AWS Client VPN now supports device posture assessment
AWS Client VPN now supports device posture assessment, allowing verification of device security and compliance before granting access. Integrates with CrowdStrike, Jamf, and JumpCloud for automated device evaluation.
AWS Client VPN now supports device posture assessment, ensuring user devices meet security and compliance requirements before connecting. It integrates with existing providers like CrowdStrike, Jamf, and JumpCloud to automatically evaluate compliance scores, encryption status, and risk levels. These requirements are defined in Cedar policies for granular control over connectable devices. Client VPN provides a Test Policy tool to help create and validate Cedar policies. The feature continuously re-evaluates device compliance during active sessions, automatically terminating sessions if risk scores or security settings change. It also offers monitoring-only mode to assess policy impact before enforcement. Device posture assessment works with existing allow rules for defense-in-depth. The feature is available in all AWS regions where AWS Client VPN is offered, at no additional cost, and requires AWS VPN client version 6.2.0 or later.
Why it matters
This update is useful for organizations that need to ensure security and compliance in remote and hybrid work environments. Device posture assessment allows verification of device status before granting access.
Regions: Same as AWS Client VPN