AWS Public Sector Blog
Author: Spencer DeBrosse
Spencer DeBrosse is a principal solutions architect at Amazon Web Services (AWS). He helps state and local government customers migrate to the cloud. He specializes in end user computing and helping customer implement security and governance policies in AWS.
Resilient public safety connectivity models in AWS
This post explores connectivity patterns that can help JPS agencies build resilient network paths to AWS and align them with common public safety use cases.
Enabling SAML 2.0 federation with AWS IAM Identity Center and AWS GovCloud (US)
AWS IAM Identity Center helps administrators centrally manage access to multiple AWS accounts that are members of an AWS Organization. End users can authenticate and then access all their AWS accounts from a single interface. Using IAM Identity Center as a SAML identity provider for your AWS accounts also has security benefits: user credentials provided via federation are temporary. IAM Identity Center does not automatically detect AWS GovCloud (US) accounts associated with standard AWS accounts in your AWS Organization. IAM Identity Center is also not currently available in AWS GovCloud (US). As a result, IAM Identity Center cannot be used to automatically provision access for your users into an AWS GovCloud (US) account. However, this functionality can be extended to enable federation into AWS GovCloud (US) with a “custom SAML 2.0 application” in IAM Identity Center.