AWS wellarchitected documentation change
Summary
Updated references from 'AppStream 2.0' to 'WorkSpaces Applications' throughout the document, including service names, links, and contextual mentions.
Security assessment
The changes appear to reflect a rebranding or terminology update (AppStream 2.0 → WorkSpaces Applications) rather than addressing security vulnerabilities or introducing new security features. No security-specific content was added or modified beyond terminology alignment.
Diff
diff --git a/wellarchitected/latest/end-user-computing-lens/eucops11-bp01.md b/wellarchitected/latest/end-user-computing-lens/eucops11-bp01.md index 42dab1532..fd11bdba4 100644 --- a//wellarchitected/latest/end-user-computing-lens/eucops11-bp01.md +++ b//wellarchitected/latest/end-user-computing-lens/eucops11-bp01.md @@ -15 +15 @@ Spend time reviewing the available metrics which provide quick and insightful in -While the tools and processes required to monitor AWS EUC service health are discussed earlier, from an operational perspective there are key metrics which, at a minimum, should be gathered to build a baseline for systems health across the tiers of an Amazon WorkSpaces or AppStream 2.0 deployment. +While the tools and processes required to monitor AWS EUC service health are discussed earlier, from an operational perspective there are key metrics which, at a minimum, should be gathered to build a baseline for systems health across the tiers of an Amazon WorkSpaces or WorkSpaces Applications deployment. @@ -19 +19 @@ The following guidance discusses both the service specific metrics which should -**Amazon WorkSpaces and AppStream 2.0 Service or Instance metrics** +**Amazon WorkSpaces and WorkSpaces Applications Service or Instance metrics** @@ -68 +68 @@ CloudWatch Alarms can also be configured to send alerts when specific thresholds -**Amazon AppStream 2.0:** Amazon CloudWatch provides an automatic dashboard which gives an overview of overall Amazon AppStream 2.0 service health, including: +**Amazon WorkSpaces Applications:** Amazon CloudWatch provides an automatic dashboard which gives an overview of overall Amazon WorkSpaces Applications service health, including: @@ -119 +119 @@ CloudWatch Alarms can also be configured to send alarms when specific thresholds - * [Monitoring Amazon AppStream 2.0 Resources](https://docs.aws.amazon.com/appstream2/latest/developerguide/monitoring.html) + * [Monitoring Amazon WorkSpaces Applications Resources](https://docs.aws.amazon.com/appstream2/latest/developerguide/monitoring.html) @@ -130 +130 @@ The following services, and associated metrics, at a minimum, should be monitore -With any cloud hosted desktop and application delivery service such as Amazon WorkSpaces or Amazon AppStream 2.0, users are connecting from a remote location, across a variety of network types, to a service running in a cloud data center. Once they are connected and logged in, they are dependent upon a number of backend services which are also connected to the AWS EUC service using a variety of devices which each have their own performance characteristics. Each part of the connection process and subsequent interaction with backend services should ideally, be monitored. +With any cloud hosted desktop and application delivery service such as Amazon WorkSpaces or Amazon WorkSpaces Applications, users are connecting from a remote location, across a variety of network types, to a service running in a cloud data center. Once they are connected and logged in, they are dependent upon a number of backend services which are also connected to the AWS EUC service using a variety of devices which each have their own performance characteristics. Each part of the connection process and subsequent interaction with backend services should ideally, be monitored. @@ -134 +134 @@ With any cloud hosted desktop and application delivery service such as Amazon Wo -The following articles discuss the latency and bandwidth requirements for Amazon WorkSpaces and Amazon AppStream 2.0 and tools that can be used to validate service performance: +The following articles discuss the latency and bandwidth requirements for Amazon WorkSpaces and Amazon WorkSpaces Applications and tools that can be used to validate service performance: @@ -142 +142 @@ The following articles discuss the latency and bandwidth requirements for Amazon - * [Visualizing AppStream 2.0 session latency metrics using AWS Lambda, Amazon Kinesis Data Stream and Amazon OpenSearch Service](https://aws.amazon.com/blogs/desktop-and-application-streaming/visualizing-appstream-2-0-session-latency-metrics-using-aws-lambda-amazon-kinesis-data-stream-and-amazon-opensearch-service/) + * [Visualizing WorkSpaces Applications session latency metrics using AWS Lambda, Amazon Kinesis Data Stream and Amazon OpenSearch Service](https://aws.amazon.com/blogs/desktop-and-application-streaming/visualizing-appstream-2-0-session-latency-metrics-using-aws-lambda-amazon-kinesis-data-stream-and-amazon-opensearch-service/) @@ -153 +153 @@ The following articles discuss the latency and bandwidth requirements for Amazon -Consider deploying third party tools which proactively monitor client to server operations such as network flow between WorkSpaces, AppStream 2.0 and supporting databases, data feeds, web servers and file or print services. These data points can be used to accurately determine service degradation or trends which might identify the need to scale supporting infrastructure service up or down. +Consider deploying third party tools which proactively monitor client to server operations such as network flow between WorkSpaces, WorkSpaces Applications and supporting databases, data feeds, web servers and file or print services. These data points can be used to accurately determine service degradation or trends which might identify the need to scale supporting infrastructure service up or down. @@ -176 +176 @@ As discussed previously, both Amazon WorkSpaces and AppStream provide metrics wh -If specific issues arise that require deeper insight into Amazon WorkSpaces or Amazon AppStream 2.0 storage performance, consider using Windows Task Manager or Performance Monitor, or iostat/iotop for Linux instances, to better understand disk i/o performance. +If specific issues arise that require deeper insight into Amazon WorkSpaces or Amazon WorkSpaces Applications storage performance, consider using Windows Task Manager or Performance Monitor, or iostat/iotop for Linux instances, to better understand disk i/o performance. @@ -190 +190 @@ SAML integration with AWS EUC services is typically provided by external provide -If end-to-end single sign-on is required for Amazon WorkSpaces or AppStream 2.0 deployments which are integrated with SAML, CBA can be used to emulate a virtual smart card login for each user. While falling back to a standard AD username and password login is possible if CBA is unavailable, if you do not elect to use this option it will be essential to implement monitoring for CBA to avoid login failures. The AWS Private Certificate Authority is a resilient service by default and presents operational metrics through CloudWatch: +If end-to-end single sign-on is required for Amazon WorkSpaces or WorkSpaces Applications deployments which are integrated with SAML, CBA can be used to emulate a virtual smart card login for each user. While falling back to a standard AD username and password login is possible if CBA is unavailable, if you do not elect to use this option it will be essential to implement monitoring for CBA to avoid login failures. The AWS Private Certificate Authority is a resilient service by default and presents operational metrics through CloudWatch: @@ -206 +206 @@ As certificate-based authentication relies upon a private certificate authority -Amazon AppStream 2.0 and WorkSpaces are typically integrated with backend network file services which provide storage for user data and user profiles. These repositories are typically critical to employee productivity and should form part of end-to-end service monitoring. If Amazon FSx for Windows is being used for backend storage, a comprehensive CloudWatch dashboard is available which exposes system performance. If traditional Windows file servers are being used in EC2 or on-premises, Microsoft provides direction on how to use the SMB performance metrics to gather the relevant performance statistics. +Amazon WorkSpaces Applications and WorkSpaces are typically integrated with backend network file services which provide storage for user data and user profiles. These repositories are typically critical to employee productivity and should form part of end-to-end service monitoring. If Amazon FSx for Windows is being used for backend storage, a comprehensive CloudWatch dashboard is available which exposes system performance. If traditional Windows file servers are being used in EC2 or on-premises, Microsoft provides direction on how to use the SMB performance metrics to gather the relevant performance statistics. @@ -237 +237 @@ Web proxy and app firewall tiers are typically load balanced and auto scaled for -While anti-virus and anti-malware products are unlikely to cause systems outage, from a security perspective, being sure that Amazon WorkSpaces and AppStream 2.0 instances are being effectively protected can avoid wider service outage due to intrusion and malign interference from external bad actors. Furthermore, understanding and minimizing the impact of anti-virus and anti-malware scans, is key. +While anti-virus and anti-malware products are unlikely to cause systems outage, from a security perspective, being sure that Amazon WorkSpaces and WorkSpaces Applications instances are being effectively protected can avoid wider service outage due to intrusion and malign interference from external bad actors. Furthermore, understanding and minimizing the impact of anti-virus and anti-malware scans, is key. @@ -239 +239 @@ While anti-virus and anti-malware products are unlikely to cause systems outage, -**WorkSpaces and AppStream 2.0 instance metrics** +**WorkSpaces and WorkSpaces Applications instance metrics** @@ -241 +241 @@ While anti-virus and anti-malware products are unlikely to cause systems outage, -Amazon WorkSpaces and AppStream 2.0 compute instances are standard Windows Client/Server, or Linux instance types. They each have a network interface exposed to a customer managed VPC and can be managed and monitored in the same way as traditional desktops. +Amazon WorkSpaces and WorkSpaces Applications compute instances are standard Windows Client/Server, or Linux instance types. They each have a network interface exposed to a customer managed VPC and can be managed and monitored in the same way as traditional desktops. @@ -245 +245 @@ Amazon CloudWatch can be used to extract instance specific metrics such as CPU, -Be aware that as AppStream 2.0 is a non-persistent application and desktop delivery service, instances are terminated and destroyed when the last user session is ended (consider single session versus multi-session), this needs to be considered when gathering performance statistics or system logs. +Be aware that as WorkSpaces Applications is a non-persistent application and desktop delivery service, instances are terminated and destroyed when the last user session is ended (consider single session versus multi-session), this needs to be considered when gathering performance statistics or system logs. @@ -251 +251 @@ There are a number of utilities created by AWS employees that assist in the gath - * [Monitoring and Reporting for Amazon AppStream 2.0](https://docs.aws.amazon.com/appstream2/latest/developerguide/configure-monitoring-reporting.html) + * [Monitoring and Reporting for Amazon WorkSpaces Applications](https://docs.aws.amazon.com/appstream2/latest/developerguide/configure-monitoring-reporting.html) @@ -255 +255 @@ There are a number of utilities created by AWS employees that assist in the gath - * [Use the EUC Toolkit to manage Amazon AppStream 2.0 and Amazon WorkSpaces](https://aws.amazon.com/blogs/desktop-and-application-streaming/euc-toolkit/) + * [Use the EUC Toolkit to manage Amazon WorkSpaces Applications and Amazon WorkSpaces](https://aws.amazon.com/blogs/desktop-and-application-streaming/euc-toolkit/) @@ -260 +260 @@ There are a number of utilities created by AWS employees that assist in the gath -In summary, AWS EUC deployments are dependent on the reliability and performance of both the Amazon WorkSpaces or AppStream 2.0 services themselves and also many external systems, taking a holistic approach to management of each component of the end to end deployment is key to maintaining end user engagement and productivity. +In summary, AWS EUC deployments are dependent on the reliability and performance of both the Amazon WorkSpaces or WorkSpaces Applications services themselves and also many external systems, taking a holistic approach to management of each component of the end to end deployment is key to maintaining end user engagement and productivity.