Principle 10: End user identity and authentication - Using AWS in the Context of NHS Cloud Security Guidance

This whitepaper is for historical reference only. Some content might be outdated and some links might not be available.

Principle 10: End user identity and authentication

All access to service interfaces should be constrained to authenticated and authorised [end user] individuals.

Applicable risk classes: III-V

  • Two factor authentication — If required, the customer may configure identities to authenticate using additional factors.

  • Identity federation with your existing identity provider — If configuring federation between an existing identity provider and IAM, the identity provider’s two-factor authentication will operate independently of AWS, so the only AWS-specific task the customer is required to undertake is the federation itself.