Amazon WorkSpaces
Amazon WorkSpaces is a managed Amazon Web Services service that provisions virtual Windows or Linux desktops for users across the globe, delivering managed desktop-as-a-service (DaaS) over a secure network connection so organizations can eliminate on-premises VDI management.
Key points
- Accessible from client applications on:
- Android devices, iPads
- Windows, macOS, and Ubuntu Linux computers
- Chromebooks
- Teradici zero client devices (supported only with PCoIP)
- WorkSpaces is organized into WorkSpaces Personal (persistent, one desktop per user), WorkSpaces Pools (non-persistent, ephemeral desktops shared across a pool of users), and WorkSpaces Core (bring-your-own VDI management via partners such as Citrix and Omnissa), alongside the separate WorkSpaces Secure Browser and WorkSpaces Applications (formerly Amazon AppStream 2.0) offerings.
- Offers a choice of protocol based on device type, operating system, and network conditions:
- PCoIP — port 4172. AWS is retiring PCoIP for WorkSpaces Personal: closed to new customers July 31, 2026, with end of support October 31, 2027, because HP is discontinuing the underlying PCoIP technology.
- Amazon DCV — AWS’s own high-performance streaming protocol (successor to the older WorkSpaces Streaming Protocol/WSP) and now the single protocol for WorkSpaces Personal going forward; all new WorkSpaces features and OS support target DCV only.
- Amazon WorkSpaces Application Manager (Amazon WAM) manages applications on Windows WorkSpaces.
- Multi-factor authentication (MFA) and AWS Key Management Service (KMS) secure accounts and data.
- Each WorkSpace connects to a Amazon VPC with two elastic network interfaces (ENI) and uses AWS Directory Service.
- Deploys managed desktops and programs to remote workers without the organization investing in backend infrastructure or high-end client hardware.
- Shared responsibility: the customer is responsible for patching and updating the guest OS inside each WorkSpaces virtual desktop, unlike fully AWS-managed services such as Amazon FSx for Windows File Server or AWS Directory Service.
- Outbound traffic from WorkSpaces to malicious or disallowed websites can be filtered with AWS Network Firewall.
Pricing
- Billing takes place either monthly or hourly.