AWS Security ChangesHomeSearch

AWS wellarchitected documentation change

Service: wellarchitected · 2025-11-07 · Documentation low

File: wellarchitected/latest/end-user-computing-lens/eucops16-bp01.md

Summary

Replaced all instances of 'Amazon AppStream 2.0' with 'Amazon WorkSpaces Applications' throughout the document, updating service references and links while maintaining the same security guidance about updates, automation, and logging.

Security assessment

The changes are purely rebranding references from AppStream 2.0 to WorkSpaces Applications without introducing new security content or addressing vulnerabilities. Existing security practices (OS patches, CloudTrail logging, automation) remain unchanged but are now associated with the updated service name.

Diff

diff --git a/wellarchitected/latest/end-user-computing-lens/eucops16-bp01.md b/wellarchitected/latest/end-user-computing-lens/eucops16-bp01.md
index 5210ce88b..8a26322af 100644
--- a//wellarchitected/latest/end-user-computing-lens/eucops16-bp01.md
+++ b//wellarchitected/latest/end-user-computing-lens/eucops16-bp01.md
@@ -15 +15 @@ Selecting an automation toolset and defining the processes that facilitate repea
-Although Amazon WorkSpaces and Amazon AppStream 2.0 are fully managed services, there are a number of touch points when maintenance the associated infrastructure and the desktop and applications delivered by the service requires periodic updates. 
+Although Amazon WorkSpaces and Amazon WorkSpaces Applications are fully managed services, there are a number of touch points when maintenance the associated infrastructure and the desktop and applications delivered by the service requires periodic updates. 
@@ -25 +25 @@ The following questions and discussions can provide you steps for improvement.
-  * **Amazon AppStream 2.0** : For AppStream 2.0, each private image used to deploy a non-persistent desktop or application experience will periodically require updates in the form of operating system patches, hotfixes, and security and application updates. As AppStream 2.0 instances are deployed from a common image, only the private image for each fleet version needs to be updated. New instances launched when users log in will automatically inherit the changes made to the private image. The customer is responsible for making these changes. 
+  * **Amazon WorkSpaces Applications** : For WorkSpaces Applications, each private image used to deploy a non-persistent desktop or application experience will periodically require updates in the form of operating system patches, hotfixes, and security and application updates. As WorkSpaces Applications instances are deployed from a common image, only the private image for each fleet version needs to be updated. New instances launched when users log in will automatically inherit the changes made to the private image. The customer is responsible for making these changes. 
@@ -29 +29 @@ The following questions and discussions can provide you steps for improvement.
-    * [Update Management in Amazon AppStream 2.0 PDF RSS Focus mode](https://docs.aws.amazon.com/appstream2/latest/developerguide/update-management.html)
+    * [Update Management in Amazon WorkSpaces Applications PDF RSS Focus mode](https://docs.aws.amazon.com/appstream2/latest/developerguide/update-management.html)
@@ -33 +33 @@ The following questions and discussions can provide you steps for improvement.
-  * Amazon AppStream 2.0 also offers an application delivery option called elastic fleets that you can use to quickly deploy and manage portable applications. For more information, see [Applications Manager](https://docs.aws.amazon.com/appstream2/latest/developerguide/app-blocks-applications.html). 
+  * Amazon WorkSpaces Applications also offers an application delivery option called elastic fleets that you can use to quickly deploy and manage portable applications. For more information, see [Applications Manager](https://docs.aws.amazon.com/appstream2/latest/developerguide/app-blocks-applications.html). 
@@ -50 +50 @@ Creating and delivering updates that are consistent and repeatable is the best w
-  * **AppStream 2.0** : AppStream 2.0 provides a management console and a corresponding API, which can be used to automate the delivery of an image builder that updates each version of a private image. As the image builder has a network interface in a customer-managed VPC, traditional software distribution tools and automation frameworks can also be used to push updates to this instance from where a new version of an image is created and assigned to fleets. 
+  * **WorkSpaces Applications** : WorkSpaces Applications provides a management console and a corresponding API, which can be used to automate the delivery of an image builder that updates each version of a private image. As the image builder has a network interface in a customer-managed VPC, traditional software distribution tools and automation frameworks can also be used to push updates to this instance from where a new version of an image is created and assigned to fleets. 
@@ -52 +52 @@ Creating and delivering updates that are consistent and repeatable is the best w
-  * AppStream 2.0 also offers an automated option called Managed Image Updates, which automates and simplifies the process of updating AppStream agent software and OS patches. For more information, see the following: 
+  * WorkSpaces Applications also offers an automated option called Managed Image Updates, which automates and simplifies the process of updating AppStream agent software and OS patches. For more information, see the following: 
@@ -54 +54 @@ Creating and delivering updates that are consistent and repeatable is the best w
-    * [Administer Your Amazon AppStream 2.0 Images](https://docs.aws.amazon.com/appstream2/latest/developerguide/administer-images.html#keep-image-updated-managed-image-updates)
+    * [Administer Your Amazon WorkSpaces Applications Images](https://docs.aws.amazon.com/appstream2/latest/developerguide/administer-images.html#keep-image-updated-managed-image-updates)
@@ -56 +56 @@ Creating and delivering updates that are consistent and repeatable is the best w
-    * [Automatically create customized AppStream 2.0 Windows images](https://aws.amazon.com/blogs/desktop-and-application-streaming/automatically-create-customized-appstream-2-0-windows-images/)
+    * [Automatically create customized WorkSpaces Applications Windows images](https://aws.amazon.com/blogs/desktop-and-application-streaming/automatically-create-customized-appstream-2-0-windows-images/)
@@ -58 +58 @@ Creating and delivering updates that are consistent and repeatable is the best w
-    * [Automate the creation of AppStream 2.0 resources using AWS CloudFormation](https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automate-the-creation-of-appstream-2-0-resources-using-aws-cloudformation.html)
+    * [Automate the creation of WorkSpaces Applications resources using AWS CloudFormation](https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automate-the-creation-of-appstream-2-0-resources-using-aws-cloudformation.html)
@@ -76 +76 @@ For more flexible backup and recovery options, consider using traditional backup
-  * **AppStream 2.0** : As AppStream 2.0 delivers tens, hundreds, or thousands of instances from a common private image, testing can be done by creating a single instance test or development fleet from a new version of an image, allowing administrators to fully test changes before assigning the image to a production fleet and making it available to users. 
+  * **WorkSpaces Applications** : As WorkSpaces Applications delivers tens, hundreds, or thousands of instances from a common private image, testing can be done by creating a single instance test or development fleet from a new version of an image, allowing administrators to fully test changes before assigning the image to a production fleet and making it available to users. 
@@ -87 +87 @@ Track specific changes to your AWS EUC environments by date and time to maintain
-For both Amazon WorkSpaces and Amazon AppStream 2.0 specifically, adopt a version numbering scheme and capturing a log of changes made to each custom bundle or private image to trace issues back to a specific image version, if required. 
+For both Amazon WorkSpaces and Amazon WorkSpaces Applications specifically, adopt a version numbering scheme and capturing a log of changes made to each custom bundle or private image to trace issues back to a specific image version, if required. 
@@ -89 +89 @@ For both Amazon WorkSpaces and Amazon AppStream 2.0 specifically, adopt a versio
-You can use AWS CloudTrail to log API calls used to make changes to both Amazon WorkSpaces and AppStream 2.0 environments. 
+You can use AWS CloudTrail to log API calls used to make changes to both Amazon WorkSpaces and WorkSpaces Applications environments. 
@@ -91 +91 @@ You can use AWS CloudTrail to log API calls used to make changes to both Amazon
-  * [Logging AppStream 2.0 API calls with AWS CloudTrail](https://docs.aws.amazon.com/appstream2/latest/developerguide/logging-using-cloudtrail.html)
+  * [Logging WorkSpaces Applications API calls with AWS CloudTrail](https://docs.aws.amazon.com/appstream2/latest/developerguide/logging-using-cloudtrail.html)
@@ -98 +98 @@ You can use AWS CloudTrail to log API calls used to make changes to both Amazon
-**Automating changes to Amazon WorkSpaces and Amazon AppStream 2.0**
+**Automating changes to Amazon WorkSpaces and Amazon WorkSpaces Applications**
@@ -104 +104 @@ By using automation, you can avoid many of the configuration drift and image con
-  * [Automatically create customized AppStream 2.0 Windows images](https://aws.amazon.com/blogs/desktop-and-application-streaming/automatically-create-customized-appstream-2-0-windows-images/)
+  * [Automatically create customized WorkSpaces Applications Windows images](https://aws.amazon.com/blogs/desktop-and-application-streaming/automatically-create-customized-appstream-2-0-windows-images/)
@@ -108 +108 @@ By using automation, you can avoid many of the configuration drift and image con
-  * [Amazon WorkSpaces and AppStream 2.0 Terraform Resources](https://registry.terraform.io/providers/hashicorp/aws/latest/docs)
+  * [Amazon WorkSpaces and WorkSpaces Applications Terraform Resources](https://registry.terraform.io/providers/hashicorp/aws/latest/docs)
@@ -112 +112 @@ By using automation, you can avoid many of the configuration drift and image con
-  * [DXC Technology creates DevSecOps and CI/CD for mainframe and Java using Amazon AppStream 2.0](https://aws.amazon.com/blogs/desktop-and-application-streaming/dxc-technology-devsecops-cicd-mainframe-amazon-appstream-2-0/)
+  * [DXC Technology creates DevSecOps and CI/CD for mainframe and Java using Amazon WorkSpaces Applications](https://aws.amazon.com/blogs/desktop-and-application-streaming/dxc-technology-devsecops-cicd-mainframe-amazon-appstream-2-0/)
@@ -118 +118 @@ By using automation, you can avoid many of the configuration drift and image con
-  * [Automation of infrastructure and application deployment for Amazon AppStream 2.0 with Terraform](https://aws.amazon.com/blogs/desktop-and-application-streaming/automation-of-infrastructure-and-application-deployment-for-amazon-appstream-2-0-with-terraform/)
+  * [Automation of infrastructure and application deployment for Amazon WorkSpaces Applications with Terraform](https://aws.amazon.com/blogs/desktop-and-application-streaming/automation-of-infrastructure-and-application-deployment-for-amazon-appstream-2-0-with-terraform/)