Question

A retail company is deploying Amazon WorkSpaces (a SaaS desktop-as-a-service offering) for 400 remote agents. The network team wants the streaming traffic (PCoIP/WSP) to reach the AWS WorkSpaces service endpoints with the lowest latency and without backhauling user sessions through the on-premises data center. There is no requirement for a private, dedicated circuit. Which connectivity approach best meets these SaaS access requirements?

Accepted Answer

Route WorkSpaces streaming traffic over the public internet using local internet breakout with DNS resolving to the nearest AWS regional service endpoint

Answer

Provision an AWS Direct Connect dedicated connection and advertise the WorkSpaces public prefixes over a private virtual interface

Answer

Backhaul all agent sessions to the data center and use a site-to-site IPsec VPN to a Transit Gateway before reaching WorkSpaces

Answer

Create a Direct Connect private VIF to a VPC and place a NAT gateway in front of the WorkSpaces service endpoints