I want to use Amazon WorkSpaces, but the service isn’t available in the Amazon Web Services (AWS) Region that I currently use for other services. How can I use my Microsoft Active Directory setup in one Region to use WorkSpaces in a different Region where the service is available?
Resolution
To use a directory in another Region of the same AWS account to launch WorkSpaces, complete the following steps:
Note: If you receive errors when you run AWS Command Line Interface (AWS CLI) commands, then see Troubleshooting errors for the AWS CLI. Also, make sure that you're using the most recent AWS CLI version.
Create virtual private cloud (VPC) peering with another VPC in your account
- Create a VPC peering connection with a VPC in a different Region.
- Accept the VPC peering connection.
- The VPC peering connection is activated. To view your VPC peering connections, use the Amazon VPC console, the AWS CLI, or an API.
Update route tables for VPC peering in both Regions
Update your route tables to turn on communication with the peer VPC over IPv4 or IPv6.
You now have two VPCs in your account that are in different Regions, and can talk to each other.
Create an AD Connector and register WorkSpaces
- Review the AD Connector prerequisites.
- Connect your existing directory with AD Connector.
- When the AD Connector status changes to Active, open the AWS Directory Service console, and then choose the hyperlink for your Directory ID.
- For AWS apps & services, choose Amazon WorkSpaces to turn on access for WorkSpaces on this directory.
- Register the directory with Amazon WorkSpaces.
- When the value of Registered changes to Yes, launch a WorkSpace.
Related information
Create with VPCs in different accounts and Regions