AWS appstream2 documentation change
Summary
Updated product name references from 'AppStream 2.0' to 'WorkSpaces Applications' throughout the document
Security assessment
The changes are purely rebranding updates replacing 'AppStream 2.0' with 'WorkSpaces Applications'. No security controls, vulnerabilities, or new security features were added/modified. The security implications of USB redirection and smart card authentication remain unchanged.
Diff
diff --git a/appstream2/latest/developerguide/feature-support-USB-devices-qualified.md b/appstream2/latest/developerguide/feature-support-USB-devices-qualified.md index 28d229b8b..ca2ac5c4f 100644 --- a//appstream2/latest/developerguide/feature-support-USB-devices-qualified.md +++ b//appstream2/latest/developerguide/feature-support-USB-devices-qualified.md @@ -3 +3 @@ -[Documentation](/index.html)[Amazon AppStream 2.0](/appstream2/index.html)[Administration Guide](what-is-appstream.html) +[Documentation](/index.html)[Amazon WorkSpaces Applications](/appstream2/index.html)[Administration Guide](what-is-appstream.html) @@ -9 +9 @@ USB RedirectionSmart Cards -The following sections provide information about AppStream 2.0 support for USB devices. +The following sections provide information about WorkSpaces Applications support for USB devices. @@ -22 +22 @@ The following sections provide information about AppStream 2.0 support for USB d -USB redirection is required for most local USB devices to be used during AppStream 2.0 streaming sessions. When USB redirection is required, you must [qualify the device](./qualify-usb-devices.html) before your users can use it during their AppStream 2.0 streaming sessions. After you qualify the device, users must [share the device with AppStream 2.0](./client-application-windows-how-to-share-usb-devices-user.html). With USB redirection, during AppStream 2.0 streaming sessions, users' devices are not accessible for use with local applications. +USB redirection is required for most local USB devices to be used during WorkSpaces Applications streaming sessions. When USB redirection is required, you must [qualify the device](./qualify-usb-devices.html) before your users can use it during their WorkSpaces Applications streaming sessions. After you qualify the device, users must [share the device with WorkSpaces Applications](./client-application-windows-how-to-share-usb-devices-user.html). With USB redirection, during WorkSpaces Applications streaming sessions, users' devices are not accessible for use with local applications. @@ -24 +24 @@ USB redirection is required for most local USB devices to be used during AppStre -In other cases, USB devices are already enabled for use with AppStream 2.0 and no further configuration is required. For example, smart card redirection is already enabled by default when the AppStream 2.0 client is installed. Because USB redirection isn't used when this feature is enabled, you don't need to qualify smart card readers, and users don't need to share these devices with AppStream 2.0 to use them during streaming sessions. +In other cases, USB devices are already enabled for use with WorkSpaces Applications and no further configuration is required. For example, smart card redirection is already enabled by default when the WorkSpaces Applications client is installed. Because USB redirection isn't used when this feature is enabled, you don't need to qualify smart card readers, and users don't need to share these devices with WorkSpaces Applications to use them during streaming sessions. @@ -28 +28 @@ In other cases, USB devices are already enabled for use with AppStream 2.0 and n -USB redirection is currently not supported for Linux-based fleet instances, or when using the AppStream 2.0 macOS client application. +USB redirection is currently not supported for Linux-based fleet instances, or when using the WorkSpaces Applications macOS client application. @@ -32 +32 @@ USB redirection is currently not supported for Linux-based fleet instances, or w -AppStream 2.0 supports using a smart card for Windows sign in to Active Directory-joined streaming instances and in-session authentication for streaming applications. Because smart card redirection is enabled by default, users can use smart card readers that are connected to their local computer and their smart cards without USB redirection. +WorkSpaces Applications supports using a smart card for Windows sign in to Active Directory-joined streaming instances and in-session authentication for streaming applications. Because smart card redirection is enabled by default, users can use smart card readers that are connected to their local computer and their smart cards without USB redirection. @@ -45 +45 @@ AppStream 2.0 supports using a smart card for Windows sign in to Active Director -AppStream 2.0 supports the use of Active Directory domain passwords or smart cards such as [Common Access Card (CAC)](https://www.cac.mil/Common-Access-Card) and [Personal Identity Verification (PIV)](https://piv.idmanagement.gov/) smart cards for Windows sign in to AppStream 2.0 streaming instances (fleets and image builders). Your users can use smart card readers connected to their local computer and their smart cards to sign in to an AppStream 2.0 streaming instance that is joined to a Microsoft Active Directory domain. They can also use their local smart card readers and smart cards to sign in to applications within their streaming session. +WorkSpaces Applications supports the use of Active Directory domain passwords or smart cards such as [Common Access Card (CAC)](https://www.cac.mil/Common-Access-Card) and [Personal Identity Verification (PIV)](https://piv.idmanagement.gov/) smart cards for Windows sign in to WorkSpaces Applications streaming instances (fleets and image builders). Your users can use smart card readers connected to their local computer and their smart cards to sign in to an WorkSpaces Applications streaming instance that is joined to a Microsoft Active Directory domain. They can also use their local smart card readers and smart cards to sign in to applications within their streaming session. @@ -51 +51 @@ To ensure that your users can use their smart cards for Windows sign in to Activ - * The image must be created from a base image published by AWS on or after December 28, 2020. For more information, see [AppStream 2.0 Base Image and Managed Image Update Release Notes](./base-image-version-history.html). + * The image must be created from a base image published by AWS on or after December 28, 2020. For more information, see [WorkSpaces Applications Base Image and Managed Image Update Release Notes](./base-image-version-history.html). @@ -53 +53 @@ To ensure that your users can use their smart cards for Windows sign in to Activ - * The image must use a version of the AppStream 2.0 agent released on or after January 4, 2021. For more information, see [AppStream 2.0 Agent Release Notes](./agent-software-versions.html). + * The image must use a version of the WorkSpaces Applications agent released on or after January 4, 2021. For more information, see [WorkSpaces Applications Agent Release Notes](./agent-software-versions.html). @@ -55 +55 @@ To ensure that your users can use their smart cards for Windows sign in to Activ - * Enable **Smart card sign in for Active Directory** on the AppStream 2.0 stack that your users access for streaming sessions, as described in this section. + * Enable **Smart card sign in for Active Directory** on the WorkSpaces Applications stack that your users access for streaming sessions, as described in this section. @@ -59 +59 @@ To ensure that your users can use their smart cards for Windows sign in to Activ -This setting controls only the authentication method that can be used for Windows sign in to an AppStream 2.0 streaming instance (fleet or image builder). It doesn't control the authentication method that can be used for in-session authentication, after a user signs in to a streaming instance. +This setting controls only the authentication method that can be used for Windows sign in to an WorkSpaces Applications streaming instance (fleet or image builder). It doesn't control the authentication method that can be used for in-session authentication, after a user signs in to a streaming instance. @@ -61 +61 @@ This setting controls only the authentication method that can be used for Window - * Ensure that your users have AppStream 2.0 client version 1.1.257 or later installed. For more information, see [AppStream 2.0 Client Release Notes](./client-release-versions.html). + * Ensure that your users have WorkSpaces Applications client version 1.1.257 or later installed. For more information, see [WorkSpaces Applications Client Release Notes](./client-release-versions.html). @@ -66 +66 @@ This setting controls only the authentication method that can be used for Window -By default, password sign in for Active Directory is enabled on AppStream 2.0 stacks. You can enable smart card sign in for Active Directory by performing the following steps in the AppStream 2.0 console. +By default, password sign in for Active Directory is enabled on WorkSpaces Applications stacks. You can enable smart card sign in for Active Directory by performing the following steps in the WorkSpaces Applications console. @@ -68 +68 @@ By default, password sign in for Active Directory is enabled on AppStream 2.0 st -###### To enable smart card sign in for Active Directory by using the AppStream 2.0 console +###### To enable smart card sign in for Active Directory by using the WorkSpaces Applications console @@ -70 +70 @@ By default, password sign in for Active Directory is enabled on AppStream 2.0 st - 1. Open the AppStream 2.0 console at [https://console.aws.amazon.com/appstream2](https://console.aws.amazon.com/appstream2). + 1. Open the WorkSpaces Applications console at [https://console.aws.amazon.com/appstream2](https://console.aws.amazon.com/appstream2). @@ -87 +87 @@ You can also enable **Password sign in for Active Directory** , if it's not alre -Alternatively, you can enable smart card sign in for Active Directory by using the AppStream 2.0 API, an AWS SDK, or the AWS Command Line Interface (AWS CLI). +Alternatively, you can enable smart card sign in for Active Directory by using the WorkSpaces Applications API, an AWS SDK, or the AWS Command Line Interface (AWS CLI). @@ -91 +91 @@ Alternatively, you can enable smart card sign in for Active Directory by using t -When the AppStream 2.0 client is installed, smart card redirection is enabled by default. When this feature is enabled, users can use smart card readers that are connected to their local computer and their smart cards during AppStream 2.0 streaming sessions without USB redirection. During AppStream 2.0 streaming sessions, users' smart card readers and smart cards remain accessible for use with local applications. The AppStream 2.0 client redirects the smart card API calls from users’ streaming applications to their local smart card. +When the WorkSpaces Applications client is installed, smart card redirection is enabled by default. When this feature is enabled, users can use smart card readers that are connected to their local computer and their smart cards during WorkSpaces Applications streaming sessions without USB redirection. During WorkSpaces Applications streaming sessions, users' smart card readers and smart cards remain accessible for use with local applications. The WorkSpaces Applications client redirects the smart card API calls from users’ streaming applications to their local smart card. @@ -95 +95 @@ When the AppStream 2.0 client is installed, smart card redirection is enabled by -Smart card redirection is currently not supported for Linux-based fleet instances or multi-session fleet instances, or when using the AppStream 2.0 macOS client application. +Smart card redirection is currently not supported for Linux-based fleet instances or multi-session fleet instances, or when using the WorkSpaces Applications macOS client application. @@ -99 +99 @@ Smart card redirection is currently not supported for Linux-based fleet instance -If your smart card requires middleware software to operate, the middleware software must be installed on both the user’s device, and the AppStream 2.0 streaming instance. +If your smart card requires middleware software to operate, the middleware software must be installed on both the user’s device, and the WorkSpaces Applications streaming instance. @@ -101 +101 @@ If your smart card requires middleware software to operate, the middleware softw -You can disable smart card redirection during client installation on managed devices. For more information, see [Choose Whether to Disable Smart Card Redirection](./install-client-configure-settings.html#disable-local-smart-card-support-client). If you disable smart card redirection, your users can't use their smart card reader and smart card during an AppStream 2.0 streaming session without USB redirection. In this case, you must [qualify the device](./qualify-usb-devices.html). After you qualify the device, users must [share the device with AppStream 2.0](./client-application-windows-how-to-share-usb-devices-user.html). When smart card redirection is disabled, during users' AppStream 2.0 streaming sessions, their smart card reader and smart card are not accessible for use with local applications. +You can disable smart card redirection during client installation on managed devices. For more information, see [Choose Whether to Disable Smart Card Redirection](./install-client-configure-settings.html#disable-local-smart-card-support-client). If you disable smart card redirection, your users can't use their smart card reader and smart card during an WorkSpaces Applications streaming session without USB redirection. In this case, you must [qualify the device](./qualify-usb-devices.html). After you qualify the device, users must [share the device with WorkSpaces Applications](./client-application-windows-how-to-share-usb-devices-user.html). When smart card redirection is disabled, during users' WorkSpaces Applications streaming sessions, their smart card reader and smart card are not accessible for use with local applications.