Amazon WorkSpaces
2021年06月19日
WorkSpaces
计费模式
Network Design
WorkSpaces requires 2 subnets in different AZs
Subnet sizing
Directory Integration
All WorkSpaces will be joined to an AD domain
AWS Directory Service is required to connect users to their WorkSpaces
The directory service is where you get the registration code.
Every unique directory has a distinct registration code when you activate it for WorkSpaces.
It looks like a reg code
It's not unique per user, it's unique at the directory connector level.
[33:33]
Recommend extending AD onto EC2 and defining site boundaries for your EC2 subnets.
This is going to speed that user authentication, policy application and other AD related interaction.
With workspaces that initial session is the only time the directory connector is used, the remainder of communications to your Active Directory environment are through native AD communications.
AD recommendations
Extend your Active Directory into AWS on EC2 instances
Use cross-account VPC peering for communications to a share services VPC
Define your VPCs in Active Directory sites and services
Separate AD OUs by service and region
[43:10]
Golden AMI
-
This session is open to anyone, but it is intended for current and potential AWS Partners. It reviews key elements for building a business to support your customers’ digital workplace needs. The digital workplace incorporates AWS End User Computing services and partner solutions that provide the best experience for remote users and remote learning while ensuring secure endpoints, application management, and secure collaboration tools. Digital Workplace Competency Partners that have the expertise and tools to best support their customers have an opportunity to bring their experience to the forefront. A true digital workplace is not one-size-fits-all. Come explore where and how to participate in this rapidly expanding area.
Zero trust secure access
[10:32]
onboarding new employees: It can be very challenging with sending out devices, imaging devices, maintain that lifecycle of that PC.
If you are employing a bring your own device initiative, for example, then it's very simple to spin up a desktop for that user, supply them with the applications and tools that they need, collaboration tools they need. And they're off and running day one.
[21:27]
Okta
NASUNI - [23:15]
Designed for IT Decision Makers and Administrators at organizations looking to optimize the processes and people dedicated to their Amazon WorkSpaces or Amazon AppStream 2.0 implementations, this session discusses a variety of methodologies, examples and associated benefits to automate, manage and scale your deployments. This includes integrating into existing business processes to increase speed to market, the simplification of day to day management, while reducing overhead costs. Topics covered will include: Automating and optimizing provisioning workflows using the Amazon API, AWS tools for PowerShell, leveraging AWS CloudWatch to proactively monitor your EUC environments, and enabling users through self service capabilities and options.
DR is currently incapable in China due to it only available in the Ningxia region.
Business Continuity and Disaster Recovery with Amazon WorkSpaces
FSx
https://aws.amazon.com/blogs/desktop-and-application-streaming/using-amazon-fsx-for-windows-file-server-with-amazon-workspaces/
https://aws.amazon.com/blogs/storage/windows-home-directories-and-file-shares-made-easy-with-amazon-fsx/
https://docs.aws.amazon.com/fsx/latest/WindowsGuide/supported-fsx-clients.html
Move Your Desktops and Applications to AWS with Amazon WorkSpaces and AppStream 2.0 (BAP323) - AWS re:Invent 2018 from Amazon Web Services
WorkSpaces
计费模式
Network Design
WorkSpaces requires 2 subnets in different AZs
Subnet sizing
Directory Integration
All WorkSpaces will be joined to an AD domain
AWS Directory Service is required to connect users to their WorkSpaces
The directory service is where you get the registration code.
Every unique directory has a distinct registration code when you activate it for WorkSpaces.
It looks like a reg code
It's not unique per user, it's unique at the directory connector level.
[33:33]
Recommend extending AD onto EC2 and defining site boundaries for your EC2 subnets.
This is going to speed that user authentication, policy application and other AD related interaction.
With workspaces that initial session is the only time the directory connector is used, the remainder of communications to your Active Directory environment are through native AD communications.
AD recommendations
Extend your Active Directory into AWS on EC2 instances
Use cross-account VPC peering for communications to a share services VPC
Define your VPCs in Active Directory sites and services
Separate AD OUs by service and region
[43:10]
Golden AMI
-
This session is open to anyone, but it is intended for current and potential AWS Partners. It reviews key elements for building a business to support your customers’ digital workplace needs. The digital workplace incorporates AWS End User Computing services and partner solutions that provide the best experience for remote users and remote learning while ensuring secure endpoints, application management, and secure collaboration tools. Digital Workplace Competency Partners that have the expertise and tools to best support their customers have an opportunity to bring their experience to the forefront. A true digital workplace is not one-size-fits-all. Come explore where and how to participate in this rapidly expanding area.
Zero trust secure access
[10:32]
onboarding new employees: It can be very challenging with sending out devices, imaging devices, maintain that lifecycle of that PC.
If you are employing a bring your own device initiative, for example, then it's very simple to spin up a desktop for that user, supply them with the applications and tools that they need, collaboration tools they need. And they're off and running day one.
[21:27]
Okta
NASUNI - [23:15]
Designed for IT Decision Makers and Administrators at organizations looking to optimize the processes and people dedicated to their Amazon WorkSpaces or Amazon AppStream 2.0 implementations, this session discusses a variety of methodologies, examples and associated benefits to automate, manage and scale your deployments. This includes integrating into existing business processes to increase speed to market, the simplification of day to day management, while reducing overhead costs. Topics covered will include: Automating and optimizing provisioning workflows using the Amazon API, AWS tools for PowerShell, leveraging AWS CloudWatch to proactively monitor your EUC environments, and enabling users through self service capabilities and options.
DR is currently incapable in China due to it only available in the Ningxia region.
Business Continuity and Disaster Recovery with Amazon WorkSpaces