AWS workspaces documentation change
Summary
Added end-of-life notice for Amazon Linux 2 (June 30, 2026), updated technical stack differences, removed region availability limitations for DCV bundles, and updated smart card authentication section to specify Amazon Linux 2 support.
Security assessment
Changes focus on deprecation notices and feature clarifications without addressing vulnerabilities. The smart card update specifies deprecated implementation but doesn't indicate security flaws. No CVE references or vulnerability fixes are mentioned.
Diff
diff --git a/workspaces/latest/adminguide/manage_linux_workspace.md b/workspaces/latest/adminguide/manage_linux_workspace.md index 385ba14a0..bc2bb528e 100644 --- a//workspaces/latest/adminguide/manage_linux_workspace.md +++ b//workspaces/latest/adminguide/manage_linux_workspace.md @@ -7 +7 @@ -Control DCV behavior on Amazon Linux WorkSpacesConfigure clipboard redirection for DCV Amazon Linux WorkSpacesEnable or disable audio-in redirection for DCV Amazon Linux WorkSpacesEnable or disable time zone redirection for DCV Amazon Linux WorkSpacesControl PCoIP Agent behavior on Amazon Linux WorkSpacesConfigure clipboard redirection for PCoIP Amazon Linux WorkSpacesEnable or disable audio-in redirection for PCoIP Amazon Linux WorkSpacesEnable or disable time zone redirection for PCoIP Amazon Linux WorkSpacesGrant SSH access to Amazon Linux WorkSpaces administratorsOverride the default shell for Amazon Linux WorkSpacesProtect custom repositories from unauthorized accessUse the Amazon Linux Extras Library repositoryUse smart cards for authentication on Linux WorkSpacesConfigure device proxy server settings for internet access +Control DCV behavior on Amazon Linux WorkSpacesConfigure clipboard redirection for DCV Amazon Linux WorkSpacesEnable or disable audio-in redirection for DCV Amazon Linux WorkSpacesEnable or disable time zone redirection for DCV Amazon Linux WorkSpacesControl PCoIP Agent behavior on Amazon Linux WorkSpacesConfigure clipboard redirection for PCoIP Amazon Linux WorkSpacesEnable or disable audio-in redirection for PCoIP Amazon Linux WorkSpacesEnable or disable time zone redirection for PCoIP Amazon Linux WorkSpacesGrant SSH access to Amazon Linux WorkSpaces administratorsOverride the default shell for Amazon Linux WorkSpacesProtect custom repositories from unauthorized accessUse the Amazon Linux Extras Library repositoryUse smart cards for authentication on Amazon Linux 2 WorkSpacesConfigure device proxy server settings for internet access @@ -11 +11,14 @@ Control DCV behavior on Amazon Linux WorkSpacesConfigure clipboard redirection f -For workloads that require RPM Package Manager (RPM), we recommend using [ Red Hat Enterprise Linux](https://docs.aws.amazon.com/workspaces/latest/adminguide/manage_rhel_workspace.html) or [Rocky Linux](https://docs.aws.amazon.com/workspaces/latest/adminguide/manage_rockylinux_workspace.html). Amazon Linux 2 may not provide the latest versions of some applications and libraries, such as Firefox and glibc, that you may need. +###### Important + +**Amazon Linux 2 reaches end-of-life on June 30, 2026.** No new Amazon Linux 2 WorkSpaces can be created. Existing Amazon Linux 2 WorkSpaces should be migrated to Ubuntu, Red Hat Enterprise Linux, or Rocky Linux before this date. For migration instructions, see [Migrate a Linux WorkSpace to a different operating system](./migrate-linux-workspaces.html). + +Amazon Linux 2 WorkSpaces use a legacy technology stack that differs from current Linux WorkSpaces: + + * **Active Directory integration:** Winbind (modern Linux WorkSpaces use SSSD) + + * **Streaming protocol:** PCoIP or DCV (modern Linux WorkSpaces use DCV exclusively) + + * **Desktop environment:** MATE (GNOME 2) (modern Linux WorkSpaces use GNOME 3.x) + + + @@ -27,3 +40 @@ The behavior of DCV is controlled by configuration settings in the `wsp.conf` fi - * Amazon Linux WorkSpaces on DCV bundles currently have the following limitations: - - * Currently only available in the AWS GovCloud (US-West) and AWS GovCloud (US-East). + * Amazon Linux WorkSpaces on DCV bundles have the following limitations: @@ -282 +293 @@ If you are using the Amazon Linux repository, your Amazon Linux WorkSpaces must -## Use smart cards for authentication on Linux WorkSpaces +## Use smart cards for authentication on Amazon Linux 2 WorkSpaces @@ -284 +295 @@ If you are using the Amazon Linux repository, your Amazon Linux WorkSpaces must -Linux WorkSpaces on DCV bundles allow the use of [Common Access Card (CAC)](https://www.cac.mil/Common-Access-Card) and [Personal Identity Verification (PIV)](https://piv.idmanagement.gov/) smart cards for authentication. For more information, see [Use smart cards for authentication in WorkSpaces Personal](./smart-cards.html). +Amazon Linux 2 WorkSpaces on DCV bundles allow the use of [Common Access Card (CAC)](https://www.cac.mil/Common-Access-Card) and [Personal Identity Verification (PIV)](https://piv.idmanagement.gov/) smart cards for authentication. The Amazon Linux 2 smart card implementation uses a different configuration than modern Linux WorkSpaces. For more information, see [Enable smart cards for Amazon Linux 2 WorkSpaces (deprecated)](./smart-cards.html#smart-cards-amazon-linux-workspaces). @@ -328 +339 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Manage Windows WorkSpaces +Manage your Linux WorkSpaces @@ -330 +341 @@ Manage Windows WorkSpaces -Manage your Ubuntu WorkSpaces +Optimize for real-time communication