Configuration Management - Best Practices to Prepare your Amazon WorkSpaces for Linux Images

Configuration Management

You can use images to deploy a standardized WorkSpace for your users, and you can regularly update your images to rebuild and include or update the custom bundle for your WorkSpaces. This methodology ensures the deployment and maintenance of a fully baked image.

Customers may want to set configuration files at scale for security and compliance; even when the image is fully baked. Including the agent component for a Configuration Management agent in your image helps maintain security and compliance by scanning your instances against your patch, configuration, and custom policies. Using a Configuration Management tool (such as Puppet or Chef), allows you to define patch baselines, maintain up-to-date antivirus definitions, and enforce firewall policies. You can also remotely manage your WorkSpaces at scale without rebuilding each WorkSpace.