AWS vpn high security documentation change
Summary
Added IdpCertDaysToExpiry metric for monitoring SAML certificate expiration
Security assessment
Expired certificates create critical security vulnerabilities in authentication systems. This change adds proactive monitoring for certificate expiration, directly addressing a security weakness.
Diff
diff --git a/vpn/latest/clientvpn-admin/monitoring-cloudwatch.md b/vpn/latest/clientvpn-admin/monitoring-cloudwatch.md index 26a7cec31..8a12f4930 100644 --- a//vpn/latest/clientvpn-admin/monitoring-cloudwatch.md +++ b//vpn/latest/clientvpn-admin/monitoring-cloudwatch.md @@ -17,0 +18 @@ EgressPackets | The number of packets sent from the Client VPN endpoint.Units: C +IdpCertDaysToExpiry | The number of days until the identity provider (IdP) certificate which is configured on the Client VPN endpoint expires. This metric is only reported for endpoints configured with SAML-based federated authentication. Units: Days