Verified Access with WAF and signed identity context now GA on AWS

Published on may 16, 2023

AWS has recently launched a new feature called “Verified Access” that is now generally available (GA) and provides support for AWS Web Application Firewall (WAF) and Signed Identity Context. This feature offers an additional layer of security for enterprises using AWS services by blocking traffic from known malicious IP addresses and verifying the identity of the user accessing the AWS resource. With this new feature, AWS has provided a powerful security solution for enterprises that are serious about securing their AWS resources.

Amazon Web Services (AWS) has announced the general availability of AWS Verified Access with support for AWS Web Application Firewall (WAF) and Signed Identity Context. This new feature provides an additional layer of security for enterprises using AWS services.

AWS Verified Access is an identity verification service that enables customers to use their own identity provider (IdP) to manage access to AWS resources. With the support for WAF and Signed Identity Context, customers can now use AWS Verified Access to protect their web applications from malicious traffic and prevent unauthorized access to their resources.

WAF is a web application firewall that protects web applications from common web exploits and attacks. With WAF integration, AWS Verified Access can now block traffic from known malicious IP addresses and prevent attacks such as SQL injection and cross-site scripting.

Signed Identity Context is a new feature that allows customers to verify the identity of the user who is accessing the AWS resource. This is done by attaching a signed JSON Web Token (JWT) to the request that contains the user’s identity information.

AWS Verified Access with support for WAF and Signed Identity Context is available now in all AWS regions. To get started, customers can configure their identity provider to work with AWS Verified Access and enable WAF and Signed Identity Context in their AWS accounts.

Overall, this new feature provides a powerful security solution for enterprises using AWS services. With the ability to block malicious traffic and verify user identities, AWS Verified Access with WAF and Signed Identity Context helps to ensure that only authorized users are accessing AWS resources.