Abstract: Virtual workspaces can be provided using shared resources and network-attached storage. A workspace client can access a virtual workspace created under a customer account. For specific types of data, such as pixel data used to render the display component of the workspace on the workspace client, the data can be prevented from being transmitted over a public network. Private security gateway interfaces can be created in the customer environment that can be attached to respective security gateways in the workspace environment. Routing rules are configured such that pixel data for a workspace is only transmitted to the workspace client through a security gateway and over a secure connection to the corresponding private gateway interface in the customer environment, which can direct the pixel data to the workspace client.

Abstract: A remote resource application that is associated with an application container in a manner that the application container restricts the remote resource application from directly accessing at least a file system of the computing system. The remote resource application provides a visualization for each of multiple remote resources. The user may launch the remote resource by selecting the corresponding visualization. Some of the remote resources are accessed by launching from the remote resource application itself in the context of the application container. Others of the remote resources are launched outside of the application container. The remote desktop application may operate securely within the application container, and still serve as an integrated location from which a user can access remote resources, regardless of whether the remote resource is launched from internal or external to the application container.

Abstract: A remote resource application that is associated with an application container in a manner that the application container restricts the remote resource application from directly accessing at least a file system of the computing system. The remote resource application provides a visualization for each of multiple remote resources. The user may launch the remote resource by selecting the corresponding visualization. Some of the remote resources are accessed by launching from the remote resource application itself in the context of the application container. Others of the remote resources are launched outside of the application container. The remote desktop application may operate securely within the application container, and still serve as an integrated location from which a user can access remote resources, regardless of whether the remote resource is launched from internal or external to the application container.