Specify global endpoint and signature region for other partitions

[workeitel]

So far the global endpoint had us-east-1 for normal partition
hard-coded and it did not work in other partitions like China or us-gov.

#3192

Route53 endpoint pattern (source)

Partition	Endpoint	Region
aws	route53.amazonaws.com	us-east-1
aws-cn	route53.amazonaws.com.cn	cn-northwest-1

IAM endpoint pattern (source)

Partition	Endpoint	Region
aws	iam.amazonaws.com	us-east-1
aws-cn	iam.cn-north-1.amazonaws.com.cn	cn-north-1
aws-us-gov	iam.us-gov.amazonaws.com	us-gov-west-1

testing

script:

var iam_aws = new AWS.IAM({ region: 'me-south-1', credentials: creds_aws });
iam_aws.listRoles(function(err, data) { console.log({ p: 'aws', data: data, err: err }); });
var route53_aws = new AWS.Route53({ region: 'me-south-1', credentials: creds_aws });
route53_aws.listHostedZones(function(err, data) { console.log({ p: 'aws', data: data, err: err }); });

var iam_aws_cn = new AWS.IAM({ region: 'cn-northwest-1', credentials: creds_aws_cn });
iam_aws_cn.listRoles(function(err, data) { console.log({ p: 'aws-cn', data: data, err: err }); });
var route53_aws_cn = new AWS.Route53({ region: 'cn-north-1', credentials: creds_aws_cn });
route53_aws_cn.listHostedZones(function(err, data) { console.log({ p: 'aws-cn', data: data, err: err }); });

var iam_aws_us_gov = new AWS.IAM({ region: 'us-gov-east-1', credentials: creds_aws_us_gov });
iam_aws_us_gov.listRoles(function(err, data) { console.log({ p: 'aws-us-gov', data: data, err: err }); });
var route53_aws_us_gov = new AWS.Route53({ region: 'us-gov-east-1', credentials: creds_aws_us_gov });
route53_aws_us_gov.listHostedZones(function(err, data) { console.log({ p: 'aws-us-gov', data: data, err: err }); });

before:

{
  p: 'aws-cn',
  err: Error: getaddrinfo ENOTFOUND iam.cn-northwest-1.amazonaws.com.cn
      at GetAddrInfoReqWrap.onlookup [as oncomplete] (dns.js:66:26) {
    errno: -3008,
    code: 'NetworkingError',
    syscall: 'getaddrinfo',
    hostname: 'iam.cn-northwest-1.amazonaws.com.cn',
    region: 'cn-northwest-1',
    retryable: true,
    time: 2020-05-24T16:46:11.006Z
  }
}
{
  p: 'aws-us-gov',
  err: InvalidClientTokenId: The security token included in the request is invalid
      ...
      at Request.callListeners (/Volumes/unix/aws-sdk-js/lib/sequential_executor.js:116:18) {
    code: 'InvalidClientTokenId',
    time: 2020-05-24T16:46:11.204Z,
    requestId: '0b8388dc-2ce9-40b1-85f4-40d25d5097eb',
    statusCode: 403,
    retryable: false,
    retryDelay: 57.79329267683981
  }
}
{
  p: 'aws-cn',
  err: Error: getaddrinfo ENOTFOUND route53.cn-north-1.amazonaws.com.cn
      at GetAddrInfoReqWrap.onlookup [as oncomplete] (dns.js:66:26) {
    errno: -3008,
    code: 'NetworkingError',
    syscall: 'getaddrinfo',
    hostname: 'route53.cn-north-1.amazonaws.com.cn',
    region: 'cn-north-1',
    retryable: true,
    time: 2020-05-24T16:46:11.244Z
  }
}
{ p: 'aws', err: null }
{
  p: 'aws-us-gov',
  err: SignatureDoesNotMatch: Credential should be scoped to a valid region, not 'us-gov-east-1'. 
      ...
      at Request.callListeners (/Volumes/unix/aws-sdk-js/lib/sequential_executor.js:116:18) {
    code: 'SignatureDoesNotMatch',
    time: 2020-05-24T16:46:11.483Z,
    requestId: '85819340-2931-414c-931d-59c2996763a6',
    statusCode: 403,
    retryable: false,
    retryDelay: 94.41183963355235
  }
}
{ p: 'aws', err: null }

after:

{ p: 'aws', err: null }
{ p: 'aws-us-gov', err: null }
{ p: 'aws', err: null }
{ p: 'aws-us-gov', err: null }
{ p: 'aws-cn', err: null }
{ p: 'aws-cn', err: null }

Checklist

• npm run test passes
• changelog is added, npm run add-change

[aws-sdk-js-automation]

AWS CodeBuild CI Report

• CodeBuild project: sdk-v2-github
• Commit ID: 7b98622
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[AllanZhengYP]

Very solid PR. It's a good start. I have a few questions in the comment

[AllanZhengYP]

signingRegion can be applicable for non-global regions right?

[workeitel]

If the service is non-global the signingRegion should be equal to the region passed to the client. Either the detected region or the explicitly specified one.

[AllanZhengYP]

No need to fix in this PR but we need to expost signingRegion to the client config later.

[aws-sdk-js-automation]

AWS CodeBuild CI Report

• CodeBuild project: sdk-v2-github
• Commit ID: f52d69a
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[github-actions]

This PR has not received a response in 1 week. If you still think there is a problem, please leave a comment to avoid the PR from automatically closing.

[workeitel]

Hey bot! yes, the ticket is still important and all comments addressed. Please don't auto close it

[zxkane]

Thanks for this PR. It also resolves #3279 and #3296.

[AllanZhengYP]

@workeitel Awesome! I'm going to approve this PR. Can you add the changelog to the PR?

[aws-sdk-js-automation]

AWS CodeBuild CI Report

• CodeBuild project: sdk-v2-github
• Commit ID: 4e60d66
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[AllanZhengYP]

Awesome! Thanks for the work!