Network isolation - Amazon WorkSpaces
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Network isolation

A virtual private cloud (VPC) is a virtual network in your own logically isolated area in the Amazon Cloud. You can deploy your WorkSpaces in a private subnet in your VPC. For more information, see Configure a VPC for WorkSpaces Personal.

To allow traffic only from specific address ranges (for example, from your corporate network), update the security group for your VPC or use an IP access control group.

You can restrict WorkSpace access to trusted devices with valid certificates. For more information, see Restrict access to trusted devices for WorkSpaces Personal.