eu-south-2

Session tokens from the global AWS Security Token Service (STS) endpoint (https://sts.amazonaws.com) are not valid in the AWS Regions you 
enable for your account.
If you use the global STS endpoint, you can change token compatibility in Account settings of IAM console after enabling AWS Regions.

• Spain: aws account enable-region --region-name eu-south-2

See also

• Amazon regions, Cross-region, Global View, aws account disable-region