AWS Security ChangesHomeSearch

AWS wellarchitected documentation change

Service: wellarchitected · 2025-11-07 · Documentation low

File: wellarchitected/latest/end-user-computing-lens/delivering-native-windows-and-linux-applications.md

Summary

Replaced all references to 'Amazon AppStream 2.0' with 'Amazon WorkSpaces Applications' throughout the document, updating service names and deployment scenario examples.

Security assessment

The changes are purely branding updates to reflect the transition from AppStream 2.0 to WorkSpaces Applications. No security vulnerabilities, mitigations, or new security features are introduced. Existing security-related statements (e.g., encrypted virtual channels, access controls) remain unchanged except for the service name.

Diff

diff --git a/wellarchitected/latest/end-user-computing-lens/delivering-native-windows-and-linux-applications.md b/wellarchitected/latest/end-user-computing-lens/delivering-native-windows-and-linux-applications.md
index 05e1381fb..428b53eb9 100644
--- a//wellarchitected/latest/end-user-computing-lens/delivering-native-windows-and-linux-applications.md
+++ b//wellarchitected/latest/end-user-computing-lens/delivering-native-windows-and-linux-applications.md
@@ -5 +5 @@
-Key advantages of application virtualization Common Amazon AppStream 2.0 deployment scenarios
+Key advantages of application virtualization Common Amazon WorkSpaces Applications deployment scenarios
@@ -29 +29 @@ Application virtualization has become one of the de facto methods of reducing th
-Amazon AppStream 2.0 delivers a service which accommodates the application delivery models and the associated advantages which are mentioned in the preceding section. The following diagram illustrates a typical deployment of the AppStream 2.0 service. 
+Amazon WorkSpaces Applications delivers a service which accommodates the application delivery models and the associated advantages which are mentioned in the preceding section. The following diagram illustrates a typical deployment of the WorkSpaces Applications service. 
@@ -33 +33 @@ Amazon AppStream 2.0 delivers a service which accommodates the application deliv
-Prior to subscribing to the AppStream 2.0 service, the customer must create their own AWS landing zone and VPC, which will typically deploy subnets across multiple resilient Availability Zones. It is from these subnets that the application machine instances will communicate with external services. 
+Prior to subscribing to the WorkSpaces Applications service, the customer must create their own AWS landing zone and VPC, which will typically deploy subnets across multiple resilient Availability Zones. It is from these subnets that the application machine instances will communicate with external services. 
@@ -43 +43 @@ Once the image is created using the image builder, a fleet of application machin
-The final step in providing visibility of the service to your end users is to create an application stack. This construct defines the naming convention for the application set, which applications will be visible to various users and groups, home drive and application persistence settings, and policy controls to limit access to clipboard, file transfer, and printing. Amazon AppStream 2.0 offers built-in storage for home drives and application settings in an Amazon S3 storage location, but other file sharing and profile management solutions such as Google Drive, OneDrive, WorkDocs, or using the AWS Windows FSx file service and FSLogix for profile management are possible. 
+The final step in providing visibility of the service to your end users is to create an application stack. This construct defines the naming convention for the application set, which applications will be visible to various users and groups, home drive and application persistence settings, and policy controls to limit access to clipboard, file transfer, and printing. Amazon WorkSpaces Applications offers built-in storage for home drives and application settings in an Amazon S3 storage location, but other file sharing and profile management solutions such as Google Drive, OneDrive, WorkDocs, or using the AWS Windows FSx file service and FSLogix for profile management are possible. 
@@ -45 +45 @@ The final step in providing visibility of the service to your end users is to cr
-## Common Amazon AppStream 2.0 deployment scenarios
+## Common Amazon WorkSpaces Applications deployment scenarios
@@ -53 +53 @@ User scenario: A customer was struggling to maintain a fleet of 250 laptop devic
-Amazon AppStream 2.0 provides a system to deliver a common set of applications to thousands of users from a single image. By maintaining a single image and using robust version control, a single set of applications can be delivered, updated, rolled out, and quickly rolled back if required. This customer installed the Amazon AppStream 2.0 client and delivered the required applications virtually to every laptop without needing to install local copies on every device. The applications delivered from Amazon AppStream 2.0 appeared as natively integrated into the Windows user interface, making the change almost seamless to the end users. 
+Amazon WorkSpaces Applications provides a system to deliver a common set of applications to thousands of users from a single image. By maintaining a single image and using robust version control, a single set of applications can be delivered, updated, rolled out, and quickly rolled back if required. This customer installed the Amazon WorkSpaces Applications client and delivered the required applications virtually to every laptop without needing to install local copies on every device. The applications delivered from Amazon WorkSpaces Applications appeared as natively integrated into the Windows user interface, making the change almost seamless to the end users. 
@@ -59 +59 @@ Amazon AppStream 2.0 provides a system to deliver a common set of applications t
-Amazon AppStream 2.0 was selected here, as it facilitates the automated update of a centralized application image, allowing new application updates to be quickly installed and pushed out to thousands of users in a short time frame. Rollback is also quick and seamless, by reverting to a known good image if problems are detected in an application release. 
+Amazon WorkSpaces Applications was selected here, as it facilitates the automated update of a centralized application image, allowing new application updates to be quickly installed and pushed out to thousands of users in a short time frame. Rollback is also quick and seamless, by reverting to a known good image if problems are detected in an application release. 
@@ -65 +65 @@ Amazon AppStream 2.0 was selected here, as it facilitates the automated update o
-Amazon AppStream 2.0 can deliver applications into a standard HTML5 browser interface, removing the need to install client software on unmanaged devices. In this case, the customer was able to maintain complete control over the application set being delivered, allowing their business partners to securely access their services from a simple browser interface. 
+Amazon WorkSpaces Applications can deliver applications into a standard HTML5 browser interface, removing the need to install client software on unmanaged devices. In this case, the customer was able to maintain complete control over the application set being delivered, allowing their business partners to securely access their services from a simple browser interface. 
@@ -71 +71 @@ Amazon AppStream 2.0 can deliver applications into a standard HTML5 browser inte
-The customer can fast-track access to parent company assets from their new acquisition using Amazon AppStream 2.0, which provides remote access to the required applications over the internet while also being able to mandate the strict authentication requirements of the parent company. 
+The customer can fast-track access to parent company assets from their new acquisition using Amazon WorkSpaces Applications, which provides remote access to the required applications over the internet while also being able to mandate the strict authentication requirements of the parent company. 
@@ -77 +77 @@ The customer can fast-track access to parent company assets from their new acqui
-As an ISV, being able to minimize the cost of delivering their applications using the service-oriented approach of Amazon AppStream 2.0 allowed this customer to maintain their competitive advantage and to maximize their own revenues. As Amazon AppStream 2.0 application machine instances are charged at an hourly rate (or by the second for Elastic instances), it is simple to calculate the delivery costs for different service levels based on increasing hardware capabilities. 
+As an ISV, being able to minimize the cost of delivering their applications using the service-oriented approach of Amazon WorkSpaces Applications allowed this customer to maintain their competitive advantage and to maximize their own revenues. As Amazon WorkSpaces Applications application machine instances are charged at an hourly rate (or by the second for Elastic instances), it is simple to calculate the delivery costs for different service levels based on increasing hardware capabilities. 
@@ -83 +83 @@ As an ISV, being able to minimize the cost of delivering their applications usin
-Amazon AppStream 2.0 fleets can be configured to scale up or down based on several criteria, such as the number of required instances or on a time schedule. The ability to scale and only pay for what you use was a compelling factor in this customer's adoption of the service. 
+Amazon WorkSpaces Applications fleets can be configured to scale up or down based on several criteria, such as the number of required instances or on a time schedule. The ability to scale and only pay for what you use was a compelling factor in this customer's adoption of the service. 
@@ -89 +89 @@ Amazon AppStream 2.0 fleets can be configured to scale up or down based on sever
-Amazon AppStream 2.0 provides secure remote internet access by default. All that is required to access your application set is a supported endpoint device such as a desktop, laptop, or mobile device. If the user cannot install a local Amazon AppStream 2.0 client, access is possible using an HTML5 browser. Following the adoption of Amazon AppStream 2.0, this customer can now offer remote working to their key staff, allowing them to be productive if travel to the office is disrupted or if personal circumstances mean that office attendance is difficult. 
+Amazon WorkSpaces Applications provides secure remote internet access by default. All that is required to access your application set is a supported endpoint device such as a desktop, laptop, or mobile device. If the user cannot install a local Amazon WorkSpaces Applications client, access is possible using an HTML5 browser. Following the adoption of Amazon WorkSpaces Applications, this customer can now offer remote working to their key staff, allowing them to be productive if travel to the office is disrupted or if personal circumstances mean that office attendance is difficult. 
@@ -95 +95 @@ Amazon AppStream 2.0 provides secure remote internet access by default. All that
-Amazon AppStream 2.0 can deliver Windows or Linux applications, virtually, to a diverse endpoint OS system combination such as macOS, Linux, Windows, or mobile devices while maintaining the native user experience of the application. This customer was able to standardize the delivery of a key Windows application to their supported OS systems. 
+Amazon WorkSpaces Applications can deliver Windows or Linux applications, virtually, to a diverse endpoint OS system combination such as macOS, Linux, Windows, or mobile devices while maintaining the native user experience of the application. This customer was able to standardize the delivery of a key Windows application to their supported OS systems. 
@@ -101 +101 @@ Amazon AppStream 2.0 can deliver Windows or Linux applications, virtually, to a
-Amazon AppStream 2.0 offers access to several OS systems versions in the Windows server and Amazon Linux line-up. You can select a later operating system version and perform exhaustive testing of your application set before migrating to this new version in a methodical fashion. No additional infrastructure needs to be deployed, and the test environment can be quickly decommissioned after testing is complete. 
+Amazon WorkSpaces Applications offers access to several OS systems versions in the Windows server and Amazon Linux line-up. You can select a later operating system version and perform exhaustive testing of your application set before migrating to this new version in a methodical fashion. No additional infrastructure needs to be deployed, and the test environment can be quickly decommissioned after testing is complete. 
@@ -107 +107 @@ Amazon AppStream 2.0 offers access to several OS systems versions in the Windows
-Amazon AppStream 2.0 is delivered as a service using the AWS Cloud, which invests heavily in environmentally friendly data centers, providing businesses with a cost-effective way of realizing regional environmental targets with minimal effort. Thin or zero client devices can be deployed to access AppStream services, removing the power, heat, and recycling overheads of traditional endpoint devices. 
+Amazon WorkSpaces Applications is delivered as a service using the AWS Cloud, which invests heavily in environmentally friendly data centers, providing businesses with a cost-effective way of realizing regional environmental targets with minimal effort. Thin or zero client devices can be deployed to access AppStream services, removing the power, heat, and recycling overheads of traditional endpoint devices. 
@@ -113 +113 @@ Amazon AppStream 2.0 is delivered as a service using the AWS Cloud, which invest
-Accessing applications using Amazon AppStream 2.0 moves the execution of applications into a centralized and secure AWS Cloud environment which can be more tightly controlled than a distributed application delivery approach. Amazon Appstream 2.0 virtual channels which control clipboard, local file access, and printing can also be disabled, significantly reducing the likelihood of data leakage to uncontrolled endpoint devices and locations. As the applications are streamed to remote users, only delta changes in the application display are streamed over an encrypted virtual channel, securing information exchanged between client and server. 
+Accessing applications using Amazon WorkSpaces Applications moves the execution of applications into a centralized and secure AWS Cloud environment which can be more tightly controlled than a distributed application delivery approach. Amazon Appstream 2.0 virtual channels which control clipboard, local file access, and printing can also be disabled, significantly reducing the likelihood of data leakage to uncontrolled endpoint devices and locations. As the applications are streamed to remote users, only delta changes in the application display are streamed over an encrypted virtual channel, securing information exchanged between client and server. 
@@ -119 +119 @@ Accessing applications using Amazon AppStream 2.0 moves the execution of applica
-Amazon AppStream 2.0 runs as an AWS service in many Regions across the globe. Accessing client applications using Amazon AppStream 2.0 verifies that they run near your other AWS services, maximizing network performance between the client and the data being manipulated. 
+Amazon WorkSpaces Applications runs as an AWS service in many Regions across the globe. Accessing client applications using Amazon WorkSpaces Applications verifies that they run near your other AWS services, maximizing network performance between the client and the data being manipulated. 
@@ -125 +125 @@ Amazon AppStream 2.0 runs as an AWS service in many Regions across the globe. Ac
-Amazon AppStream 2.0 runs in 15 AWS Regions, which means that deploying a training application with global reach is simply a matter of deploying Amazon AppStream 2.0 from multiple Regions. As Amazon AppStream 2.0 instance charges are based on hourly usage and scale across a wide range of instance types, you can deliver a range of different training courses with a predictable baseline cost. 
+Amazon WorkSpaces Applications runs in 15 AWS Regions, which means that deploying a training application with global reach is simply a matter of deploying Amazon WorkSpaces Applications from multiple Regions. As Amazon WorkSpaces Applications instance charges are based on hourly usage and scale across a wide range of instance types, you can deliver a range of different training courses with a predictable baseline cost. 
@@ -129 +129 @@ Amazon AppStream 2.0 runs in 15 AWS Regions, which means that deploying a traini
-**User scenario:** We are an engineering company with significant requirements in terms of graphics processing for our development applications. How can Amazon AppStream 2.0 deliver the performance we need to take advantage of application virtualization? 
+**User scenario:** We are an engineering company with significant requirements in terms of graphics processing for our development applications. How can Amazon WorkSpaces Applications deliver the performance we need to take advantage of application virtualization? 
@@ -131 +131 @@ Amazon AppStream 2.0 runs in 15 AWS Regions, which means that deploying a traini
-Amazon AppStream 2.0 offers several graphics instance types offering NVidia T4 GPUs with up to 64Gb memory, which is adequate for a wide range of engineering application needs. Furthermore, the Amazon DCV protocol used by Amazon AppStream 2.0 to deliver remote access to your applications is highly optimized to deliver the best performance for highly graphical applications over a wide range of network conditions. 
+Amazon WorkSpaces Applications offers several graphics instance types offering NVidia T4 GPUs with up to 64Gb memory, which is adequate for a wide range of engineering application needs. Furthermore, the Amazon DCV protocol used by Amazon AppStream 2.0 to deliver remote access to your applications is highly optimized to deliver the best performance for highly graphical applications over a wide range of network conditions.