Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

AWS::WorkSpacesWeb::NetworkSettings

Focus mode
AWS::WorkSpacesWeb::NetworkSettings - AWS CloudFormation
Filter View

This resource specifies network settings that can be associated with a web portal. Once associated with a web portal, network settings define how streaming instances will connect with your specified VPC.

The VPC must have default tenancy. VPCs with dedicated tenancy are not supported.

For availability consideration, you must have at least two subnets created in two different Availability Zones. WorkSpaces Secure Browser is available in a subset of the Availability Zones for each supported Region. For more information, see Supported Availability Zones.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "Type" : "AWS::WorkSpacesWeb::NetworkSettings", "Properties" : { "SecurityGroupIds" : [ String, ... ], "SubnetIds" : [ String, ... ], "Tags" : [ Tag, ... ], "VpcId" : String } }

YAML

Type: AWS::WorkSpacesWeb::NetworkSettings Properties: SecurityGroupIds: - String SubnetIds: - String Tags: - Tag VpcId: String

Properties

SecurityGroupIds

One or more security groups used to control access from streaming instances to your VPC.

Pattern: ^[\w+\-]+$

Required: Yes

Type: Array of String

Minimum: 1 | 1

Maximum: 128 | 5

Update requires: No interruption

SubnetIds

The subnets in which network interfaces are created to connect streaming instances to your VPC. At least two of these subnets must be in different availability zones.

Pattern: ^subnet-([0-9a-f]{8}|[0-9a-f]{17})$

Required: Yes

Type: Array of String

Minimum: 1 | 2

Maximum: 32 | 3

Update requires: No interruption

Tags

The tags to add to the network settings resource. A tag is a key-value pair.

Required: No

Type: Array of Tag

Minimum: 0

Maximum: 200

Update requires: No interruption

VpcId

The VPC that streaming instances will connect to.

Pattern: ^vpc-[0-9a-z]*$

Required: Yes

Type: String

Pattern: ^vpc-[0-9a-z]*$

Minimum: 1

Maximum: 255

Update requires: No interruption

Return values

Ref

When you pass the logical ID of this resource to the intrinsic Ref function, Ref returns the resource's Amazon Resource Name (ARN).

For more information about using the Ref function, see Ref.

Fn::GetAtt

AssociatedPortalArns

A list of web portal ARNs that this network settings is associated with.

NetworkSettingsArn

The ARN of the network settings.

Next topic:

Tag

Previous topic:

Tag

On this page

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.