With IAM Identity Center - After Initial Request
Publication date: February 22, 2023 (Diagram history)
This flow shows how AWS Verified Access handles subsequent requests after the user has a valid identity cookie. The request skips the IAM Identity Center authentication step and proceeds directly to policy validation.
AWS Verified Access with IAM Identity Center - subsequent request flow
The following steps describe the request verification flow:
-
The request targets the application domain hosted on an AWS Verified Access endpoint. This request includes a user identity cookie.
-
AWS Verified Access validates the user request against the application policy using the user identity.
-
AWS Verified Access proxies validated requests to application endpoints in the customer Amazon VPC.
Note
The identity cookie has a lifetime associated with it. When that lifetime expires, the user must re-authenticate with IAM Identity Center.
Further reading
For additional information, see the following resources:
Diagram history
To be notified about updates to this reference architecture diagram, subscribe to the RSS feed.
| Change | Description | Date |
|---|---|---|
Reference architecture diagram first published. | February 22, 2023 | |
Initial publication | Reference architecture diagram first published. | February 22, 2023 |
Reference architecture diagram first published. | February 22, 2023 | |
Reference architecture diagram first published. | February 22, 2023 |
Note
To subscribe to RSS updates, you must have an RSS plugin enabled for the browser you are using.
