AWS workspaces-core documentation change
Summary
Updated prerequisites for WorkSpaces Core deployment with clarified requirements around control plane management, Active Directory integration, licensing models, and Microsoft license verification process
Security assessment
Changes focus on deployment requirements and licensing compliance rather than addressing security vulnerabilities. While Active Directory integration and license compliance have security implications, the modifications are clarifications of existing requirements rather than responses to specific security issues.
Diff
diff --git a/workspaces-core/latest/pg/prerequisites.md b/workspaces-core/latest/pg/prerequisites.md index 1c8950d3c..efc59908d 100644 --- a//workspaces-core/latest/pg/prerequisites.md +++ b//workspaces-core/latest/pg/prerequisites.md @@ -7 +7 @@ -To use an Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) solution, customers must meet the following requirements: +To deploy a Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) using WorkSpaces Core bundles or Managed Instances, customers must meet the following requirements: @@ -9 +9 @@ To use an Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) solu - * The customer must have a technology partner that they're working with, or be willing to build their own control plane (broker and orchestration). They must also bring their own pixel streaming protocol. + * Customers must either work with a technology partner or build and manage their own control plane. This includes brokering, orchestration, and pixel streaming capabilities. @@ -11 +11 @@ To use an Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) solu - * The customer must have Active Directory (AD connector or MAD within a customer account). + * For customers who choose to deploy using WorkSpaces Core bundles, Active Directory integration is required. This can be achieved by deploying AWS Managed Microsoft AD in the customer’s account or by using an existing on-premises or self-managed directory. @@ -13 +13 @@ To use an Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) solu - * If the customer is deploying Windows Client OS then the customer must meet the Bring Your Own License model (BYOL) criteria. For more information, see [Bring Your Own Windows desktop licenses](https://docs.aws.amazon.com/workspaces/latest/adminguide/byol-windows-images.html) in the _Amazon WorkSpaces Administration Guide_. + * Customers are expected to supply their own pixel streaming protocol, regardless of the provisioning model used. @@ -15 +15 @@ To use an Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) solu - * If the customer is deploying Windows Server OS then the customer will need to provide Remote desktop licensing. + * If the deployment includes the Windows Client operating system, customers must meet the requirements of the Bring Your Own License (BYOL) model. This includes using eligible Windows desktop licenses that are covered under Microsoft’s licensing terms for AWS. Detailed information about BYOL eligibility and deployment can be found in the [ Amazon WorkSpaces Administration Guide](https://docs.aws.amazon.com/workspaces/latest/adminguide/byol-windows-images.html). @@ -17 +17 @@ To use an Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) solu - * Windows Server license included for Amazon WorkSpaces Core instances include two Microsoft Remote Desktop connections for administrative purposes only. If you need additional Microsoft Remote Desktop connections, you can buy Remote Desktop Services User CALs with Software Assurance (SA) from Microsoft and bring them to AWS through License Mobility benefits. + * If customers are deploying desktops using the Windows Server operating system, they will need to provide Remote desktop licensing. @@ -19 +19 @@ To use an Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) solu - * If you have Microsoft Software Assurance with License Mobility, you might be able to bring your own Microsoft RDS CALs and then use them with Amazon WorkSpaces Core. For more information about how to sign up for and complete a license verification process, and to view eligibility requirements, see License Mobility. + * Amazon WorkSpaces Core includes a license that permits two Remote Desktop connections for administrative use only. To support additional concurrent user sessions, customers must acquire Microsoft Remote Desktop Services (RDS) Client Access Licenses (CALs) with active Software Assurance. These licenses can be brought to AWS through Microsoft’s License Mobility program. @@ -21 +21,9 @@ To use an Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) solu - * First, sign up and complete the Microsoft license verification form to confirm that you have eligible licenses with Software Assurance. For more information, see License Mobility through Software Assurance on the Microsoft website. In the License Mobility Verification form, provide the following information about the Authorized Mobility Partner: + * If customers have Microsoft Software Assurance with License Mobility, they might be able to bring their Microsoft RDS CALs and then use them with Amazon WorkSpaces Core. For more information about how to sign up for and complete a license verification process, and to view eligibility requirements, see License Mobility. + + * To verify license eligibility through License Mobility, complete the following steps: + + 1. Confirm that your Microsoft licenses include Software Assurance and are eligible for License Mobility. + + 2. Go to the Microsoft License Mobility Verification form. + + 3. Fill out the form using the following AWS partner details: @@ -29 +37,3 @@ To use an Amazon WorkSpaces Core-based virtual desktop infrastructure (VDI) solu - * After the form is submitted, Microsoft provides confirmation to you and to Amazon Web Services (AWS) that you have completed the verification process. + 4. Submit the form to Microsoft. + + 5. Wait for confirmation from Microsoft, which will be sent to both you and AWS upon successful verification. For more information, see Microsoft licensing on AWS. @@ -44 +54 @@ Shared responsibility model -Infrastructure setup +Deployment with WorkSpaces Core bundles