Setting up AWS Verified Access
summary
Sets up an AWS Verified Access instance, connects it to IAM Identity Center as the trust provider, and creates a group policy that explicitly allows user test@example.com only if they belong to both finance and engineering groups. Adds an endpoint that gives a vanity DNS name mapped via CNAME to an ALB, uses security group referencing to ensure only AVA can reach the ALB, and optionally signs identity context in HTTP headers or uses a browser extension for device posture. The demo completes in minutes.
AI-written summary · about
chapters (5)
- 0:00Introduction to AWS Verified Access
- 5:28Setting up the instance
- 9:27Configuring access groups and policies
- 12:07Publishing an application
- 17:53End-user access and summary
related talks
59mProvably secure authorization
44mAchieve your identity, security, and compliance goals on
55mUsers and their data: Modern access and audit patterns on AWS
23mGetting started with identity on AWS
47mSecure access to AWS with ZTNA 2.0
18mEnhance application security at the edge with AWS
17mBuild, deploy, and manage your applications securely with AWS
25mGetting started with AWS Identity Services