Commentary on the AWS Verified Access Service

AWS recently announced a preview of their Zero Trust access service, AWS Verified Access. They position this as being built using Zero Trust principles, and that it allows enterprises to define fine-grained policies, and to deliver secure access to corporate applications without a VPN.

Sounds right up our Zero Trust alley! 
But – how does it work, and what are the capabilities and limitations (and pricing model) ?

In this video, I walk through the service architecture, looking at the sources of contextual information (Identity providers and device management systems), the policy model, and the pricing structure.

Watch the video here.

What do you think? Do you anticipate using this AWS service? If so, how?