Is it possible to block web traffic (access to external sites) from AppStream Instance?


A customer is using AppStream to serve its customers.

They want to know that when their customer is connected to the AppStream instance, is it possible to block access to certain external web sites?

asked 3 years ago159 views
1 Answer
Accepted Answer

AppStream by default does not manage or control the network route the user accesses. However, customers can specify security groups to apply to the ENIs that AppStream creates/uses. There are on-instances ways of managing network access, but they're usually able to be circumvented and not easy to manage. If the customer has a well-known set of endpoints the user needs to connect to, the better approach would be to use network security groups to whitelist only those endpoints. That way the instance via network can only access them.

Another approach would be to use a proxy server, which many enterprises use, to control access to the internet.

answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions