Appstream2.0 Solution

DISCOVER PHASE

• Assess current AWS infrastructure
  • Access and privileges
  • Control access to Appstream2.0 Resources
  • Secure account premise resources
    • Microsoft Active Directory
    • Firewalls, routers, VPN Devices, etc
• Confirm service limits
  • Request an increase in service limits if needed especially for creating AppStream fleets & stacks
  • Identify Availability Zones for deployment, which support Appstream2.0
  • Ensure subnets are created in the supported Availability Zones
• Assess and confirm selected applications for proof of concept
  • Inhouse Applications
  • Common low-complexity Apps
• Assess instance family (compute type)
• Assess infrastructure security requirements
• Assess integration with IT environment
• Assess Authentication/Authorization requirements
• Assess current user profiles
• Review budgetary requirements

DESIGN PHASE

• Validate AWS VPC environment and create network diagram of solution

  • Regions
  • Availability Zones
  • Subnets, Route Tables, Internet Gateways, Egress Gateways, Nat Gateways, Peering Connections, Network ACLs, Security Groups, Customer Gateways, VPNs, Site-to-Site

• Design Appstream2.0 Solution

  • Directory Services Integration
  • Fleet Type
  • Stack storage configurations & user access policies
  • Protocol
  • Image creation and management
    • Compute size
      • CPU, Mem, Disk (encryption)
    • User Profile
      • Desktop View versus Application View
      • Default User template Configurations
  • Define Usage Police
    • Always On
    • Auto Stop
  • Define Security Controls for infrastructure
    • Identity Provider Integration
    • Persistent Data Solution (if any)
    • Apply security at all layers
      • VPC/Network Security
        • Network Exclusions
        • Firewalls and Routing
      • Data Ingress & Egress
      • Identity and Access Management (MFA)
      • VPC Endpoint & PrivateLink

• Design for Cost Efficiency

• Baseline AWS fees related to

  • Total # of users
  • Actual hours of usage
    • On-Demand versus Always-On
  • Instance Type

DEPLOY PHASE

• Deploy VPC Changes based on Approved Design
• Deploy Appstream2.0 Solution
• Integrate Existing Identity Provider with AppStream2.0 Solution
• Deploy Images approved from Design Phase
• Configure Security Controls at all levels

Operational Excellence

• Configure AWS native baseline monitoring of critical services, notifications & dashboards as needed

Cost Assessment

• Conduct Total Cost of Ownership
  • Define long term cost optimization to deliver business value

Validation & Walk Through

• End Client Validation and Testing (1 week)
• Documentation Runbook of Deployed Environment
• Get sign-off from customer
• Close PS