Skip to content

WorkSpaces Invite URL returns "Failed to contact the origin" in ap-southeast-5 (Malaysia)

0

Hello,

I'm testing Amazon WorkSpaces in the Malaysia region (ap-southeast-5).

Environment:

Directory type: AWS Managed Microsoft AD Directory status: Active WorkSpace status: Available User: arthur Invitation email was successfully sent Registration code is available Web Access is enabled

Problem: When I open the invitation URL from the email to set the initial password, I immediately get:

ERROR Failed to contact the origin.

I have tested from:

Multiple browsers Incognito mode Mobile phone Different networks

The result is always the same.

Additional information:

WorkSpaces Advisor reports "No internet route configured in VPC subnet", however the advisor explicitly states this does not affect WorkSpaces streaming or connection brokering. Because the invitation page never loads, the user cannot set the initial password. Logging in with the directory Admin account results in: ERR_RESOURCE_NOT_FOUND - No WorkSpace found under your username

Question: Has anyone seen this issue with WorkSpaces invitation/authentication portal in ap-southeast-5 (Malaysia)? Is there a known issue with the awsapps.com invitation portal or any additional configuration required for Managed Microsoft AD users?

Thank you.

asked 2 months ago66 views

2 Answers
0

Based on the error you're encountering, there are a few potential causes to investigate:

Network and Connectivity Issues: The "Failed to contact the origin" error suggests a connectivity problem between your client and the WorkSpaces registration service. Even though you've tested from multiple browsers and networks, this type of error typically indicates that the client cannot reach the necessary AWS services.

The WorkSpaces Advisor finding about "No internet route configured in VPC subnet" is worth investigating further. While the advisor notes this doesn't affect streaming or connection brokering, it could potentially impact the initial registration and authentication process if the WorkSpace or related services need to communicate outbound.

Registration Service Connectivity: When the WorkSpaces client application cannot reach the registration service, you may see connection errors. This could manifest as failures when trying to access invitation URLs or complete the registration process. Ensure that:

  • Your network allows outbound HTTPS connections to AWS services
  • There are no firewall rules or security groups blocking access to the awsapps.com domain
  • DNS resolution is working correctly for AWS endpoints

Recommended Troubleshooting Steps:

  1. Verify that your VPC subnets have proper internet connectivity through either an Internet Gateway or NAT Gateway
  2. Check security group rules and network ACLs to ensure they're not blocking required traffic
  3. Confirm that the directory is properly registered and the WorkSpace is fully provisioned
  4. Try accessing the WorkSpaces client application directly rather than the web portal to see if you can complete registration through the native client

Since you're working in a newer region (ap-southeast-5), I'd recommend contacting your WorkSpaces administrator or reaching out through the AWS Support Center at https://console.aws.amazon.com/support/ to verify that all regional services are properly configured and there are no region-specific considerations for the Malaysia region.
Sources
Troubleshoot WorkSpaces client issues - Amazon WorkSpaces

answered 2 months ago

AWS
SUPPORT ENGINEER

reviewed 2 months ago

0

Thank you. I have already verified the suggested items:

Tested from multiple browsers and networks Re-sent the invitation multiple times Directory is Active WorkSpace is Available Web Access is enabled

The issue persists. The invitation URL still returns:

Failed to contact the origin

Also, accessing:

https://<directory>.awsapps.com

returns:

NoSuchWebsiteConfiguration

Could an AWS engineer verify whether this is a backend issue or a region-specific issue in ap-southeast-5?

Enter image description here

answered 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.