#finally

In Workspaces Pools it would be nice to see what 'source image' you are using in a bundle, in an always on from the session somehow. As it takes a while for them to update when the bundle changes.

Any Citrix Core Managed Instances users or experts in here? Trying to create a host connection with proxy config via posh and the documentation isnt working. The new-item doesnt appear to support the -connectiontype item

https://aws.amazon.com/blogs/desktop-and-application-streaming/announcing-the-end-user-computing-lens-for-the-well-architected-framework/ something to read

Workspace Core V1 with Citrix - Q - looking to move PoC to Prod and redoing the VPCs and we don't want to dork up the existing Windows 11 desktops we have out there. I was thinking maybe in theory that we can de-register and re-register the AD Connector with the new subnets in the new Prod VPC and continue to be OK for the existing desktops, but I wanted to see if somebody could confirm that or, if not, how we easily go about switching the client network for this scenario. @Stephen Stetler, I figure you might know the answer to this? Thanks in advance from us and the customer 🙂

With Citrix MCS CMI (Core Managed Instances) what is the minimum required IAM role for the VDAs?

https://aws.amazon.com/blogs/aws/aws-verified-access-now-supports-secure-access-to-resources-over-non-https-protocols/ is this similar to Citrix Secure Private Access? Could we use this for only allowing certain users RDP access to specific servers in another AWS account / VPC from Workspaces Pools.

💻 AWS re:Invent 2025 - Citrix MCS and WorkSpaces Core Managed Instances Workshop 💻 If you plan on attending AWS re:Invent this year, do yourself a favor and make sure to register for EUC202. 🚀 Streamline VDI Migration: Integrating Cloud Desktops with Citrix 📅 Monday, December 1 ⏰ 3:30 PM - 5:30 PM PST Venue : Las Vegas | MGM | Level 1 | Grand 115

@Stephen Stetler, if we are using Citrix MCS Core Managed Instances, is it still a requirement to do the "Enable BYOL" checkbox in the Workspaces console? Also, is the workspace_defaultrole required? It states "before you can register a directory using the API, verify a role named workspace_DefaultRole exists." Since we're not using Quickdeploy, is that even needed?

Hi with Amazon Workspace Pools - Application Settings Persistence if I want to exclude a folder from the profile, how do I do this, e.g. AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState This is to get MSIX Icons to show reliably in the Start menu. Is the way to use Session Scripts / Logoff Scripts?

https://pro.arcgis.com/en/pro-app/latest/get-started/arcgis-pro-system-requirements.htm#GUID-D126A33C-1974-4A12-BCFB-E4F85DA5241F on Amazon Workspaces Applications do you reckon stream.graphics.g6f.large or stream.graphics.g6f.xlarge with 3gb Vram would actually be ok and it's just their documentation needs to be updated as it says minimum GPU 6gb Vram . Our Arcgis users are using Windows Laptops with Intel graphics at the moment ok. Would it be a case of try it and see?

Happy Thanksgiving to my US peers! If you'll be at re:Invent next week, please make sure to stop by the Amazon WorkSpaces booth and say hi. Here's a full list of all the End User Computing sessions we'll be presenting: https://aws.amazon.com/blogs/desktop-and-application-streaming/aws-reinvent-2025-transform-your-digital-workplace-with-amazon-workspaces/

Happy Monday folks, I noticed on both my personal macOS devices when logging into my WorkSpace, I get a white screen. The root cause was identical - an untrusted root certificate for Verisign. Go into Keychain, check the Root and Trust. Reopen the WorkSpaces Client app and you're good to go.

@Stephen Stetler BIG NEWS? https://aws.amazon.com/about-aws/whats-new/2026/02/amazon-ec2-nested-virtualization-on-virtual/ Can I now use Hyper-V to sequence applications with MSIX and APP-V on a EC2 instance, Would it work on a Workspaces Personal Machine?

🚀 Introducing the AWS EUC Content Hub 🌐 https://awseuccontent.com The AWS EUC Content Hub makes it easy to 🔎 Search all AWS EUC blogs + Builder.aws articles in one place 📝 Read clean summaries with helpful labels 🏷️ Quickly find and filter results 🔐 Optional Account Features (Privacy-First) You can sign in with Google (we don’t request or store personal data) to: ❤️ Love posts 🗳️ Vote if content needs updates or should be removed 💬 Comment and collaborate 📖 Bookmark your favorites 🎓 Link your Credly URL to showcase your AWS EUC Training badge 🤖 Built-In Chat Agent Not sure what you’re looking for? Our chat agent helps you discover relevant EUC content fast. Can’t find what you need? Use Propose Article to help you craft a high-quality Builder.aws article in AWS-styled theme. 🛒 NEW: Content Cart Feature Add articles to your Content Cart and use the clipboard checkout to instantly share curated content with: 👥 Colleagues 🤝 Customers 🌍 Your community No more hunting through bookmarks or old Slack threads.

@asianez joined #aws-workspaces. They’re also new to World of EUC.

Is anyone looking to run the WorkSpace Linux Client on Fedora? A friend has a project for that - https://github.com/verchalent/WorkSpacesDeb2Flatpak

2 questions on Workspaces (Core Managed instances). First - we deployed our VDAs with no instance profile (as they didnt need any special permisisons) and now we've been told all instances need an instance profile by our internal cloud team. We can create a new launch template to deploy new VMs that has an instance profile (that is empty of course) and it works great. When we try to apply an instance profile (the same one) to an existing VM, it fails and says due to a resource policy. Our internal cloud team isn't aware of any resource policy that would prevent it, and we confirmed we ca do it on a regular EC2 instance - is this an AWS managed field that is blocking us, and if so, how do we remediate? Second - and this may be more general AWSy thing - how would we boot to safe mode and still access the VM? I have not even been succesful in getting the VM to boot into safe mode - I set it, reboot, it comes back on normally. We have no EC2 serial console access by our account either. I set the RDP service to be included in the safemode with networking, but I just can't get it to actually boot in safe mode at all. Thoughts on how to do that?

tl;dr - WorkSpaces specific APIs replace standard EC2 APIs for mutable actions and maintain the protected boundaries. Let's start with the basics. Core Managed Instances (CMI) are EC2 instances with delegated control to the WorkSpaces Managed Instances service. All mutable actions must go through the WorkSpaces Managed Instances service, not standard EC2 APIs, likely in your case through the Citrix Cloud Connectors. See the attached image from the architecture docs. The resource policy error is from protected boundaries that CMI maintains by design. If the service role wasn't already created, here's the command to create it:

aws iam create-service-linked-role --aws-service-name <http://workspaces-instances.amazonaws.com|workspaces-instances.amazonaws.com>

I would redeploy with a new Machine Catalog that includes the instance profile from the start.

I'm thinking we're gonna just go for the exception to not have an instance profile on the existing 7,000+ machines instead of rebuilding 🙂

We have the service linked role created in each account - but as we expected, its needing the cloud connector to do the needful rather than our account. I was wondering if we installed the aws CLI onto a cloud connector and ran it as SYSTEM if it would work, but that would still need some kind of auth I'd think. I guess we'd need to have Citrix add an option to update that attribute

WorkSpaces Applications gets drain mode - https://amzn-aws.slack.com/archives/C018CMUFLP3/p1775168683951699

@Stephen Stetler (AWS) joined #aws-workspaces. They’re also new to World of EUC.

📢 New Blog — Monitor Amazon WorkSpaces at Scale with Custom CloudWatch Dashboard Templates Six new CloudFormation templates that deploy purpose-built CloudWatch dashboards for WorkSpaces Personal and WorkSpaces Applications in minutes — covering help desk triage, connection insights, ISP-level monitoring, fleet health, per-user troubleshooting, and proactive alerting. No more building dashboards from scratch across every account and Region. 🔗 https://aws.amazon.com/blogs/desktop-and-application-streaming/monitor-amazon-workspaces-at-scale-with-custom-cloudwatch-dashboard-templates/

Do you still need cloud connectors if using Citrix in AWS Workspaces or is brokering to DaaS from AWS Workspaces configured some other way?

aws.amazon.com/about-aws/…/nested-virtualization-workspaces Nested virtualisation support on Amazon Workspaces Personal and Core.

I notice that AWS Quick for desktop now supports per machine installation. Typically much space in the user profile does Quick for desktop need? We are still using Application settings persistence on Amazon Workspaces Applications so have upto 5gb profiles which has generally been fine up to now? docs.aws.amazon.com/quick/latest/userguide/desktop-enterprise-mdm.html

This looks interesting cloudhouse.com/foundry-flow for Amazon Workspaces Applications Elastic Fleets.