This document provides an overview and agenda for Amazon WorkSpaces, a fully managed desktop service in the cloud. It discusses customer challenges with traditional virtual desktop infrastructure that WorkSpaces addresses like cost control and managing applications across devices. The benefits of WorkSpaces are simple and pay-as-you-go access to desktops that integrate with other AWS services and support multiple devices. Common use cases and additional complementary AWS services like WorkDocs and Directory Services are also reviewed. The presentation concludes with a demo and instructions for getting started with WorkSpaces.
2. Agenda
• Customer Challenges: The Case for Virtual Desktops
• Why Amazon WorkSpaces?
• Benefits of Amazon WorkSpaces
• Common Use Cases
• Demo
• How to Get Started
3. Customer Challenges: The Case for Virtual
Desktops
• Pressure to control costs per user
• Increased demand for corporate applications on multiple devices
• Support for BYOD while enforcing security policies across devices
• Resource intense infrastructure upgrade cycles
• Traditional VDI requires significant investment of time and money
• Complexity associated with managing custom images for
departments or business functions (Finance, HR, Engineering, etc.)
4. Why Amazon WorkSpaces?
Amazon WorkSpaces On Premise Virtual Desktop
Set up time takes minutes to hour Set up time takes weeks to months
$0 upfront investment CAPEX
Add or delete 10s, 100s or 1000s of
WorkSpaces on demand
Scaling requires advance planning or
under-utilized virtual desktops
Support for multiple devices Limited device support
Easy integration with other pay as you
go AWS services
Integration may vary by vendor
Choice of Availability Zones to support a
distributed workforce
Requires infrastructure deployment in
multiple locations
5. Benefits of Amazon WorkSpaces
• Simple to use – fully managed, pay as you go
• Keep your data secure and available
• Deploy and manage applications via WorkSpaces Application
Manager
• Choose the hardware and software you need
• Support for multiple devices – seamlessly move session from
desktop to tablet or smartphone
• Integration with your corporate directory
6. Common Use Cases
Student WorkSpaces Remote Employees Seasonal Workers
Developer WorkSpaces Mobile Device Access Secure WorkSpaces
8. Additional Services that Complement WorkSpaces
Amazon Directory
Services
Amazon
WorkDocs
Amazon WorkSpaces
Application Manager
AWS Marketplace
for Desktop Apps
Click on the icon to learn more about each service
9. Amazon Directory Services
• AWS Directory Service is a managed service that allows you to
connect your Amazon WorkSpaces with an existing on-premises
Microsoft Active Directory or to set up a new, stand-alone directory
in the AWS Cloud
• Simple Active Directory includes snapshot backups and point-in-
time recovery
• AWS takes care of the “undifferentiated heavy-lifting” directory
management tasks including patch management and host
monitoring
• Directories are deployed in multiple Availability Zones for high
availability
10. Amazon WorkDocs
• Fully managed, secure, enterprise document and storage and
sharing service
• All data stored in WorkDocs is encrypted in transit and at rest.
Administrators can view audit logs to track file and user activity by
time
• Integrate with Active Directory if you chose
• Comment on documents, send them to others for feedback, and
upload new versions without having to email files as attachments
• Accessible anywhere, anytime from your laptop, desktop computer,
tablet or smartphone
• Single sign-on (SSO) support and integration with Amazon
WorkSpaces
11. Amazon WorkSpaces Application Manager
• Amazon WorkSpaces Application Manager (Amazon
WAM) offers a fast, flexible, and secure way to deploy
and manage applications for Amazon WorkSpaces
• Amazon WAM accelerates software deployment,
upgrades, patching, and retirement by packaging
Microsoft Windows desktop applications into virtualized
application containers
• Applications run on the end-user’s Amazon WorkSpaces
instance as though they are natively installed
12. AWS Marketplace for Desktop Applications
• Marketplace for popular desktop applications
• Provision to Amazon WorkSpaces desktops
• Pay by the month
• Over 100 desktop applications available today across 11
categories
13. Corporate Directory Integration
Subnet 2
Subnet 1
AZ ‘A’
AZ ‘B’
Workspaces API
End-point
Customer
Network
VPN
Connection
OAuth
Gateway
Public IP
Secure Auth (443)
Public IP
WS
User1
Public IP
WS
User2
On-premises
Domain Controllers
Directory
Join
Directory
Join
WorkSpaces
Connect
WorkSpaces
Connect
On-premises
Resources
14. Resource Access
Subnet 2
AZ ‘A’
AZ ‘B’
Workspaces API
End-point
(Customer
Network)
VPN
Connection
OAuth
Gateway
Public IP
Secure Auth (443)
Public IP
WS
User1
Public IP
WS
User2
On-premises
Domain Controllers
On-premises
Resources
Subnet 1 Subnet 3
Subnet 4
16. How to Get Started with Amazon WorkSpaces
1. Create an AWS account
2. Choose an Amazon WorkSpace bundle and assign it to
a user
3. The user will receive an email notification with
instructions for connecting to their Amazon WorkSpace
4. Contact your AWS Account Representative or email
aws-edu-workspaceswebinar@amazon.com for
information about an Amazon WorkSpaces Trial Offer
17. Amazon WorkSpaces Availability
Amazon WorkSpaces is available to all customers!
AWS Region Availability:
• US East (N.Virginia)
• US West (Oregon)
• EU (Ireland)
• Asia Pacific (Sydney, Tokyo, Singapore)
18. Hardware Options
Value 1 vCPU, 2 GiB Memory, 10 GB User Storage $25 / mo
Standard 2 vCPU, 4 GiB Memory, 50 GB User Storage $35 / mo
Performance 2 vCPU, 7.5 GiB Memory, 100 GB User Storage $60 / mo
Bundles & Pricing
Software Options
Value,
Standard,
Performance
Utilities (Internet Explorer 11, Firefox, 7-Zip) No additional charge
Value Plus,
Standard Plus,
Performance Plus
Microsoft Office Professional, Trend Micro Worry-Free
Business Security Services, Utilities (Internet Explorer 11,
Firefox, WinZip)
Additional $15 / mo
*Reflects price per user per month in North America. Pricing varies by AWS Region.
*No additional charge for custom images.
Add News & Announcements related to WAM
How do I administer VDI?
Control costs per user
IT departments are always challenged to balance quality of service with cost.
Increased demand for corporate applications on multiple devices
The consumerization of mobile devices and applications has increased the demand for IT to support corporate applications on smartphones and tablets – particularly from executives. Workforces are becoming increasingly diverse with more employees working from home, seasonal worker and other scenarios which don’t involve the traditional corporate-owned PC.
Support for BYOD
More corporations are moving away from providing hardware such as mobile phones to employees. Support for BYOD has become increasingly popular.
Resource intense infrastructure upgrade cycles
Application remediation is the most expensive cost of ownership related to infrastructure upgrades. IT must find budget for hardware, software, and training/admin support (Example: XP upgrade cycle)
Traditional VDI requires a significant investment in infrastructure and licensing to make the leap from physical infrastructure to virtualized machines. (cost can be up to 4x and the success rate for virtualization projects is ~35% due to user scope creep)
Enhance security of corporate resources
Help protect intellectual property against asset theft (mobile device management – wipe devices remotely) Ex: Share a story about students or execs that have had mobile devices or laptops lost or stolen
Why Amazon WorkSpaces?
Amazon WorkSpaces helps customers address all these challenges. In the AWS Cloud, you have access to infrastructure that allows you to setup resources in minutes and remove them when you no longer need them. Pay only for what you use on a monthly basis.
Amazon WorkSpaces is a managed desktop computing service in the cloud.
Requires not upfront investment or ongoing maintenance
Support any number of users; access to hundreds of desktops instantly; add or remove users on a monthly basis
Amazon WorkSpaces allows customers to easily provision cloud-based desktops that allow end-users to access the documents, applications and resources they need with the device of their choice
Customers can provision a high-quality cloud desktop experience for any number of users at a cost that is highly competitive with traditional desktops and half the cost of most virtual desktop infrastructure (VDI) solutions.
Ask the customer: What are some potential uses for WorkSpaces in your organization?
Simple to Use - fully managed, pay as you go
Amazon WorkSpaces makes it easy to manage your desktop computing infrastructure by eliminating the need for up-front investments and avoiding the complexity of maintaining, patching, and managing a large physical desktop environment or a complex virtual desktop infrastructure (VDI) solution.
Keep Your Data Secure and Available
Amazon WorkSpaces provides each user with access to persistent storage in the AWS cloud. When users access their cloud desktops using Amazon WorkSpaces, you control whether your corporate data is stored on multiple client devices, helping you keep your data secure.
Deploy and Manage Applications
Amazon WorkSpaces Application Manager (Amazon WAM) offers a fast, flexible, and secure way for you to package, deploy, and update your organization's desktop applications for Amazon WorkSpaces.
Choose the hardware and software you need
Amazon WorkSpaces offers a choice of bundles providing different amounts of CPU, memory, and storage so you can match your Amazon WorkSpaces to your requirements. Amazon WorkSpaces offers preinstalled applications (including Microsoft Office) or you can bring your own licensed software.
Support for multiple devices
Users can access their Amazon WorkSpaces using their choice of device, such as a laptop computer (Mac OS or Windows,) tablet (iPad, Kindle Fire, or Android,) or zero clients.
Integration with your corporate directory
Amazon WorkSpaces securely integrates with your corporate Active Directory so that your users can continue using their existing enterprise credentials to seamlessly access company resources. This also makes it easy to manage your WorkSpaces using familiar systems management tools.
Other Use Cases
Point of Sale (Ex: “Mason Money” at university level) – how does this actually with WorkSpaces?
Kiosk – pay for parking, parking violations, etc.
Future vision for this slide: The Presenter clicks icon for each use case to see a description of the service, customer references/case study.
Johnson & Johnson - for seasonal, remote & mobile access (we will have an answer in May 2015 if we can reference J&J)
Student/Employee WorkSpaces - Texas A&M and Netflix
Secure Workspaces = Vertafore Case Study (SaaS for Healthcare)
WWPS Contact: Carina Veksler
WorkSpaces Product Manager: Olivia Shone
NO OFFICIAL PUBLIC REFERENCES AVAILABLE YET
WWPS
Texas A&M (Gazoo – Computer Labs as a Service)
Livanta – going all in (work with CMS) – we are working to get them to speak at symposium and do PR with us
Commercial
Johnson & Johnson – almost there (spoke publicly about their goal to provision 25,000 workspaces – not yet) doing testing and a little customization for them
Sumitomo – are a customer – not public yet, but are almost ready to do a customer snapshot
Tokai communications
Fender guitar (not public sector) but working on getting a reference
Coca Cola Enterprises (unlikely to do snapshot) – permission to use logo (no authorization form yet)
Partners
Vertafore – insurance ? working on snapshot (reseller) technology partner selling solution to their clients
Reckon – accounting SW – Intuit of Australia – application manager
[Instructions: Click the icon to navigate to the slide that describes each service in more detail]
AWS offers additional services that complement workspaces. These services function independent of WorkSpaces so you can choose just the services that you need.
Directory Services
Amazon WorkDocs
Amazon WorkSpaces Application Manager (WAM)
AWS Marketplace for desktop apps
Allow use of existing corporate credentials for:
- Access to AWS applications (e.g. Amazon WorkSpaces, Amazon WorkDocs)
Access to the AWS Management Console via IAM roles
Create a new stand-alone directory in the AWS Cloud
Simple AD includes snapshot backups and point-in-time recovery
Both are managed services
- AWS does the heavy lifting directory management tasks
Patch management
Host monitoring
Directories are deployed multi-AZ for availability
New feature announced at San Francisco Summit, April 2015.
Amazon WorkSpaces Application Manager (Amazon WAM) offers a fast, flexible, and secure way for you to deploy and manage applications for Amazon WorkSpaces. Amazon WAM accelerates software deployment, upgrades, patching, and retirement by packaging Microsoft Windows desktop applications into virtualized application containers. These applications run on the end-user’s Amazon WorkSpaces instance as though they are natively installed.
New feature announced at San Francisco Summit, April 2015
This high-level diagram shows integration with a customer’s Active Directory. On the left hand side of the diagram you see the WorkSpaces Connect infrastructure in the customers VPC. This is effectively an LDAP proxy that connects to a customer’s Active Directory domain to list users when they are creating WorkSpaces. The WorkSpaces join the customers Active Directory domain once they have been launched.
This high-level diagram shows integration with a customer’s Active Directory. On the left hand side of the diagram you see the WorkSpaces Connect infrastructure in the customers VPC. This is effectively an LDAP proxy that connects to a customer’s Active Directory domain to list users when they are creating WorkSpaces. The WorkSpaces join the customers Active Directory domain once they have been launched.
Demo Actions
1. Select a user
2. Select a bundle
3. Registration code sent to email
4. Show the web page that has devices
5. Show logging into the workspaces
6. Bring up speed test
7. Bring up video
8. Show making changes, create image
9. Relaunch new image
10. Login again and see the changes are still there.
IMPORTANT! Workspaces is not a free tier service! Customers are currently billed monthly for the service – not hourly!
Workspaces Trial Offer details are available here: https://w.amazon.com/index.php/AWS/Services/WorkSpaces/Trial-2015
WorkSpaces is available now as a Limited Preview and customers can join the waitlist on the details page. Public Beta is planned for Q1 2014 (Active Directory integration will follow the initial Public Beta which will offer “Cloud Onl y” mode, where WorkSpaces will join a standalone directory) and in Q1/Q2 the service will be rolled out to further AWS regions.
With Amazon WorkSpaces, you pay only for the WorkSpaces you launch. There is no up-front commitment and you can delete WorkSpaces at any time. WorkSpaces are billed on a monthly basis. The monthly fee for WorkSpaces includes both the infrastructure (compute, storage, bandwidth for streaming) and the software applications.
If you would like to launch WorkSpaces with more software already pre-installed (e.g., Microsoft Office, Trend Micro Anti-Virus, etc.), you should choose the Value Plus, Standard Plus or Performance Plus options. If you don’t need the applications offered in those bundles or you would like to use software licenses for some of the applications Plus options that you’ve already paid for, we recommend the Value, Standard or Performance bundles. Whichever option you choose, you can always add your own software whenever you like.
For the Plus bundles, you will have the option to select either Microsoft Office Professional 2010 or Microsoft Office Professional 2013 when you select the software.
To add software to your WorkSpaces in addition to the bundles, create a custom image or use Amazon WorkSpaces Application Manager (Amazon WAM). You can deploy a custom image to as many users as you like, at no charge. Amazon WAM enables you to deploy and manage applications quickly and securely across your users' WorkSpaces. Amazon WAM is available as a lite or standard subscription. The lite subscription is available at no charge; the standard subscription is currently available at no charge, but will cost $5/user/month starting July 1, 2015.
Each WorkSpace is billed on a monthly subscription. Charges are prorated for the remainder of the first month. Subsequent months are billed for the entire month. Amazon WorkSpaces is not eligible for the AWS Free Usage Tier.
Does WorkSpaces pricing include bandwidth costs?
The monthly subscription includes the streaming bandwidth between the user’s client and a WorkSpace. Web traffic from the user’s WorkSpaces (accessing public Internet, downloading files etc.) will be charged separately as AWS outbound bandwidth on your bill.
INTERNAL ONLY – EDU discount is for MS Office software, not hardware. Discount only applies to plus versions of bundles that include software licenses.
Contact Steven Armstrong and Olivia Shone for Analyst Research.
WorkSpaces are easy to set up; however, if you need assistance, AWS has established partnerships with these companies.