Amazon WorkSpaces directories should restrict internet access or enforce MFA
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください。
Description
Restrict access to Amazon WorkSpaces by configuring IP access control groups, enabling SAML authentication, or configuring RADIUS-based MFA in AWS Directory Service. These controls reduce exposure to direct internet access and strengthen authentication for directory logins.
Configure IP access control groups for the WorkSpaces directory to allow only approved IP ranges. If using federated authentication, enable SAML authentication and enforce MFA in the identity provider for all WorkSpaces logins. If using AWS Directory Service, configure RADIUS to enforce MFA. For guidance, refer to WorkSpaces access control and MFA options.