AWS Service Endpoints
AWS Service Endpoints are URLs that enable network connectivity between AWS services and clients. They can be public (internet-accessible) or private (via AWS PrivateLink for secure VPC access).
Official information about AWS Service Endpoints & Quotas can be found here.
WorkSpaces Manager (WSM) requires connectivity to various AWS services to manage WorkSpaces effectively across multiple accounts. Below is a list of essential AWS service endpoints used by WSM:
1. Amazon S3
Purpose: Stores logs, configuration files, and cost optimization data.
Endpoint Pattern:
s3.<region>.amazonaws.com
2. Amazon WorkSpaces
Purpose: Manages WorkSpaces lifecycle, including provisioning, starting, stopping, and termination.
Endpoint Pattern:
workspaces.<region>.amazonaws.com
3. AWS Key Management Service (KMS)
Purpose: Encrypts WorkSpaces storage, backups, and sensitive data.
Endpoint Pattern:
kms.<region>.amazonaws.com
4. Amazon AppStream 2.0 (if applicable)
Purpose: Supports streaming applications for users in place of traditional WorkSpaces.
Endpoint Pattern:
appstream2.<region>.amazonaws.com
5. Amazon RDS (if applicable)
Purpose: Hosts the database backend for storing WSM-related metadata and configuration.
Endpoint Pattern:
rds.<region>.amazonaws.com
6. AWS Directory Service
Purpose: Manages Active Directory connections for WorkSpaces authentication and policy enforcement.
Endpoint Pattern:
ds.<region>.amazonaws.com
7. Amazon EC2
Purpose: Runs the WSM appliance instances and manages underlying infrastructure.
Endpoint Pattern:
ec2.<region>.amazonaws.com
8. AWS Secrets Manager
Purpose: Securely stores credentials, API keys, and sensitive configuration details for WSM.
Endpoint Pattern:
secretsmanager.<region>.amazonaws.com
Configuring Endpoints
Ensure that the necessary endpoints are accessible in your AWS environment, particularly in environments with strict network policies, such as private VPCs or on-premises setups.
Regions
AWS Region Endpoints are unique URLs specific to an AWS service within a particular region, enabling API requests to be directed to the correct regional infrastructure. They follow the format <service>.<region>.amazonaws.com.
AWS services are available across multiple regions worldwide, each identified by a unique code. Below is a list of AWS regions along with their corresponding codes:
US East (Ohio)
us-east-2
US East (N. Virginia)
us-east-1
US West (N. California)
us-west-1
US West (Oregon)
us-west-2
Africa (Cape Town)
af-south-1
Asia Pacific (Hong Kong)
ap-east-1
Asia Pacific (Hyderabad)
ap-south-2
Asia Pacific (Jakarta)
ap-southeast-3
Asia Pacific (Kuala Lumpur)
ap-southeast-5
Asia Pacific (Melbourne)
ap-southeast-4
Asia Pacific (Mumbai)
ap-south-1
Asia Pacific (Osaka)
ap-northeast-3
Asia Pacific (Seoul)
ap-northeast-2
Asia Pacific (Singapore)
ap-southeast-1
Asia Pacific (Sydney)
ap-southeast-2
Asia Pacific (Tokyo)
ap-northeast-1
Canada (Central)
ca-central-1
Europe (Frankfurt)
eu-central-1
Europe (Ireland)
eu-west-1
Europe (London)
eu-west-2
Europe (Milan)
eu-south-1
Europe (Paris)
eu-west-3
Europe (Spain)
eu-south-2
Europe (Stockholm)
eu-north-1
Europe (Zurich)
eu-central-2
Israel (Tel Aviv)
il-central-1
Middle East (Bahrain)
me-south-1
Middle East (UAE)
me-central-1
South America (São Paulo)
sa-east-1
Each AWS service within a region has a specific endpoint that follows a standardized URL pattern: https://service-code.region-code.amazonaws.com. For example, the Amazon S3 endpoint for the US East (N. Virginia) region is https://s3.us-east-1.amazonaws.com.
For a comprehensive list of AWS service endpoints by region, and all the new regions that are created over time, please refer to the AWS Service Endpoints documentation.
Last updated