Amazon WorkSpaces key capabilities

WorkSpaces DaaS uses Amazon DCV and PC-over-IP (PCoIP) to provide users with a high-quality, responsive experience.

WorkSpaces DaaS provides users with access to varying amounts of persistent storage (SSD user volumes) on AWS based on the bundle selected. Data stored on the user volume attached to the WorkSpace is automatically backed up.

WorkSpaces provides storage options for users to selectively retain elements of personalization through their profile. User settings such as bookmarks and files stored in a central storage repository like Amazon S3 or Amazon FSx can be saved at the end of a session and loaded when users start a new session for a semi-persistent experience.

WorkSpaces DaaS supports AD and non-AD domain joined virtual desktops. If you want to use Entra ID for identity management, AWS IAM Identity Center (IdC) acts as an identity broker to ensure user identity data remains synchronized between AWS and cloud-based identity providers like Entra ID. WorkSpaces DaaS also supports Intune, allowing administrators to manage an entire fleet of physical and virtual desktops through a single endpoint management system.

WorkSpaces DaaS supports Red Hat Enterprise Linux (RHEL), Rocky Linux, Amazon Linux 2, Ubuntu Desktop, and Microsoft Windows.

WorkSpaces pools supports Windows Server 2019 and Windows Server 2022.

WorkSpaces applications runs your applications on streaming instances, which provide the GPU, CPU, memory, storage, and networking capacity you need. With WorkSpaces applications, you can choose from a selection of them to optimize the performance of your applications, and reduce your overall costs. You can use General Purpose, Compute Optimized, Memory Optimized, Graphics G6, Graphics G5 and Graphics G4 families based on your use case. Users access all their applications from the same streaming instance, and a streaming instance is assigned to only one user at any time.

WorkSpaces applications offers Graphics G6, Graphics G5, and Graphics G4 instance families. For more information on available instance types and pricing, see WorkSpaces applications pricing.

WorkSpaces applications supports multiple operating systems including Windows Server 2016, Windows Server 2019, Windows Server 2022, Amazon Linux 2, Rocky Linux 8, and Red Hat Enterprise Linux 8.

WorkSpaces applications multi-session capability allows multiple users to share compute, memory, storage, and system software associated with a given instance, while continuing to enjoy the ability to auto-scale resources based on actual usage. This helps reduce solution cost and maximize resource utilization. Multi-session capability gives IT administrators the ability to adjust the number of user sessions per instance based on ther equirements of the individual users—allowing support for a wide range of user types without over provisioning. For multi-session fleets, IT admins can use out-of-the-box WorkSpaces applications / Amazon CloudWatch consoles to monitor performance of user sessions and utilization of underlying resources. In an On-Demand fleet, WorkSpaces applications multi-session capability reduces the average time it takes for users to set up their sessions on a given multi-session instance. Multi-session functionality is supported only for Windows configurations of Always-On and On-Demand fleets. Multi-session instances are charged on an hourly basis, regardless of the number user sessions running per instance. See pricing page for more detail.

Protect sensitive information from leaving the web application by controlling file transfers, printing, and copy/paste. Inline redaction automatically removes sensitive fields, ensuring confidential data remains protected even on unmanaged devices.

Reduce exposure to malicious sites and phishing directly in the service, no firewall or other services required. Restrict domains with allowlists and blocklists, and enforce trusted connections to approved apps.

Monitor browser activity with detailed logging and CloudWatch metrics. Provide audit trails to support compliance standards like HIPAA or SOC 2.

Integrates with your corporate SSO and identity providers ensuring only authorized users reach applications, consistent with enterprise identity and zero-trust strategies.

WorkSpaces offers pre-configured bundles for fast and easy deployment and highly configurable Managed Instances integrated with EC2 Reserved Instances and Savings Plans. WorkSpaces for VDI partners offers a wide range of desktop and application configurations, including persistent and non-persistent.

With WorkSpaces, you have the flexibility to bring Microsoft 365 Apps for enterprise licenses. This helps you integrate your virtual desktops with the productivity tools your employees need to get their jobs done. Learn more.

WorkSpaces thin client works with a variety of peripheral devices, including up to two monitors, keyboards, mice, headsets, webcams, and accessory hubs. See the WorkSpaces thin client user guide for a full list of tested and supported devices.

A device management service provides administrators with a complete view of their fleet including:
Inventory details - see details on thin clients in your fleet including compliance status, how long devices have been active, and registration status.
Patch management - validate and push patches based on administrator-defined schedule
Remote administration - remotely reset or de-register devices
Read more in the administration guide.

WorkSpaces thin client has received Carbon Trust verification based on measurement and estimation of the product’s carbon footprint throughout the stages of its lifecycle. Learn more