AWS appstream2 documentation change
Summary
Updated product name references from 'AppStream 2.0' to 'WorkSpaces Applications' throughout the documentation, including IAM role best practices, VPC endpoint configurations, and security policy guidance.
Security assessment
The changes primarily involve rebranding/renaming of the service without altering security recommendations. While the content discusses security practices (IAM policies, VPC endpoints), there is no evidence of addressing a new vulnerability or security incident. The security guidance remains substantively unchanged except for service name updates.
Diff
diff --git a/appstream2/latest/developerguide/using-services.md b/appstream2/latest/developerguide/using-services.md index da30a2bb1..13318add8 100644 --- a//appstream2/latest/developerguide/using-services.md +++ b//appstream2/latest/developerguide/using-services.md @@ -3 +3 @@ -[Documentation](/index.html)[Amazon AppStream 2.0](/appstream2/index.html)[Administration Guide](what-is-appstream.html) +[Documentation](/index.html)[Amazon WorkSpaces Applications](/appstream2/index.html)[Administration Guide](what-is-appstream.html) @@ -11 +11 @@ AWS Identity and Access ManagementVPC endpoints -Using an IAM role to access AWS services, and being specific in the IAM policy attached to it, is a best practice that provides only the users in AppStream 2.0 sessions have access without managing additional credentials. Follow the [_best practices for using IAM Roles with AppStream 2.0_](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html#best-practices-for-using-iam-role-with-streaming-instances). +Using an IAM role to access AWS services, and being specific in the IAM policy attached to it, is a best practice that provides only the users in WorkSpaces Applications sessions have access without managing additional credentials. Follow the [_best practices for using IAM Roles with WorkSpaces Applications_](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html#best-practices-for-using-iam-role-with-streaming-instances). @@ -13 +13 @@ Using an IAM role to access AWS services, and being specific in the IAM policy a -Create [_IAM policies to protect Amazon S3 buckets_](https://docs.aws.amazon.com/appstream2/latest/developerguide/s3-iam-policy.html) that are created to persist user data in both home folders and application settings persistence. This [_prevents non-AppStream 2.0 administrators_](https://docs.aws.amazon.com/appstream2/latest/developerguide/s3-iam-policy.html#s3-iam-policy-restricted-access) from access. +Create [_IAM policies to protect Amazon S3 buckets_](https://docs.aws.amazon.com/appstream2/latest/developerguide/s3-iam-policy.html) that are created to persist user data in both home folders and application settings persistence. This [_prevents non-WorkSpaces Applications administrators_](https://docs.aws.amazon.com/appstream2/latest/developerguide/s3-iam-policy.html#s3-iam-policy-restricted-access) from access. @@ -19 +19 @@ A VPC endpoint enables private connections between your VPC and supported AWS se -In environments where automation routines or developers require making API calls for AppStream 2.0, [_create an interface VPC endpoint for AppStream 2.0 API operations_](https://docs.aws.amazon.com/appstream2/latest/developerguide/access-api-cli-through-interface-vpc-endpoint.html). For example, if there are EC2 instances in private subnets without public internet access, a VPC endpoint for AppStream 2.0 API can be used to call AppStream 2.0 API operations such as [_CreateStreamingURL_](https://docs.aws.amazon.com/appstream2/latest/APIReference/API_CreateStreamingURL.html). The following diagram shows an example setup where AppStream 2.0 API and streaming VPC endpoints are consumed by Lambda functions and EC2 instances. +In environments where automation routines or developers require making API calls for WorkSpaces Applications, [_create an interface VPC endpoint for WorkSpaces Applications API operations_](https://docs.aws.amazon.com/appstream2/latest/developerguide/access-api-cli-through-interface-vpc-endpoint.html). For example, if there are EC2 instances in private subnets without public internet access, a VPC endpoint for WorkSpaces Applications API can be used to call AppStream 2.0 API operations such as [_CreateStreamingURL_](https://docs.aws.amazon.com/appstream2/latest/APIReference/API_CreateStreamingURL.html). The following diagram shows an example setup where WorkSpaces Applications API and streaming VPC endpoints are consumed by Lambda functions and EC2 instances. @@ -25 +25 @@ _VPC endpoint_ -The streaming VPC endpoint allows you to stream sessions through a VPC endpoint. The streaming interface endpoint maintains the streaming traffic within your VPC. Streaming traffic includes pixel, USB, user input, audio, clipboard, file upload and download, and printer traffic. To use the VPC endpoint, the VPC endpoint setting must be enabled at the AppStream 2.0 stack. This serves as an alternative to streaming user sessions over the public internet from locations that have limited internet access and would benefit from accessing through a Direct Connect instance. Streaming user sessions through a VPC endpoint require the following: +The streaming VPC endpoint allows you to stream sessions through a VPC endpoint. The streaming interface endpoint maintains the streaming traffic within your VPC. Streaming traffic includes pixel, USB, user input, audio, clipboard, file upload and download, and printer traffic. To use the VPC endpoint, the VPC endpoint setting must be enabled at the WorkSpaces Applications stack. This serves as an alternative to streaming user sessions over the public internet from locations that have limited internet access and would benefit from accessing through a Direct Connect instance. Streaming user sessions through a VPC endpoint require the following: @@ -31 +31 @@ The streaming VPC endpoint allows you to stream sessions through a VPC endpoint. - * Internet connectivity is required to authenticate users and deliver the web assets that AppStream 2.0 requires to function. + * Internet connectivity is required to authenticate users and deliver the web assets that WorkSpaces Applications requires to function. @@ -36 +36 @@ The streaming VPC endpoint allows you to stream sessions through a VPC endpoint. -To learn more about restricting traffic to AWS services with AppStream 2.0, see the administration guide for [_creating and streaming from VPC endpoints_](https://docs.aws.amazon.com/appstream2/latest/developerguide/creating-streaming-from-interface-vpc-endpoints.html). +To learn more about restricting traffic to AWS services with WorkSpaces Applications, see the administration guide for [_creating and streaming from VPC endpoints_](https://docs.aws.amazon.com/appstream2/latest/developerguide/creating-streaming-from-interface-vpc-endpoints.html). @@ -38 +38 @@ To learn more about restricting traffic to AWS services with AppStream 2.0, see -When full public internet access is required, it’s a best practice to disable Internet Explorer Enhanced Security Configuration (ESC) on the Image Builder. For more information, see the AppStream 2.0 administration guide to [_disable Internet Explorer enhanced security configuration_](https://docs.aws.amazon.com/appstream2/latest/developerguide/customize-fleets.html#customize-fleets-disable-ie-esc). +When full public internet access is required, it’s a best practice to disable Internet Explorer Enhanced Security Configuration (ESC) on the Image Builder. For more information, see the WorkSpaces Applications administration guide to [_disable Internet Explorer enhanced security configuration_](https://docs.aws.amazon.com/appstream2/latest/developerguide/customize-fleets.html#customize-fleets-disable-ie-esc).