Something to remember, US-East-1 AWS always controls IAM. Always. No matter which region you’re hosting in. Some other things as well.

Ran into that in another outage where it was revealed that even if we WANTED to fail over to west 2 or the like, we couldn’t get in if IAM was affected in east.