cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
shocko
Level 10
Report Inappropriate Content
Message 1 of 3

Blocking Access to AWS Console based on AWS Account Number

Jump to solution

We use AWS accounts in our org as we have VMs etc. in AWS. As such we need to allow access to logon to https://signin.aws.amazon.com/. My query is around restricting the accounts that can logon. We have enterprise accounts but have noticed people logging into their own personal accounts. Has anyone done anything clever here with SSL interception ?

1 Solution

Accepted Solutions
asabban
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Blocking Access to AWS Console based on AWS Account Number

Jump to solution

Hello,

check with AWS if they offer a "Tenant Restriction", so we can add some value to the headers on the proxy which is respected by AWS. This works for some other applications, such as Office 365 or Google Apps, maybe AWS offers a similar feature.

If not lets take a look at the POST when logging in. The POST will contain the mail address... we can read this information on the MWG usually and compare it against a list of allowed values. If someone tries to login with a mail address you don't like - we can block the login request.

Andre

View solution in original post

2 Replies
asabban
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Blocking Access to AWS Console based on AWS Account Number

Jump to solution

Hello,

check with AWS if they offer a "Tenant Restriction", so we can add some value to the headers on the proxy which is respected by AWS. This works for some other applications, such as Office 365 or Google Apps, maybe AWS offers a similar feature.

If not lets take a look at the POST when logging in. The POST will contain the mail address... we can read this information on the MWG usually and compare it against a list of allowed values. If someone tries to login with a mail address you don't like - we can block the login request.

Andre

shocko
Level 10
Report Inappropriate Content
Message 3 of 3

Re: Blocking Access to AWS Console based on AWS Account Number

Jump to solution
I don't see it offered 😐
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community