AWS Client VPN expanded its security model by adding device posture assessment, allowing organizations to enforce compliance requirements such as encryption status and risk scores by integrating with providers like CrowdStrike, Jamf, and JumpCloud. Access is controlled through Cedar policies that define criteria for allowed devices.
The feature continuously re-evaluates compliance during active sessions and disconnects devices that fall out of compliance. Alternatively, monitoring-only mode logs posture evaluations without disconnecting devices, helping organizations study policy impacts before enforcement. This capability is provided at no cost in all regions where Client VPN is available.
Source & further reading
AWS Client VPN now supports device posture assessment ↗Source published 2026-10-05. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.