New answers tagged security-groups
2
It's a bit difficult to say what's best because you've not said what people are doing in the environment. Are they running an IDE on a Windows EC2 instance? Accessing logs on a Linux box? If you edit the question to give more background you might get better answers.
A few thoughts though:
Use a different approach: instead of whitelisting home IPs let people ...
0
Firstly, are the custom AD groups landing in the correct local group on the affected servers? If they've been added, you should see them in Computer Management on each box. You may be running into delays with replicating the new groups before your task sequence adds them.
If you can, I suggest that creating the groups be the first task in your sequence. ...
0
After a quick read of your issue I suspect that it is group policy related.
If you configure Group Policies correctly, they provide a stable secure reliable environment
There are a number of areas that need be taken into account
• Enabling Remote Desktop on the Computer
• Who is allowed to do this?
• Are you using firewalls
I have a single GPO which ...
6
Option 5 - stop managing Security Groups (essentially IP-based firewalls) and use TLS Client Certificates.
If you're using modern user management systems like Azure AD or LDAP, you already have the right tool to issue and distribute the certificates. You'll setup a private CA and configure the HTTP server (Nginx, Apache2 or AWS ALB) to authenticate by ...
29
Option 4 - stop controlling the access through Security Groups and instead implement some decent authentication mechanism.
For example put an Application Load Balancer in front of the web app and configure the ALB to require Cognito authentication. Only authenticated users will make it through the ALB to your web app - problem solved. The Cognito can have ...
Top 50 recent answers are included