# WorkSpaces (Secure Browser)

**WorkSpaces Secure Browser** provides a protected environment for users to access private websites, software-as-a-service (SaaS) applications, and the public internet. WorkSpaces Secure Browser works with the browser running locally on the end-user’s device.

<figure><img src="/files/4nHlaQyoh0jtnQCzhDlx" alt=""><figcaption></figcaption></figure>

To enable **WorkSpaces Secure Browser** and set up logging, start by navigating to the WorkSpaces Manager console and toggling the Enable Secure Browser setting to "On" to display it in the menu. Next, create an S3 bucket by going to the **Amazon S3 Console** and setting up a bucket with a name like `workspacesweb-userlogs`. Note down the bucket name for later use. Proceed to the **Amazon Kinesis Console** first create a data stream starting the name with `amazon-workspaces-web-` and set Capacity mode to On-demand, click Create data stream.

<figure><img src="/files/fl7QMj4butlmBDtAuPtu" alt=""><figcaption></figcaption></figure>

Then go to WorkSpaces, under the drop down for **WorkSpaces Secure Browser** go to Portals and click the active Portal for WorkSpaces Web. Select Portal settings then edit nect to User access logging details and select the Kinesis data stream.

<figure><img src="/files/BruiP2wzmSxr1a7Hx66B" alt=""><figcaption></figcaption></figure>

Back to the **Kinesis** dashboard and go to **Amazon Data Firehose**, create a Firehose stream Set the source to **Amazon Kinesis Data Streams** and the destination to **Amazon S3**. In the Source Settings, click Browse and select the Kinesis Data Stream that was created.

<figure><img src="/files/ZxjsaQR6NZL8eLIIASp5" alt=""><figcaption></figcaption></figure>

Then, in the Destination Settings, click Browse and choose the **S3** bucket you just created. Once done, click Create **Firehose Stream** to complete the setup.

<figure><img src="/files/W8y1XiqGKXYSOQJZYd7d" alt=""><figcaption></figcaption></figure>

Finally, return to the WSM console, and in the configuration, add the **Bucket Name**, **Account ID**, and **Region**, then click Add to finalize the integration. This will complete the setup for enabling and logging WorkSpaces Secure Browser activity.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.nuvens.cloud/admin/configuration-section/settings/workspaces-secure-browser.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.