Cloud Desktops · AWS WorkSpaces

PGSA

From physical desktops tied to one office to fully managed cloud workstations — accessible from anywhere.

No public website · Privacy protected
Client
PGSA (private client)
Industry
Cloud desktops
Services
Migration · Managed workspaces
Platforms
AWS WorkSpaces · Directory Service · AWS Backup
The challenge

A workforce tied to physical hardware

PGSA's team depended entirely on physical desktops fixed to a single office. Remote work was simply not possible. The IT team spent significant time on hardware maintenance, Windows patching, and managing local Active Directory — operational effort with no direct business value attached.

As the company grew, scaling the desktop fleet meant ordering hardware, waiting for delivery, and spending hours on per-machine setup. Every new employee added cost and delay before they could start working. They needed a model where provisioning a new user was a matter of minutes, not days.

The solution

Fully managed cloud workstations on AWS WorkSpaces

  1. We deployed 16 Amazon WorkSpaces — each running a full Windows desktop on AWS-managed hardware, pre-loaded with a custom corporate image containing all the business software the team already used. No physical machines to buy, set up, or replace. WorkSpaces run in AUTO_STOP mode: each desktop automatically pauses when a user disconnects and resumes in seconds at next login, eliminating idle compute costs entirely.

  2. Identity is managed through AWS Directory Service, providing domain-joined desktops and centralized credential management using the credentials the team already knew. Every workspace is domain-joined, meaning IT can apply policies and manage access from a single control plane — without touching individual machines or visiting the office.

  3. AWS Backup runs daily automated snapshots with a 365-day retention policy — a full year of recovery points available at any time, without manual effort. AWS Budgets sends cost alerts before spend crosses defined thresholds, keeping cloud costs predictable. The entire environment is monitored via CloudWatch and managed through AWS Systems Manager, no VPN or on-site visits required for day-to-day administration.

Architecture
AWS Account — Single Region
AWS Directory Service
Domain Auth Centralized policies Domain-joined desktops
Amazon WorkSpaces
16 desktops Windows 10/11 Custom corporate image AUTO_STOP billing
AWS Backup
Daily snapshots 365-day retention
Ops & Visibility
CloudWatch Systems Manager AWS Budgets
All 15 desktops are domain-joined and managed centrally — no VPN, no on-site hardware, no manual patching. Each user connects from any device with their existing credentials.
Tech stack

Services we deployed

  • Amazon WorkSpaces Managed cloud desktops (AUTO_STOP)
  • AWS Directory Service Domain identity & centralized auth
  • AWS Backup Daily snapshots · 365-day retention
  • CloudWatch Monitoring & alerting
  • AWS Systems Manager Remote management & patching
  • AWS Budgets Cost threshold alerts
Results

A complete office, anywhere

16 cloud workstations
100% remote access enabled
0 hardware to maintain
365 days automated backup retention
Moving your team to the cloud?

Let's design your cloud workspace

From remote work enablement to full desktop virtualization, we'll build exactly what your team needs.

Get your free assessment