Securing Cloudflare Using Cloudflare
Mar 18, 2022Molly Cinnamon, Evan Johnson
Summary
This post details the technical implementation of enforcing FIDO2 security keys as the only second factor for accessing internal and external applications protected by Cloudflare Access. It includes a Terraform code example demonstrating how to configure Cloudflare Access policies to require the 'swk' authentication method, which corresponds to logins using a security key. The post also presents a graph showing the reduction in soft token usage after this enforcement.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack