AWS appstream2 documentation change
Summary
Updated service references from 'AppStream 2.0' to 'WorkSpaces Applications' throughout the document. Modified VPC endpoint configuration instructions to reflect service name change.
Security assessment
The changes primarily involve rebranding/renaming of the service without altering security guidance. The existing security-related content about VPC endpoint configuration and domain restrictions remains substantively the same, just with updated service names.
Diff
diff --git a/appstream2/latest/developerguide/creating-streaming-from-interface-vpc-endpoints.md b/appstream2/latest/developerguide/creating-streaming-from-interface-vpc-endpoints.md index c7ec6a4e1..50b4daf47 100644 --- a//appstream2/latest/developerguide/creating-streaming-from-interface-vpc-endpoints.md +++ b//appstream2/latest/developerguide/creating-streaming-from-interface-vpc-endpoints.md @@ -3 +3 @@ -[Documentation](/index.html)[Amazon AppStream 2.0](/appstream2/index.html)[Administration Guide](what-is-appstream.html) +[Documentation](/index.html)[Amazon WorkSpaces Applications](/appstream2/index.html)[Administration Guide](what-is-appstream.html) @@ -7 +7 @@ -You can use an interface VPC endpoint in your Amazon Web Services account to restrict all network traffic between your Amazon VPC and AppStream 2.0 to the Amazon network. After you create this endpoint, you configure your AppStream 2.0 stack or image builder to use it. +You can use an interface VPC endpoint in your Amazon Web Services account to restrict all network traffic between your Amazon VPC and WorkSpaces Applications to the Amazon network. After you create this endpoint, you configure your WorkSpaces Applications stack or image builder to use it. @@ -11 +11 @@ You can use an interface VPC endpoint in your Amazon Web Services account to res -Before you set up interface VPC endpoints for AppStream 2.0, be aware of the following prerequisites: +Before you set up interface VPC endpoints for WorkSpaces Applications, be aware of the following prerequisites: @@ -13 +13 @@ Before you set up interface VPC endpoints for AppStream 2.0, be aware of the fol - * Internet connectivity is required to authenticate users and deliver the web assets that AppStream 2.0 requires to function. The streaming interface endpoint maintains the streaming traffic within your VPC. Streaming traffic includes pixel, USB, user input, audio, clipboard, file upload and download, and printer traffic. To allow this traffic, you must allow the domains listed in [Allowed Domains](./allowed-domains.html). After creating the VPC endpoint, you must allow the AppStream 2.0 user authentication domains. However, for the streaming gateways, you can restrict access to just <vpc-endpoint-id>.streaming.appstream.<aws-region>.vpce.amazonaws.com. Allow listing to *.amazonappstream.com is not required. The VPC endpoint fully qualified domain name replaces that dependency. + * Internet connectivity is required to authenticate users and deliver the web assets that WorkSpaces Applications requires to function. The streaming interface endpoint maintains the streaming traffic within your VPC. Streaming traffic includes pixel, USB, user input, audio, clipboard, file upload and download, and printer traffic. To allow this traffic, you must allow the domains listed in [Allowed Domains](./allowed-domains.html). After creating the VPC endpoint, you must allow the WorkSpaces Applications user authentication domains. However, for the streaming gateways, you can restrict access to just <vpc-endpoint-id>.streaming.appstream.<aws-region>.vpce.amazonaws.com. Allow listing to *.amazonappstream.com is not required. The VPC endpoint fully qualified domain name replaces that dependency. @@ -21 +21 @@ Before you set up interface VPC endpoints for AppStream 2.0, be aware of the fol - * You must have an IAM permissions policy in your AWS account that provides permissions to perform the `ec2:DescribeVpcEndpoints` API action. By default, this permission is defined in the IAM policy that is attached to the AmazonAppStreamServiceAccess role. If you have the required permissions, this service role is automatically created by AppStream 2.0, with the required IAM policies attached, when you get started with the AppStream 2.0 service in an AWS Region. For more information, see [Identity and Access Management for Amazon AppStream 2.0](./controlling-access.html). + * You must have an IAM permissions policy in your AWS account that provides permissions to perform the `ec2:DescribeVpcEndpoints` API action. By default, this permission is defined in the IAM policy that is attached to the AmazonAppStreamServiceAccess role. If you have the required permissions, this service role is automatically created by WorkSpaces Applications, with the required IAM policies attached, when you get started with the WorkSpaces Applications service in an AWS Region. For more information, see [Identity and Access Management for Amazon WorkSpaces Applications](./controlling-access.html). @@ -40 +40 @@ Before you set up interface VPC endpoints for AppStream 2.0, be aware of the fol - * For **VPC** , choose a VPC in which to create the interface endpoint. You can choose a different VPC than the VPC with AppStream 2.0 resources. + * For **VPC** , choose a VPC in which to create the interface endpoint. You can choose a different VPC than the VPC with WorkSpaces Applications resources. @@ -65 +65 @@ To update a stack to use the interface endpoint that you created for streaming s - 1. Open the AppStream 2.0 console at [https://console.aws.amazon.com/appstream2](https://console.aws.amazon.com/appstream2). + 1. Open the WorkSpaces Applications console at [https://console.aws.amazon.com/appstream2](https://console.aws.amazon.com/appstream2). @@ -94 +94 @@ Interface VPC Endpoints -Access the AppStream 2.0 API and CLI Through an Interface VPC Endpoint +Access the WorkSpaces Applications API and CLI Through an Interface VPC Endpoint