Amazon workspace MFA with CAC

Question

We are implementing MFA on Amazon Workspaces. WE have the Option of using US Gov CAC. Any one know if AWS gov will authenticate CACs without a radius server? Does it already use the current government CA. If we don't go this route what is the best option FIDO2, DUO, ETC. If we use DUO we don't need a radius server we can use DUOs correct? Pretty new to this so any advice is appreciated.

Answer

Take a look at this whitepaper, [Access Amazon WorkSpaces with Common Access Cards](https://docs.aws.amazon.com/whitepapers/latest/access-workspaces-with-access-cards/overview.html)

Answer

Thanks. I have read that before does that mean that the CAC gets authenticated from AWS AD and we don't have to worry about moving certs from the DOD CA? Don't quit understand it I think. Also with this no radius server needed?

Amazon workspace MFA with CAC

Contenus pertinents