue
- Select this option if this issue appears to be a regression.
Expected Behavior
successful login
Current Behavior
aws: [ERROR]: An error occurred (Configuration): Failed to resolve start URL: HTTP 404
Reproduction Steps
in .aws/config:
[sso-session chinasession]
sso_start_url = https://start.home.awsapps.cn/directory/
sso_region = cn-northwest-1
sso_registration_scopes = sso:account:access
aws sso login --sso-session chinasession
Possible Solution
awscli/customizations/sso/resolve.py
this has
_AWS_OWNED_SUFFIXES = (
'.app.aws',
'.portal.amazonaws.com',
'.awsapps.com',
)
Adding '.awsapps.cn', solves it for me.
Additional Information/Context
No response
CLI version used
aws-cli/2.35.14 Python/3.14.6 Darwin/25.5.0 source/arm64
Environment details (OS name and version, etc.)
macos 26.5.1
Activity
AndrewAsseily commentedon Jul 2, 2026
Thanks for reporting this! This is a regression from our recent vanity URL support launch (https://aws.amazon.com/blogs/security/regional-routing-for-aws-access-portals-implementing-custom-vanity-domains-for-iam-identity-center/). We're working on a fix.
AndrewAsseily commentedon Jul 2, 2026
Hey @wjonkheijm, the fix should be included in today's release (version 2.35.15). Let us know if you run into any issues!
wjonkheijm commentedon Jul 6, 2026
no more issues. thanks for the quick fix.
github-actions commentedon Jul 6, 2026
This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.