Is AWS Single Sign-On in GovCloud region FAL3 compliant?

Question

https://aws.amazon.com/blogs/publicsector/enabling-saml-2-0-federation-aws-sso-aws-govcloud-us/ doesn't say anything about AWS Single Sign-On being FAL3 compliance. Does AWS Single Sign-On in GovCloud implement SAML Holder of Key?

BTW, FAL3 is defined here: https://pages.nist.gov/800-63-3/sp800-63-3.html#sec5

Answer

Hello,

On checking internally, I found that unfortunately AWS SSO service is not FAL3 compliant yet.

Please feel free to raise a support case with our premium support team if you would like to discuss further regarding this requirement or log a feature request.

Is AWS Single Sign-On in GovCloud region FAL3 compliant?

Contenido relevante