# WorkSpaces (Secure Browser)

WorkSpaces Secure Browser provides a protected environment for users to access private websites, software-as-a-service (SaaS) applications, and the public internet. WorkSpaces Secure Browser works with the browser running locally on the end-user’s device.

<figure><img src="https://2854239078-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxEJOGCAr5O8d9q95spJy%2Fuploads%2FN8yVufhvslgQ6nmOfnYS%2Fwssecurebrowser%20(1).png?alt=media&#x26;token=8d22acb3-de9c-4ca2-a714-d9848211dd61" alt=""><figcaption></figcaption></figure>

To enable **WorkSpaces Secure Browser** and set up logging, start by navigating to the WorkSpaces Manager console and toggling the Enable Secure Browser setting to "On" to display it in the menu. Next, create an S3 bucket by going to the **Amazon S3 Console** and setting up a bucket with a name like `workspacesweb-userlogs`. Note down the bucket name for later use. Proceed to the **Amazon Kinesis Console** first create a data stream starting the name with `amazon-workspaces-web-` and set Capacity mode to On-demand, click Create data stream.

<figure><img src="https://2854239078-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxEJOGCAr5O8d9q95spJy%2Fuploads%2F5msoVyq6suoDZFkwmEhp%2Fimage.png?alt=media&#x26;token=5d81b5dd-58b6-48d1-abf0-563b444ac913" alt=""><figcaption></figcaption></figure>

Then go to WorkSpaces, under the drop down for **WorkSpaces Secure Browser** go to Portals and click the active Portal for WorkSpaces Web. Select Portal settings then edit nect to User access logging details and select the Kinesis data stream.

<figure><img src="https://2854239078-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxEJOGCAr5O8d9q95spJy%2Fuploads%2FBNqY8410yzXCJ2l5x4xc%2Fimage.png?alt=media&#x26;token=f967c00a-5296-4715-a14c-436609937c85" alt=""><figcaption></figcaption></figure>

Back to the **Kinesis** dashboard and go to **Amazon Data Firehose**, create a Firehose stream Set the source to **Amazon Kinesis Data Streams** and the destination to **Amazon S3**. In the Source Settings, click Browse and select the Kinesis Data Stream that was created.&#x20;

<figure><img src="https://2854239078-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxEJOGCAr5O8d9q95spJy%2Fuploads%2FUr0wMou75Fu21cZARxED%2Fimage.png?alt=media&#x26;token=bf64b067-3f51-409f-b6b4-9e99672711e2" alt=""><figcaption></figcaption></figure>

Then, in the Destination Settings, click Browse and choose the S3 bucket you just created. Once done, click Create Firehose Stream to complete the setup.&#x20;

<figure><img src="https://2854239078-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxEJOGCAr5O8d9q95spJy%2Fuploads%2FfjRgZwAhbv5nJvcU2pF7%2Fimage.png?alt=media&#x26;token=327c0f59-f5be-4cc6-95d2-6218aae20239" alt=""><figcaption></figcaption></figure>

Finally, return to the WSM console, and in the configuration, add the **Bucket Name**, **Account ID**, and **Region**, then click Add to finalize the integration. This will complete the setup for enabling and logging WorkSpaces Secure Browser activity.