AC-18—Wireless Access
LI-SaaS
Low
Moderate
High
>Control Description
a
Establish configuration requirements, connection requirements, and implementation guidance for each type of wireless access; and
b
Authorize each type of wireless access to the system prior to allowing such connections.
>FedRAMP Baseline Requirements
No FedRAMP-specific parameter values or requirements for this baseline.
>Discussion
Wireless technologies include microwave, packet radio (ultra-high frequency or very high frequency), 802.11x, and Bluetooth. Wireless networks use authentication protocols that provide authenticator protection and mutual authentication.
>Cross-Framework Mappings
>Programmatic Queries
Beta
Related Services
WorkSpaces
Client VPN
Direct Connect
CLI Commands
List Client VPN endpoints
aws ec2 describe-client-vpn-endpoints --query 'ClientVpnEndpoints[*].{Id:ClientVpnEndpointId,Status:Status.Code,CIDR:ClientCidrBlock}'Check Client VPN authorization rules
aws ec2 describe-client-vpn-authorization-rules --client-vpn-endpoint-id ENDPOINT_IDGet VPN connection status
aws ec2 describe-vpn-connections --query 'VpnConnections[*].{Id:VpnConnectionId,State:State}'List WorkSpaces IP access groups
aws workspaces describe-ip-groups>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What formal policies and procedures govern the implementation of AC-18 (Wireless Access)?
- •Who are the designated roles responsible for implementing, maintaining, and monitoring AC-18?
- •How frequently is the AC-18 policy reviewed and updated, and what triggers policy changes?
- •What training or awareness programs ensure personnel understand their responsibilities related to AC-18?
Technical Implementation:
- •Describe the specific technical mechanisms or controls used to enforce AC-18 requirements.
- •What automated tools, systems, or technologies are deployed to implement AC-18?
- •How is AC-18 integrated into your system architecture and overall security posture?
- •What configuration settings, parameters, or technical specifications enforce AC-18 requirements?
Evidence & Documentation:
- •What documentation demonstrates the complete implementation of AC-18?
- •What audit logs, records, reports, or monitoring data validate AC-18 compliance?
- •Can you provide evidence of periodic reviews, assessments, or testing of AC-18 effectiveness?
- •What artifacts would you present during a FedRAMP assessment to demonstrate AC-18 compliance?
Ask AI
Configure your API key to use AI features.