Urgent: Enable 2FA for AWS WorkSpaces Using Google Authenticator

@rohand80

I am a Cloud & DevOps Engineer with strong experience in AWS infrastructure, private VPC design, and secure authentication systems. I propose a production-ready implementation of Two-Factor Authentication (2FA) for your AWS WorkSpaces environment using FreeRADIUS and Google Authenticator (TOTP), designed around a strict “Zero Inbound Access” security model. The solution will be implemented in controlled phases: first deploying a hardened FreeRADIUS server inside private subnets with restricted Security Group access and precise time synchronization for TOTP accuracy; second integrating Google Authenticator via PAM and configuring FreeRADIUS to align with AWS Directory Service requirements; and finally enabling MFA in AWS Directory Service and validating end-to-end login flows for both AlwaysOn and AutoStop WorkSpaces. I prioritize stability and correctness for authentication systems and will provide full documentation, testing procedures, and a clear rollback plan to ensure a secure, maintainable, and production-ready deployment.

@AZTURK1

Hi there, I understand your urgent need to enable Two-Factor Authentication (2FA) for your AWS WorkSpaces using Google Authenticator combined with FreeRADIUS within a private subnet environment. With 7+ years of experience managing secure AWS deployments and extensive FreeRADIUS and TOTP integrations, I am confident in delivering a robust, production-ready 2FA solution. - Configure and integrate FreeRADIUS as your backend authenticator for AWS WorkSpaces - Implement Google Authenticator (TOTP) as the second authentication factor - Ensure full functionality within private subnets without direct internet exposure - Provide detailed, clean documentation and a secure, hardened setup - Assist with thorough testing, troubleshooting, and validation **Skills:** ✅ FreeRADIUS configuration and troubleshooting ✅ TOTP and Google Authenticator integration ✅ AWS WorkSpaces and VPC networking design ✅ Linux system administration and security hardening ✅ Documentation and rollback procedures **Certificates:** ✅ Microsoft® Certified: MCSA | MCSE | MCT ✅ cPanel® & WHM Certified CWSA-2 I am available to start immediately and ensure a seamless, secure deployment quickly. Looking forward to collaborating on this priority task. Could you provide details on your existing FreeRADIUS setup or should I plan for a fresh installation to meet your security requirements? Best regards,

@zulqrn

Hi there, I'm a System & Network Administrator with solid 7 years of experience. I would like to assist you in this. Let me know a good time if we can discuss. Thanks!

@kumarashish99

With AWS WorkSpaces, implementing Two-Factor Authentication (2FA) is a complex task that requires an in-depth understanding of FreeRADIUS, Google Authenticator (TOTP), AWS networking, and strong Linux administration skills. As an AWS-certified professional with over 5 years of experience, I have conceptualized, deployed and maintained cloud infrastructures, ensuring both security and performance. My expertise extends to backend development, DevOps engineering, and Kubernetes orchestration, which will prove vital in delivering a tested, stable, and maintainable setup for your project. I have prior experience in setting up secure 2FA for AWS services and have worked extensively with FreeRADIUS for RADIUS configurations. Additionally, my grasp on networking and private subnet access design makes me adept at creating a solution that is fully accommodated within your private subnets. Time sensitivity is not an obstacle for me; I am known to professionally accommodate quick turnarounds without compromising on the quality of service or deliverables. Given my diverse technical toolkit including AWS, Terraform, Docker, Kubernetes among others alongside hands-on experience with Prometheus, Grafana, New Relic as monitoring tools,I am well-equipped to provide a clean, documented solution that completely fulfills your need while providing optional but valuable additional benefits to you.

@Web1devloper

As a proficient developer with a terrific background marked by utilizing AWS and Linux alongside a track record of implementing secure two-factor authentication, I am confident in my ability to execute this project promptly and effectively. Through my 8+ years of experienced, I've valuable insight into intricacies of AWS environments like Workspace that will enable me to meet all the requirements of this task such as the integration of Google Authenticator (TOTP) and the implementation and configuration of FreeRADIUS as the backend. Moreover, my understanding in networking and private subnet access design aligns perfectly with your project needs. I've worked on numerous similar tasks solidifying my knowledge on RADIUS-based solutions and integrating them with TOTP for enhanced security measures. This guarantees you a clean, documented solution which assuredly meets your best-practice standards. My broad skillset including proficient knowledge in technologies such as Docker, CI/CD and more provide leverage that could contribute significantly to your project's quality and timeline.

@Solutionzhere

With our extensive experience in using FreeRADIUS, along with AWS WorkSpaces authentication flow, we are well equipped to take on this task. Our knowledge in Linux system administration and networking design will ensure that your private subnets remain secured during the entire process, whilst integrating the Google Authenticator (TOTP) as an added layer of authentication. Let's talk more over chat to go ahead with your project. Thanks and regards.

@ravikumarsingh1

Hello — I’ve implemented FreeRADIUS + Google Authenticator (TOTP) for secure 2FA in AWS environments and can deploy a production-ready setup for your WorkSpaces quickly. I’ll configure FreeRADIUS inside your private subnets, integrate TOTP as the second factor, and wire it into the AWS WorkSpaces authentication flow with no public exposure. The solution will include validation testing, troubleshooting, and clean documentation so your team can maintain it confidently. Deliverables include working 2FA login, configuration guide, and optional hardening + rollback notes. I’m comfortable with RADIUS internals, Linux admin, and AWS networking and can start immediately on this priority task. Let’s secure this environment properly.

@Ashnasajid

Hi, I can do this. With extensive experience in implementing Two-Factor Authentication (2FA) solutions, I am well-equipped to enable 2FA for your AWS WorkSpaces environment using Google Authenticator and FreeRADIUS. I have successfully completed similar integrations, ensuring secure and production-ready setups. I will configure FreeRADIUS as the authentication backend, integrate TOTP for Google Authenticator, and ensure the solution operates seamlessly within your private subnets. My approach includes thorough documentation of configuration steps, best-practice hardening recommendations, and a testing procedure with a rollback plan. I understand the urgency of this project and can begin immediately to deliver a stable and maintainable solution. Looking forward to collaborating on this critical task. Ashnasajid

@burzhuy

As an Amazon Web Services expert with 20 years of experience, I'm confident I can deliver the urgent and secure 2FA solution you need for your AWS WorkSpaces using FreeRADIUS and Google Authenticator. My skills extend beyond AWS to include Linux system administration and networking—essential for your request of private subnet access design—enabling me to give your project the holistic approach it deserves. My familiarity with implementing RADIUS + TOTP integrations will allow me to hit the ground running and get to work on enabling 2FA for your AWS WorkSpaces effectively and efficiently. Additionally, my deep understanding of AWS networking and VPC design will ensure that the solution is tailored specifically to your environment, fully aligned with your security preferences, and optimized for productivity. Lastly, I understand the urgency and importance of this task. I am prepared to devote all my energy into delivering a tested, stable, secure, and maintainable setup for your team in a timely manner. Your satisfaction is my utmost priority which is why I will provide detailed documentation, best-practice hardening recommendations and a testing procedure/rollback plan if necessary. Choose me, Stanislau (Stas), because I have the knowledge, the skills, and the dedication required to get this job done exceptionally well. Thank you for your consideration.