aws sso login --sso-session <your-china-sso-session> does not work anymore

[wjonkheijm]

Describe the bug

aws-cli/2.35.14 Python/3.14.6 Darwin/25.5.0 source/arm64
this version gives a Failed to resolve start URL: HTTP 404 on chinese urls in .aws/config.

Regression Issue

• Select this option if this issue appears to be a regression.

Expected Behavior

successful login

Current Behavior

aws: [ERROR]: An error occurred (Configuration): Failed to resolve start URL: HTTP 404

Reproduction Steps

in .aws/config:
[sso-session chinasession]
sso_start_url = https://start.home.awsapps.cn/directory/
sso_region = cn-northwest-1
sso_registration_scopes = sso:account:access

aws sso login --sso-session chinasession

Possible Solution

awscli/customizations/sso/resolve.py
this has
_AWS_OWNED_SUFFIXES = (
'.app.aws',
'.portal.amazonaws.com',
'.awsapps.com',
)

Adding '.awsapps.cn', solves it for me.

Additional Information/Context

No response

CLI version used

aws-cli/2.35.14 Python/3.14.6 Darwin/25.5.0 source/arm64

Environment details (OS name and version, etc.)

macos 26.5.1

[AndrewAsseily]

Thanks for reporting this! This is a regression from our recent vanity URL support launch (https://aws.amazon.com/blogs/security/regional-routing-for-aws-access-portals-implementing-custom-vanity-domains-for-iam-identity-center/). We're working on a fix.

[AndrewAsseily]

Hey @wjonkheijm, the fix should be included in today's release (version 2.35.15). Let us know if you run into any issues!