One-line summary
Let users enter a disposable AWS-managed isolated browser session from their existing browser to reach private sites, SaaS, or the internet.
Core role
- Run web content and potential risk in an isolated cloud browser while streaming the experience to the endpoint.
- Control access through a portal, identity provider, VPC networking, and browser policies.
- Restrict URLs, clipboard, file transfer, and printing to reduce data-exfiltration risk on personal devices.
Exam focus and pitfalls
- Controlled browser-only access points to Secure Browser; a full desktop points to WorkSpaces; desktop apps point to Applications.
- The former name is Amazon WorkSpaces Web.
- WorkSpaces Web Access is a client method for a full WorkSpace and is not the Secure Browser service.
Key takeaway
Deliver a controlled isolated browser, not a full desktop.