AWS Verified Access
Zero trust access without VPN
Lets users access internal applications without a VPN: each request is evaluated against identity (IAM Identity Center or an IdP) and device posture based on Cedar policies.
- Cost$$ Medium
- Difficulty●●●●●
- Costs money when idle?Yes
- Managed by AWS
Think of it asLike a guard who checks your badge and belongings every time you enter each room, not just at the gate.
When to use it
✓ Use it when
Internal web applications that need zero trust instead of VPN.
✗ Avoid it when
You need broad network access (SSH, many protocols) → Client VPN.
Common uses
- Employees reaching internal admin pages without VPN
- Blocking access from devices that don't meet security standards
- Giving contractors limited access
What does it cost?
- Pricing model: Charged hourly per attached application plus GB of data processed.
