AWS Security ChangesHomeSearch

AWS workspaces medium security documentation change

Service: workspaces · 2025-10-25 · Security-related medium

File: workspaces/latest/adminguide/launch-entra-id.md

Summary

Added Windows 11 Enterprise 24H2 support, firewall configuration guidance for Microsoft Intune/Autopilot endpoints, and clarified GCCH/DoD environment incompatibility

Security assessment

The firewall guidance explicitly addresses network security configuration requirements to ensure proper communication with Microsoft security management services (Intune/Autopilot). Blocking these endpoints could prevent critical security updates and device management.

Diff

diff --git a/workspaces/latest/adminguide/launch-entra-id.md b/workspaces/latest/adminguide/launch-entra-id.md
index 5a03f9ec2..d2a63aded 100644
--- a//workspaces/latest/adminguide/launch-entra-id.md
+++ b//workspaces/latest/adminguide/launch-entra-id.md
@@ -65,0 +66,2 @@ A Microsoft Entra ID personal WorkSpaces directory contains all the information
+    * Windows 11 Enterprise 24H2 (October 2024 release)
+
@@ -71,0 +74,4 @@ A Microsoft Entra ID personal WorkSpaces directory contains all the information
+  * If you are using a firewall for your WorkSpaces, make sure it does not block the outbound traffic to the endpoints for Microsoft Intune and Windows Autopilot. Please review [Network endpoints for Microsoft Intune - Microsoft Intune](https://learn.microsoft.com/en-us/intune/intune-service/fundamentals/intune-endpoints?tabs=north-america) and [Windows Autopilot requirements](https://learn.microsoft.com/en-us/autopilot/requirements?tabs=networking) for details.
+
+  * Microsoft Entra ID directories do not support Microsoft Entra ID tenants in Government Community Cloud High (GCCH) and Department of Defense (DoD) environments.
+