AWS workspaces: Update WorkSpaces trusted device access control instructions
Summary
Revised console navigation and wording for configuring trusted devices, including per-device-type allow/deny access options.
Security assessment
The changed line documents device-type access restrictions and allow/deny controls for WorkSpaces trusted devices, which is security-relevant access-control guidance but does not reference a specific vulnerability or incident.
Evidence
5. Under **Trusted devices** , for each device type that you want to restrict, open the dropdown and choose **Trusted Devices**. For each device type, you can also choose **Allow all** to allow access without restrictions, or **Deny all** to block access from that device type.
Diff
diff --git a/workspaces/latest/adminguide/trusted-devices.md b/workspaces/latest/adminguide/trusted-devices.md index 95fee49fb..7aaddbff0 100644 --- a//workspaces/latest/adminguide/trusted-devices.md +++ b//workspaces/latest/adminguide/trusted-devices.md @@ -101 +101 @@ After you have deployed the client certificates on the trusted devices, you can - 3. Select the directory and then choose **Actions** , **Update Details**. + 3. Choose the directory link for the directory that you want to configure. @@ -103 +103 @@ After you have deployed the client certificates on the trusted devices, you can - 4. Expand **Access Control Options**. + 4. In the **Access control options** section, choose **Edit**. @@ -105 +105 @@ After you have deployed the client certificates on the trusted devices, you can - 5. Under **For each device type, specify which devices can access WorkSpaces** , choose **Trusted Devices**. + 5. Under **Trusted devices** , for each device type that you want to restrict, open the dropdown and choose **Trusted Devices**. For each device type, you can also choose **Allow all** to allow access without restrictions, or **Deny all** to block access from that device type. @@ -109 +109 @@ After you have deployed the client certificates on the trusted devices, you can - 1. Choose **Import**. + 1. Choose **Import certificate**. @@ -115,9 +115 @@ After you have deployed the client certificates on the trusted devices, you can - 7. Specify whether other types of devices have access to WorkSpaces. - - 1. Scroll down to the **Other Platforms** section. By default, WorkSpaces Linux clients are disabled, and users can access their WorkSpaces from their iOS devices, Android devices, Web Access, Chromebooks, and PCoIP zero client devices. - - 2. Select the device types to enable and clear the device types to disable. - - 3. To block access from all selected device types, choose **Block**. - - 8. Choose **Update and Exit**. + 7. Choose **Save**.