AWS GovCloud (US) User Guide
AWS GovCloud (US) User Guide

Amazon WorkSpaces

This service is currently available in AWS GovCloud (US-West) only.

Amazon WorkSpaces is a managed, secure cloud desktop service. You can use Amazon WorkSpaces to provision either Windows or Amazon Linux 2 desktops in just a few minutes and quickly scale to provide thousands of desktops to workers across the globe. You can pay either monthly or hourly, just for the WorkSpaces you launch, which helps you save money when compared to traditional desktops and on-premises virtual desktop infrastructure (VDI) solutions. Amazon WorkSpaces helps you eliminate the complexity in managing hardware inventory and OS versions and patches which helps simplify your desktop delivery strategy. With Amazon WorkSpaces, your users get a fast, responsive desktop of their choice that they can access anywhere, anytime, from any supported device.

The following list details the differences for using this service in AWS GovCloud (US) Regions compared to other AWS Regions:

  • The Amazon WorkSpaces Application Manager console is not supported.

  • The Web Access client (from browser) is not supported.

For more information about Amazon WorkSpaces, see the Amazon WorkSpaces documentation.

ITAR Boundary

AWS GovCloud (US) has an ITAR boundary, which defines where customers are allowed to store ITAR-controlled data for this service in AWS GovCloud (US) Regions. To maintain ITAR compliance, you must place ITAR-controlled data on the applicable part of the ITAR boundary. If you do not have any ITAR-controlled data in AWS GovCloud (US) Regions, this section does not apply to you. The following information identifies the ITAR boundary for this service:

ITAR-Regulated Data Permitted ITAR-Regulated Data Not Permitted
  • Amazon WorkSpaces passwords are protected as ITAR-regulated data through AWS Directory Service.

  • All data stored and processed within Amazon WorkSpaces can contain ITAR-regulated data.

Amazon WorkSpaces metadata is not permitted to contain ITAR-regulated data. This metadata includes all configuration data that you enter when creating and maintaining your WorkSpaces.

Do not enter ITAR-regulated data in the following console fields:

  • AMI descriptions

  • Resource tags

  • If importing ITAR-regulated images, do not use pre-signed URLs for the CLI argument.

  • Key pairs created using HTTP

On this page: