📖 What is Amazon WorkSpaces?
Amazon WorkSpaces is a managed, secure Desktop-as-a-Service (DaaS) solution that provides virtual desktops in the cloud. It allows users to access their full desktop environment from any supported device, ensuring data remains secure within the AWS cloud.
"This is the primary answer for 'Virtual Desktop Infrastructure' (VDI) requirements where users need consistent access to a cloud-hosted desktop."
📚 Certification: AWS Certified Solutions Architect - Associate (SAA-C03)
🔑 What are the Key Concepts of Amazon WorkSpaces?
- ▸ Persistent storage ensures that user settings, applications, and files are saved across sessions, providing a consistent personal desktop experience.
- ▸ Offers flexible pricing models including Monthly billing for full-time employees and Hourly billing for contractors or seasonal workers to optimize costs.
- ▸ Integrates with AWS Directory Service and Microsoft Active Directory to provide centralized identity management and seamless user authentication.
- ▸ Operates as a fully managed Desktop-as-a-Service (DaaS) solution, removing the need for customers to manage underlying server hardware or hypervisors.
- ▸ Deploys within a VPC, allowing secure connectivity to other AWS resources and on-premises data centers via VPN or Direct Connect.
🎯 How does Amazon WorkSpaces appear on the SAA-C03 Exam?
You may be asked to design a solution for a remote workforce that requires a full, persistent Windows desktop environment with integration into an existing corporate Active Directory.
A scenario might describe a need to provide secure, cloud-based desktops to seasonal contractors; you should identify the Hourly billing option to minimize costs.
Expect questions where you must distinguish between providing a full virtual desktop for a power user versus streaming a single application to a browser.
❓ Frequently Asked Questions
How do I choose between Amazon WorkSpaces and Amazon AppStream 2.0?
Choose WorkSpaces when users need a full, persistent desktop where they can save files and customize the OS. Choose AppStream 2.0 for non-persistent, application-specific streaming without a full desktop.
Can WorkSpaces be used to access resources in a private subnet?
Yes, because WorkSpaces are deployed within your VPC, they can be configured with security groups and routing tables to securely access private resources like RDS or internal APIs.