Allow an unmanaged device to access an internal web application without storing files on that device.
Provide a managed, isolated browser environment.
Which service is most appropriate?
WorkSpaces Secure Browser provides controlled browser access from an isolated environment.
Detailed explanation
S3 is object storage, not a managed browser environment.
S3 is object storage, not a managed browser environment.
It provides a managed, isolated browser for web applications and sites.
It provides a managed, isolated browser for web applications and sites.
WorkSpaces provides a full virtual desktop, not a browser-only isolated session.
WorkSpaces provides a full virtual desktop, not a browser-only isolated session.
CloudFront delivers content and does not isolate a user's browser.
CloudFront delivers content and does not isolate a user's browser.
Check official documentation
Compare the following points with the official documentation.
Amazon WorkSpaces Secure Browserの公式概要でブラウザ分離とアクセス制御を確認する。
Official references
What to confirm
管理されたブラウザ専用環境へWorkSpaces Secure Browserを選べる。
Key points
- WorkSpaces Secure Browser
- Browser isolation
- Data exfiltration control
Notes
- Environment:
- AWS service features and names can change; confirm current behavior in the official AWS documentation.
Foundation review
Choose by purpose
A notification, queue, support case, build stage, desktop, browser, frontend, and IoT device have different service boundaries.
Separate adjacent services
Services may work together, but the question asks which one owns the required capability.