Skip to main content

Multi-Factor Authentication in Amazon WorkSpaces

(Update) On the topic of Multi-Factor Authentication, we recommend two new courses we’ve released Understanding of AWS Authentication, Authorization & Accounting and Implementing Multi-Factor Authentication on Azure. 


Just a few days ago we talked about how to protect your AWS based server with Multi-Factor Authentication.

This not-so-new technology is spreading more and more, especially given that it hugely increases security at the very tiny inconvenience of entering a One-Time-Password every time you log in to your system.  The OTP can be generated either by a physical or a virtual device, like for example a smartphone app. This is extremely convenient, especially considered that we always (or almost always) have our smartphone around, and even if someone stoles it, the thief still hasn’t all the pieces needed to log into our account. So, we all like MFA, and we like it so much that Amazon added support for Multi-Factor Authentication in Amazon WorkSpaces, one if the services of its AWS family. Even better: it’s available for free!
Amazon WorkSpaces Logo

What is Amazon WorkSpaces?

We don’t talk about WorkSpaces that often on this blog. Actually, it’s definitely not a first-tier service of AWS. Nevertheless, it’s having quite a success and has many interesting applications, so it’s still good to learn more about it.
Amazon describes WorkSpaces as a “fully managed desktop computing service in the cloud“. In other words, WorkSpaces allows you to launch cloud-based Windows desktop instances that users can access from their own device, including mobile devices like iPad, Android tablets, and of course Amazon’s Kindle Fire. End users will have a complete Windows 7 based desktop interface, easing all the burden of installing device drivers or setting up applications. As it happens with many SaaS solutions (or maybe we should call it an “Operating System as a Service”?), the price for this convenience is a loss of flexibility at a certain degree. Anyway, WorkSpaces still is a viable solution, with a high-security level granted by the adoption of the PCoIP protocol, and with lower costs than other on-premises Virtual Desktop Infrastructure.

How to enable MFA in Amazon WorkSpaces

Amazon added support for MFA using an on-premises RADIUS server, meaning that users will be able to authenticate themselves using the same mechanism that they already use for other remote access systems of their organization. So, after MFA has been enabled and configured, WorkSpaces users will just log in by entering their usual Active Directory user name and password, and then the One-Time Password supplied by either a hardware or a virtual device, just like the smartphone application we discussed earlier.

The new WorkSpaces feature works with any security provider supporting RADIUS. Amazon added support for many protocols, including PAP, CHAP, MS-CHAP1, and MS-CHAP2, which should be enough to grant compatibility with the vast majority of the existing infrastructures. To actually enable MFA, the WorkSpaces administrator must configure the new feature by entering the connection information for the on-premises RADIUS server in the Directories section of the WorkSpaces console. If high availability is a concern, it’s possible to provide multiple RADIUS servers, either adding all their IP addresses or deploying an Elastic Load Balancer in front of them.

Avatar

Written by

Andrea Colangelo

Software Engineer with a solid focus on QA and an extensive experience in ICT. Above all, Andrea has a very strong interest in Free and Open Source Software, and he is a Debian and Ubuntu Developer since years. Non-tech interests include: Rugby, Jazz music and Cooking.

Related Posts

Jeff Hyatt
Jeff Hyatt
— June 18, 2019

10 Steps for an Effective Reserved Instances Strategy

Amazon Web Services (AWS) offers three different ways to pay for EC2 Instances: On-Demand, Reserved Instances, and Spot Instances. This article will focus on effective strategies for purchasing Reserved Instances. While most of the major cloud platforms offer pre-pay and reservation dis...

Read more
  • AWS
  • EC2
Joe Nemer
Joe Nemer
— June 18, 2019

AWS Certification Practice Exam: What to Expect from Test Questions

If you’re building applications on the AWS cloud or looking to get started in cloud computing, certification is a way to build deep knowledge in key services unique to the AWS platform. AWS currently offers 11 certifications that cover major cloud roles including Solutions Architect, De...

Read more
  • AWS
  • AWS Certifications
Avatar
John Chell
— June 13, 2019

AWS Certified Solutions Architect Associate: A Study Guide

The AWS Solutions Architect - Associate Certification (or Sol Arch Associate for short) offers some clear benefits: Increases marketability to employers Provides solid credentials in a growing industry (with projected growth of as much as 70 percent in five years) Market anal...

Read more
  • AWS
  • AWS Certifications
Chris Gambino and Joe Niemiec
Chris Gambino and Joe Niemiec
— June 11, 2019

Moving Data to S3 with Apache NiFi

Moving data to the cloud is one of the cornerstones of any cloud migration. Apache NiFi is an open source tool that enables you to easily move and process data using a graphical user interface (GUI).  In this blog post, we will examine a simple way to move data to the cloud using NiFi c...

Read more
  • AWS
  • S3
Avatar
Chandan Patra
— June 11, 2019

Amazon DynamoDB: 10 Things You Should Know

Amazon DynamoDB is a managed NoSQL service with strong consistency and predictable performance that shields users from the complexities of manual setup.Whether or not you've actually used a NoSQL data store yourself, it's probably a good idea to make sure you fully understand the key ...

Read more
  • AWS
  • DynamoDB
Avatar
Andrew Larkin
— June 6, 2019

The 11 AWS Certifications: Which is Right for You and Your Team?

As companies increasingly shift workloads to the public cloud, cloud computing has moved from a nice-to-have to a core competency in the enterprise. This shift requires a new set of skills to design, deploy, and manage applications in cloud computing.As the market leader and most ma...

Read more
  • AWS
  • AWS Certifications
Sam Ghardashem
Sam Ghardashem
— May 15, 2019

Aviatrix Integration of a NextGen Firewall in AWS Transit Gateway

Learn how Aviatrix’s intelligent orchestration and control eliminates unwanted tradeoffs encountered when deploying Palo Alto Networks VM-Series Firewalls with AWS Transit Gateway.Deploying any next generation firewall in a public cloud environment is challenging, not because of the f...

Read more
  • AWS
Joe Nemer
Joe Nemer
— May 3, 2019

AWS Config Best Practices for Compliance

Use AWS Config the Right Way for Successful ComplianceIt’s well-known that AWS Config is a powerful service for monitoring all changes across your resources. As AWS Config has constantly evolved and improved over the years, it has transformed into a true powerhouse for monitoring your...

Read more
  • AWS
  • Compliance
Avatar
Francesca Vigliani
— April 30, 2019

Cloud Academy is Coming to the AWS Summits in Atlanta, London, and Chicago

Cloud Academy is a proud sponsor of the 2019 AWS Summits in Atlanta, London, and Chicago. We hope you plan to attend these free events that bring the cloud computing community together to connect, collaborate, and learn about AWS. These events are all about learning. You can learn how t...

Read more
  • AWS
  • AWS Summits
Paul Hortop
Paul Hortop
— April 2, 2019

How to Monitor Your AWS Infrastructure

The AWS cloud platform has made it easier than ever to be flexible, efficient, and cost-effective. However, monitoring your AWS infrastructure is the key to getting all of these benefits. Realizing these benefits requires that you follow AWS best practices which constantly change as AWS...

Read more
  • AWS
  • Monitoring
Joe Nemer
Joe Nemer
— April 1, 2019

AWS EC2 Instance Types Explained

Amazon Web Services’ resource offerings are constantly changing, and staying on top of their evolution can be a challenge. Elastic Cloud Compute (EC2) instances are one of their core resource offerings, and they form the backbone of most cloud deployments. EC2 instances provide you with...

Read more
  • AWS
  • EC2
Avatar
Nitheesh Poojary
— March 26, 2019

How DNS Works – the Domain Name System (Part One)

Before migrating domains to Amazon's Route53, we should first make sure we properly understand how DNS worksWhile we'll get to AWS's Route53 Domain Name System (DNS) service in the second part of this series, I thought it would be helpful to first make sure that we properly understand...

Read more
  • AWS