(sdd420) amazon workspaces: advanced topics and deep dive | aws re:invent 2014
DESCRIPTION
Amazon WorkSpaces is an enterprise desktop computing service in the cloud. In this session, we dive deep into configuration, administration, and advanced networking topics for WorkSpaces. We also discuss integration of WorkSpaces to your corporate active directory and best practices for enabling your WorkSpaces to access resources on your corporate intranet.TRANSCRIPT
![Page 1: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/1.jpg)
November 13, 2014 | Las Vegas, NV
Eric Schultze, Principal Product Manager, AWS
Deepak Suryanarayanan, Sr. Product Manager, AWS
![Page 2: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/2.jpg)
![Page 3: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/3.jpg)
![Page 4: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/4.jpg)
![Page 5: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/5.jpg)
![Page 6: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/6.jpg)
![Page 7: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/7.jpg)
![Page 8: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/8.jpg)
![Page 9: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/9.jpg)
![Page 10: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/10.jpg)
![Page 11: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/11.jpg)
![Page 12: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/12.jpg)
internal.exampleco.com
INTERNAL_MAIN_OU
Domain Controllers Users
Engineering
Management
Sales
Workstations
AmazonWorkSpaces
Desktops
![Page 13: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/13.jpg)
Direction Protocol Port Range Source
Inbound TCP 53 172.16.0.0/16
Inbound TCP 88 172.16.0.0/16
Inbound TCP 135 172.16.0.0/16
Inbound TCP 389 172.16.0.0/16
Inbound TCP 445 172.16.0.0/16
Inbound TCP 464 172.16.0.0/16
Inbound TCP 636 172.16.0.0/16
Inbound TCP 1024-65535 172.16.0.0/16
Inbound UDP 53 172.16.0.0/16
Inbound UDP 88 172.16.0.0/16
Inbound UDP 123 172.16.0.0/16
Inbound UDP 138 172.16.0.0/16
Inbound UDP 389 172.16.0.0/16
Inbound UDP 445 172.16.0.0/16
Inbound UDP 464 172.16.0.0/16
Inbound UDP 1812 172.16.0.0/16
![Page 14: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/14.jpg)
![Page 15: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/15.jpg)
![Page 16: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/16.jpg)
![Page 17: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/17.jpg)
![Page 18: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/18.jpg)
![Page 19: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/19.jpg)
![Page 20: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/20.jpg)
![Page 21: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/21.jpg)
Example Co
Corp Network
10.31.0.0/16
WorkSpace
VPC 172.16.0.0/16
Example Co.
AD
Connector
ENI
ENI
VPN
Connection
Active
Directory
![Page 22: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/22.jpg)
![Page 23: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/23.jpg)
![Page 24: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/24.jpg)
![Page 25: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/25.jpg)
![Page 26: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/26.jpg)
![Page 27: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/27.jpg)
![Page 28: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/28.jpg)
Custom Images with Amazon WorkSpaces
![Page 29: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/29.jpg)
Custom Images with Amazon WorkSpaces
![Page 30: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/30.jpg)
Custom Bundle with Amazon WorkSpaces
base-image-11-13-
2014
Standard-base-
bundle
Image name:
base-image-11-13-
2014
![Page 31: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/31.jpg)
Custom Images with Amazon WorkSpaces
![Page 32: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/32.jpg)
![Page 33: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/33.jpg)
Custom Images with Amazon WorkSpaces -
Lifecycle
Example-Co-base-12-13-2014
![Page 34: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/34.jpg)
Custom Bundle with Amazon WorkSpaces –
Lifecycle
Standard-base-bundle
Example-Co-base-12-13-
2014
Example-Co-base-12-13-
2014
Standard-base-bundle
Example-Co-base-11-13-2014
![Page 35: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/35.jpg)
![Page 36: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/36.jpg)
![Page 37: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/37.jpg)
![Page 38: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/38.jpg)
1. Identify your closest AWS region (use cloudping.info)
2. Build one custom image – use with different Bundles and Directories
3. Billing is monthly, not hourly
4. Use MFA
5. WorkSpace Rebuilds use latest image associated with the bundle,
plus D drive backup from the last 12 hours
![Page 39: (SDD420) Amazon WorkSpaces: Advanced Topics and Deep Dive | AWS re:Invent 2014](https://reader034.vdocument.in/reader034/viewer/2022042607/559444ce1a28ab0c308b47e4/html5/thumbnails/39.jpg)
6. Use multiple AD Connectors against the same Active Directory
(one for pre-production, one for production)
7. No data transfer charge for inbound data transfer to your WorkSpaces
(ex. web browsing, etc)
8. Use the EXACT printer driver
9. Watch for expiring AD Connector account password
10. Use policy file to control remoting features: C:\Program Files (x86)\Teradici\PCoIP
Agent\configuration\pcoip.adm