Ggtcf

Is it tax fraud for an individual to declare non-taxable revenue as taxable income? (US tax laws)

Can I make popcorn with any corn?

What's the point of deactivating Num Lock on login screens?

LWC SFDX source push error TypeError: LWC1009: decl.moveTo is not a function

Approximately how much travel time was saved by the opening of the Suez Canal in 1869?

Is it unprofessional to ask if a job posting on GlassDoor is real?

Is it possible to do 50 km distance without any previous training?

How much RAM could one put in a typical 80386 setup?

What is a clear way to write a bar that has an extra beat?

Why is 150k or 200k jobs considered good when there's 300k+ births a month?

What does "Puller Prush Person" mean?

High voltage LED indicator 40-1000 VDC without additional power supply

How can I prevent hyper evolved versions of regular creatures from wiping out their cousins?

Client team has low performances and low technical skills: we always fix their work and now they stop collaborate with us. How to solve?

How old can references or sources in a thesis be?

How much of data wrangling is a data scientist's job?

Why are electrically insulating heatsinks so rare? Is it just cost?

How to draw a waving flag in TikZ

Paid for article while in US on F-1 visa?

Can a Cauchy sequence converge for one metric while not converging for another?

dbcc cleantable batch size explanation

Which country benefited the most from UN Security Council vetoes?

Codimension of non-flat locus

Are the number of citations and number of published articles the most important criteria for a tenure promotion?

Restrict access to amazon WorkSpace by IP Address?

How to restrict access to the AWS WorkSpace service to certains IPs?WARNING: UNPROTECTED PRIVATE KEY FILE! when trying to SSH into Amazon EC2 InstanceTrying to SSH into an Amazon Ec2 instance - permission errorConnect to Amazon (AWS) EC2 instance via browserHow can I use my users (non verified) addresses as senders with Amazon SES?Restrict HTTP Access to Elastic BeanstalkHow to restrict files to certain users in Amazon-S3How to restrict access to the AWS WorkSpace service to certains IPs?Amazon S3 Restricting Access to a Specific HTTP Referrer on Mobile AppsRunning software on amazon workspaceDo Amazon Workspaces support Docker for Windows?

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

1

1

I have a simple question which I don't think has a simple answer.

I would like to use Amazon Workspaces but a requirement would be that I can restrict the IP addresses that can access a or any workspace.

I kind of get the impression this should be possible through rules on the security group on the directory, but I'm not really sure, and I don't know where to start.

I've been unable to find any instructions for this or other examples of people having done this. Surely I'm not the first/only person to want to do this?!

Can anyone offer any pointers??

amazon-web-services

share|improve this question

asked Jan 30 '15 at 23:15

Mayb2MoroMayb2Moro

162

add a comment | 

1

1

I have a simple question which I don't think has a simple answer.

I would like to use Amazon Workspaces but a requirement would be that I can restrict the IP addresses that can access a or any workspace.

I kind of get the impression this should be possible through rules on the security group on the directory, but I'm not really sure, and I don't know where to start.

I've been unable to find any instructions for this or other examples of people having done this. Surely I'm not the first/only person to want to do this?!

Can anyone offer any pointers??

amazon-web-services

share|improve this question

asked Jan 30 '15 at 23:15

Mayb2MoroMayb2Moro

162

add a comment | 

I have a simple question which I don't think has a simple answer.

I would like to use Amazon Workspaces but a requirement would be that I can restrict the IP addresses that can access a or any workspace.

I kind of get the impression this should be possible through rules on the security group on the directory, but I'm not really sure, and I don't know where to start.

I've been unable to find any instructions for this or other examples of people having done this. Surely I'm not the first/only person to want to do this?!

Can anyone offer any pointers??

amazon-web-services

share|improve this question

asked Jan 30 '15 at 23:15

Mayb2MoroMayb2Moro

162

share|improve this question

asked Jan 30 '15 at 23:15

Mayb2MoroMayb2Moro

162

share|improve this question

asked Jan 30 '15 at 23:15

Mayb2MoroMayb2Moro

162

asked Jan 30 '15 at 23:15

Mayb2MoroMayb2Moro

162

asked Jan 30 '15 at 23:15

Mayb2MoroMayb2Moro

162

2 Answers
2

active

oldest

votes

0

Based on the Comments given by the @Mayb2Moro; he obtained information from AWS Support that the restriction based on the Security Group or VPC wouldn't be possible as the Workspaces connectivity would go via. another external endpoint [management interface in the backend].

---

Yes you are right, you need to work on the security group configured while the workspace is setup. The process goes like this,

1. Pick the security group used while the Workspace bundle was created


2. Go to the EC2 -> Security Group and select the security group and restrict them to your Office's Exit IP.

PS : Image Source - http://www.itnews.com.au/Lab/381939,itnews-labs-amazon-workspaces.aspx

share|improve this answer

edited Mar 6 '15 at 10:55

answered Feb 9 '15 at 13:10

Naveen VijayNaveen Vijay

11.6k55172

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Hi - thanks, I got this far, but couldn't see how to do point 2. Amazon have told me what I want to do is just not possible.
  
  – Mayb2Moro
  Mar 6 '15 at 10:37
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  "Unfortunately it is not possible to lock down Workspaces to only specific IP addresses. When users access Workspaces they aren't connecting through the interface that is connected to the VPC, but through a management interface on the backend. "
  
  – Mayb2Moro
  Mar 6 '15 at 10:43
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  If anyone has actually achieved this, I would love to hear how :)
  
  – Mayb2Moro
  Mar 6 '15 at 10:43
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Given that you have got the confirmation from AWS Support that the restriction based on IP wouldn't work; you have to fall back on what we do before the availability of the WorkSpaces service - VMware or Terminal Services or Remote Desktop Services etc.
  
  – Naveen Vijay
  Mar 6 '15 at 10:51
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Just curious what is the use case; with the notion of Workspace kind of environment would be targeted towards anywhere access like desktop / ipad etc.
  
  – Naveen Vijay
  Mar 6 '15 at 10:52
  

  
  
  
  

 | 
show 1 more comment

0

Now you can assign IP Access Control Groups to a Directory that is associated to your workspaces.

In the IP Access Control Group, you can specify the IPs that you wish to allow access to the workspaces.

Refer to the IP Access Control Groups for Your WorkSpaces for the official documentation.

share|improve this answer

answered Mar 9 at 1:29

J100J100

1,116413

add a comment | 

Your Answer

StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f28246194%2frestrict-access-to-amazon-workspace-by-ip-address%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

Based on the Comments given by the @Mayb2Moro; he obtained information from AWS Support that the restriction based on the Security Group or VPC wouldn't be possible as the Workspaces connectivity would go via. another external endpoint [management interface in the backend].

---

Yes you are right, you need to work on the security group configured while the workspace is setup. The process goes like this,

1. Pick the security group used while the Workspace bundle was created


2. Go to the EC2 -> Security Group and select the security group and restrict them to your Office's Exit IP.

PS : Image Source - http://www.itnews.com.au/Lab/381939,itnews-labs-amazon-workspaces.aspx

share|improve this answer

edited Mar 6 '15 at 10:55

answered Feb 9 '15 at 13:10

Naveen VijayNaveen Vijay

11.6k55172

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Hi - thanks, I got this far, but couldn't see how to do point 2. Amazon have told me what I want to do is just not possible.
  
  – Mayb2Moro
  Mar 6 '15 at 10:37
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  "Unfortunately it is not possible to lock down Workspaces to only specific IP addresses. When users access Workspaces they aren't connecting through the interface that is connected to the VPC, but through a management interface on the backend. "
  
  – Mayb2Moro
  Mar 6 '15 at 10:43
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  If anyone has actually achieved this, I would love to hear how :)
  
  – Mayb2Moro
  Mar 6 '15 at 10:43
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Given that you have got the confirmation from AWS Support that the restriction based on IP wouldn't work; you have to fall back on what we do before the availability of the WorkSpaces service - VMware or Terminal Services or Remote Desktop Services etc.
  
  – Naveen Vijay
  Mar 6 '15 at 10:51
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Just curious what is the use case; with the notion of Workspace kind of environment would be targeted towards anywhere access like desktop / ipad etc.
  
  – Naveen Vijay
  Mar 6 '15 at 10:52
  

  
  
  
  

 | 
show 1 more comment

0

Based on the Comments given by the @Mayb2Moro; he obtained information from AWS Support that the restriction based on the Security Group or VPC wouldn't be possible as the Workspaces connectivity would go via. another external endpoint [management interface in the backend].

---

Yes you are right, you need to work on the security group configured while the workspace is setup. The process goes like this,

1. Pick the security group used while the Workspace bundle was created


2. Go to the EC2 -> Security Group and select the security group and restrict them to your Office's Exit IP.

PS : Image Source - http://www.itnews.com.au/Lab/381939,itnews-labs-amazon-workspaces.aspx

share|improve this answer

edited Mar 6 '15 at 10:55

answered Feb 9 '15 at 13:10

Naveen VijayNaveen Vijay

11.6k55172

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Hi - thanks, I got this far, but couldn't see how to do point 2. Amazon have told me what I want to do is just not possible.
  
  – Mayb2Moro
  Mar 6 '15 at 10:37
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  "Unfortunately it is not possible to lock down Workspaces to only specific IP addresses. When users access Workspaces they aren't connecting through the interface that is connected to the VPC, but through a management interface on the backend. "
  
  – Mayb2Moro
  Mar 6 '15 at 10:43
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  If anyone has actually achieved this, I would love to hear how :)
  
  – Mayb2Moro
  Mar 6 '15 at 10:43
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Given that you have got the confirmation from AWS Support that the restriction based on IP wouldn't work; you have to fall back on what we do before the availability of the WorkSpaces service - VMware or Terminal Services or Remote Desktop Services etc.
  
  – Naveen Vijay
  Mar 6 '15 at 10:51
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Just curious what is the use case; with the notion of Workspace kind of environment would be targeted towards anywhere access like desktop / ipad etc.
  
  – Naveen Vijay
  Mar 6 '15 at 10:52
  

  
  
  
  

 | 
show 1 more comment

Based on the Comments given by the @Mayb2Moro; he obtained information from AWS Support that the restriction based on the Security Group or VPC wouldn't be possible as the Workspaces connectivity would go via. another external endpoint [management interface in the backend].

---

Yes you are right, you need to work on the security group configured while the workspace is setup. The process goes like this,

1. Pick the security group used while the Workspace bundle was created


2. Go to the EC2 -> Security Group and select the security group and restrict them to your Office's Exit IP.

PS : Image Source - http://www.itnews.com.au/Lab/381939,itnews-labs-amazon-workspaces.aspx

share|improve this answer

edited Mar 6 '15 at 10:55

answered Feb 9 '15 at 13:10

Naveen VijayNaveen Vijay

11.6k55172

share|improve this answer

edited Mar 6 '15 at 10:55

answered Feb 9 '15 at 13:10

Naveen VijayNaveen Vijay

11.6k55172

answered Feb 9 '15 at 13:10

Naveen VijayNaveen Vijay

11.6k55172

answered Feb 9 '15 at 13:10

Naveen VijayNaveen Vijay

11.6k55172

0

Now you can assign IP Access Control Groups to a Directory that is associated to your workspaces.

In the IP Access Control Group, you can specify the IPs that you wish to allow access to the workspaces.

Refer to the IP Access Control Groups for Your WorkSpaces for the official documentation.

share|improve this answer

answered Mar 9 at 1:29

J100J100

1,116413

add a comment | 

0

Now you can assign IP Access Control Groups to a Directory that is associated to your workspaces.

In the IP Access Control Group, you can specify the IPs that you wish to allow access to the workspaces.

Refer to the IP Access Control Groups for Your WorkSpaces for the official documentation.

share|improve this answer

answered Mar 9 at 1:29

J100J100

1,116413

add a comment | 

Now you can assign IP Access Control Groups to a Directory that is associated to your workspaces.

In the IP Access Control Group, you can specify the IPs that you wish to allow access to the workspaces.

Refer to the IP Access Control Groups for Your WorkSpaces for the official documentation.

share|improve this answer

answered Mar 9 at 1:29

J100J100

1,116413

share|improve this answer

answered Mar 9 at 1:29

J100J100

1,116413

answered Mar 9 at 1:29

J100J100

1,116413

answered Mar 9 at 1:29

J100J100

1,116413