RDS Remote Application: AWS Web Console¶

Amazon Web Services (AWS) is accessible via a web browser and is used to managed AWS services. When integrated with the 12Port Access Broker via Remote Desktop Services (RDS), this AWS Web Console application enables Zero Trust access with fully monitored and credential-injected administrative sessions.

Installation and Configuration¶

1. Download Required Files
* Executable:
https://bin.12port.com/product/remote-apps/app-aws-console/app-aws-console.exe
* Configuration File (.ini):
https://bin.12port.com/product/remote-apps/app-aws-console/app-aws-console.ini

Source files:
https://bin.12port.com/product/remote-apps/app-aws-console/app-aws-console.au3
https://bin.12port.com/product/remote-apps/ztna.au3
Note: The ztna.au3 source file contains shared code used by all RDS Remote Application scripts. This file is required for compiling modified or custom created RDS app scripts.

* Place both the Executable (.exe) and Configuration (.ini) files in the same directory on the RDS Server where the Remote Application will be published. For example: C:\12Port-RDSApps.

2. Modify Configuration
No .ini configuration is required with this Remote Application. Default values that can be modified if necessary:

[app]
debug=false
page-load-wait=2000
after-submit-wait=4000
focus-wait=500

Setting	Default Value	Description
`debug`	`false`	Enables or disables verbose logging for troubleshooting and diagnostics.
`page-load-wait`	`2000`	Time, in milliseconds, to wait after a page loads before interacting with it.
`after-submit-wait`	`4000`	Time, in milliseconds, to wait after submitting a form or action before continuing processing.
`focus-wait`	`500`	Time, in milliseconds, to wait after focusing a window or input field before sending input.

3. Publish the Remote Application
Use the following PowerShell command as an example to publish AWS Web Console as a RemoteApp on the RDS server. This command must be executed from an elevated (Administrator) PowerShell session:

New-RDRemoteApp `
  -CollectionName "QuickSessionCollection" `
  -Alias "app-aws-console" `
  -DisplayName "app-aws-console" `
  -FilePath "C:\12Port-RDSApps\app-aws-console\app-aws-console.exe" `
  -ShowInWebAccess $true `
  -CommandLineSetting "Allow"

Ensure the CommandLineSetting is set to "Allow" to enable the Access Broker to pass connection parameters to the application.

Note

Make sure the -FilePath value accurately reflects the location of the executable on the RDS server.

RDS Application Asset Configuration¶

To enable Zero Trust access to the AWS Web Console via the 12Port Access Broker, create a new Asset using the type RDS Remote Application:

In the RDS Remote Application asset, set the Remote App field to:
```
||app-aws-console
```
Set the Remote Arguments field to:
```
Host,User,Password,TOTP
```
Specify Host as the full URL to the AWS Web Console login page like https://contoso.signin.aws.amazon.com/console.
Specify User as a privileged account for zero trust access.
Specify Password for the privileged account for zero trust access.
Specify TOTP as the Secret Key that is displayed during application registration like 5WJMAUBDEEOVDNXHDIJZTA8PNBUZ4OL36QYP7PUIKOQYHKLMZRWSLYZ22F

After saving the asset, set your RDS Host Server asset as a Member Role in the Member Assets section. This is required to start a remote session.

Note

For the TOTP field, if it does not already exist, it must first be added as a new field to this Asset Type. To add the new field properly, use

* Name: TOTP
* Type: TOTP
* Secured: Enabled
* Algorithm: SHA1

These values allow the Access Broker to inject credentials into the AWS Web Console connection, using the Microsoft Edge web browser, without exposing them to the user.

Tip

We recommend you disable the Microsoft Edge Offer to save passwords prompt as this can interrupt the automated login process.

Troubleshooting¶

Disable Microsoft Edge "Tab Search"¶

The Microsoft Edge Tab Search feature can interfere with the automated login process used by the 12Port RDS Application and may prevent auto-login from completing successfully.

If users experience issues with automatic authentication or credential submission in Microsoft Edge, disable the Tab Search feature:

Login to the RDS server using the account saved in the RDS Host Server asset.
Open Microsoft Edge
Navigate to: edge://settings/appearance
Locate the Show tab search setting.
Disable the setting.
Restart Microsoft Edge.

After disabling Tab Search, retry the RDS remote app session.