Building and Deploying Amazon Workspaces Pool With Okta IDP

Come back soon – August / September 2024

Amazon Workspaces Pools recently launched on June 27th 202, augmenting the Amazons Workspaces line up by providing non-persistent desktops in the cloud. In terms of a price to value ratio, this offering greatly reduces the cost to serve when comparing against Amazon Workspaces Personal and Amazon Workspaces Core.

I recently had the opportunity to build out a production ready Amazon Workspaces Pools environment.
So in this post, I am going to walk you through the process of setting up Amazon Workspaces Pools
utilising Okta as an IdP (Identity Provider) and how you can user setting persistence Microsoft using FSXLogic

I will break this post down in to the following steps.

  • Creation of Okta Developer
  • IAM Roles and Poilicies
  • Active Directory Integration
  • IAM Roles
  • Identity Federation
  • SAML Configuration



IAM Roles

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Federated": "[ARN of Identity Provider]"
            },
            "Action": [
                "sts:AssumeRoleWithSAML",
                "sts:TagSession"
            ],
            "Condition": {
                "StringEquals": {
                    "SAML:sub_type": "persistent"
                }
            }
        }
    ]

Leave a Comment