Engineers are currently investigating the issue.
Summary:
When looking at Last/Current login IP’s for users as well as the Last access report the IP addresses shown are ones for AWS and not the end user. This only started to occur in May 2026 as far as I can see.
Expected Behavior:
Admins are expecting this to be the IP of the user and not of the AWS servers.
Steps to Reproduce:
- Login as a user to canvas.
- As an admin go to the users page and look at the login for the user.
- See that the IP address for the current login belongs to AWS.
- Go to account setting and reports.
- Generate the Last user access report and see that the IP provided is the same as the login UI/API.
