Menu
Amazon WorkSpaces
Administration Guide

Provide Internet Access from Your WorkSpace

We recommend that you launch your WorkSpaces in private subnets in your virtual private cloud (VPC) and use one of the following options to allow your WorkSpaces to access the Internet:

Options

With any of these options, you must ensure that the security group for your WorkSpaces allows outbound traffic on ports 80 (HTTP) and 443 (HTTPS) to all destinations (0.0.0.0/0).

Manually Assign IP Addresses

You can manually assign an Elastic IP address to a WorkSpace.

Prerequisites

  • Your VPC must have an attached Internet gateway. For more information, see Attaching an Internet Gateway in the Amazon VPC User Guide.

  • The route table for the WorkSpaces subnets must have one route for local traffic and another route that sends all other traffic to the Internet gateway.

To assign an Elastic IP address to a WorkSpace

  1. Open the Amazon WorkSpaces console at https://console.aws.amazon.com/workspaces/.

  2. In the navigation pane, choose WorkSpaces.

  3. Expand the row for the WorkSpace and note the value of WorkSpace IP. This is the primary private IP address of WorkSpace.

  4. Open the Amazon EC2 console at https://console.aws.amazon.com/ec2/.

  5. In the navigation pane, choose Elastic IPs. If you do not have an available Elastic IP address, choose Allocate new address and follow the directions.

  6. In the navigation pane, choose Network Interfaces.

  7. Select the network interface for your WorkSpace. Note that the value of VPC ID matches the ID of your WorkSpaces VPC and the value of Primary private IPv4 IP matches the primary private IP address of the WorkSpace that you noted earlier.

  8. Choose Actions, Associate Address.

  9. On the Associate Elastic IP Address page, choose an Elastic IP address from Address and then choose Associate Address.