Posted On: Apr 18, 2019
This Quick Start automatically deploys Duo multi-factor authentication (MFA) for AWS Directory Service on the Amazon Web Services (AWS) Cloud in about 10 minutes. The Quick Start uses the Duo Authentication Proxy for Directory Service to provide MFA functionality.
This Quick Start is for those who use or plan to use directory types like AWS Directory Service for Microsoft Active Directory (also known as AWS Managed Microsoft AD) or Active Directory Connector (AD Connector), and who want to apply MFA.
Duo MFA mitigates the threat of compromised credentials caused by phishing, malware, and other security threats.
If you use a federation mechanism like AWS Single Sign-On (SSO) or Active Directory Federation Services (AD FS) with a Directory Service option, you configure your own MFA. Using Duo MFA, you log in to the AWS Management Console, and then use Duo authentication methods including Duo Push through Duo Mobile, and your Active Directory credentials to authenticate to AWS.
To get started:
- View the architecture and details
- View the deployment guide for step-by-step instructions
- Download the AWS CloudFormation templates that automate the deployment from GitHub.
To browse and launch other AWS Quick Start reference deployments, see our complete catalog.
Quick Starts are automated reference deployments that use AWS CloudFormation templates to deploy key technologies on AWS, following AWS best practices.
This Quick Start was built by Duo Security in collaboration with AWS solutions architects. Duo Security is an AWS Partner Network (APN) Partner.