Amazon WorkMail Documentation

Amazon WorkMail provides native support for Microsoft Outlook on Windows and Mac OS X, so users can continue to use the email client they are already using without needing to install any additional software, such as plug-ins for Microsoft Outlook. Amazon WorkMail can help support many of the advanced Microsoft Outlook capabilities your users depend on, such as free/busy scheduling, delegation, and out of office replies. 

Amazon WorkMail encrypts your data at rest with encryption keys you control, using the AWS Key Management Service. Amazon WorkMail also allows you to retain control over data locality by choosing the AWS region where all of your data is stored. Data in transit is encrypted using SSL encryption.

You can integrate your existing Microsoft Active Directory with Amazon WorkMail using AWS Directory Service AD Connector or run AWS Directory Service for Microsoft Active Directory Enterprise Edition ("Microsoft AD") so you don’t have to manage users in two places and users can continue to use their existing Microsoft Active Directory credentials. Alternatively, you can have Amazon WorkMail create and manage a Simple AD directory for you and have users in that directory created when you add them to your Amazon WorkMail organization.

Journaling allows you to record email communications sent or received by your Amazon WorkMail organization. By enabling journaling, you can help meet your data security and information protection policies using third party compliance solutions for email archiving and e-discovery. You can integrate with third-party solutions that supports SMTP journaling.

You can set up interoperability with Microsoft Exchange Server 2010 and 2013. Interoperability allows you to use both Amazon WorkMail and Microsoft Exchange Server at the same time so that you can use the same corporate domain for mailboxes across both environments. It allows your users to schedule meetings with bi-directional sharing of calendar free-busy information, and access user and resource information through a unified global address book. Interoperability reduces disruption when migrating to Amazon WorkMail, and it allows you to use Amazon WorkMail concurrently with Microsoft Exchange Server for a subset of your corporate mailboxes.

Amazon WorkMail provides an administrative SDK so you can natively integrate WorkMail with your existing services. The SDK enables programmatic user, email group, and meeting room or equipment resource management. You can also programmatically receive Exchange Web Services (EWS) push notifications. This means your existing IT service management tools, workflows, and third-party applications can automate WorkMail migration and management, and respond to events in your mailboxes in real-time.

Amazon WorkMail allows you to access your email with a third-party email client application that supports the IMAP protocol. This allows you to choose from a broad range of clients, including those that do not offer support for Microsoft Exchange compatible protocols like Microsoft Exchange Web Services and Microsoft ActiveSync. It also allows you to integrate Amazon WorkMail with IT applications and systems which rely on the IMAP protocol to access email. Amazon WorkMail offers an SMTP gateway so that you can send email through WorkMail without the need to configure a different SMTP endpoint.

Amazon WorkMail provides a web client designed so that users can access their email and calendars, view shared calendars, schedule meetings with co-workers, or search the company address book using their browser. Users can also manage their out-of-office replies and book resources, such as conference rooms. The Amazon WorkMail web client is also integrated with Amazon WorkDocs to provide users with the ability to attach files stored in WorkDocs to an email, replace an existing email attachment with a WorkDocs link, and save attachments to WorkDocs. The Amazon WorkMail web client supports most popular browsers, including Firefox, Chrome, Safari, and Edge.

Amazon WorkMail enforces security policies that you specify for your users’ mobile devices via the Microsoft Exchange ActiveSync protocol. You can require device encryption, require that devices lock, specify requirements for device password strength, and wipe devices remotely using the AWS Management Console.

Users can access their email and calendar using all major mobile devices supporting the Microsoft Exchange ActiveSync protocol, including iPad, iPhone, Kindle Fire, Fire Phone, Android, Windows Phone, and BlackBerry 10.

Amazon WorkMail allows you to use email flow rules to filter inbound email traffic for your Amazon WorkMail organizations, which helps you reduce email from unwanted senders, route suspicious mail to junk folders, and make sure important messages are successfully delivered. Email flow rules can be applied based on specific email addresses, or entire email domains.

Amazon WorkMail scans incoming and outgoing email for spam, malware, and viruses to help protect your users from malicious email.

Amazon WorkMail provides a 50 GB mailbox size by default, eliminating the need for users to have to worry about dealing with large attachments or mailbox size restrictions.

Amazon WorkMail integrates with AWS CloudTrail. CloudTrail is a service that helps enable governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure including activity from the WorkMail console and calls made to the WorkMail administrative API. This event history simplifies security analysis, resource change tracking, and troubleshooting.

For additional information about service controls, security features and functionalities, including, as applicable, information about storing, retrieving, modifying, restricting, and deleting data, please see https://docs.aws.amazon.com/index.html. This additional information does not form part of the Documentation for purposes of the AWS Customer Agreement available at http://aws.amazon.com/agreement, or other agreement between you and AWS governing your use of AWS’s services.