AWS Verified Access
#107 · Level 3 · Modern architecture · SecurityConcept
Section titled “Concept”AWS Verified Access gives safe access to an organization’s internal apps without a VPN. It works on the zero trust principle — meaning it doesn’t trust someone just because they are inside the network, and checks every request separately. For each request, a decision is made by policy based on the user’s identity and, if you want, the state of their device. Identity information comes from IAM Identity Center or an outside identity provider. You can keep separate rules for each app, and keep logs of all access.
Simple example
Section titled “Simple example”A separate guard at the door of every room in the office, who checks not just your ID but your condition too — every time.
Why it’s needed
Section titled “Why it’s needed”Once you are inside the VPN, you can go everywhere — this is risky. Checking separately at each app is safer (zero trust).
Where it’s used
Section titled “Where it’s used”Staff working remotely using the office’s internal web apps.
Azure equivalent
Section titled “Azure equivalent”Microsoft Entra Private Access / Application Proxy
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: