There are a few more features that you should keep in mind:

• User logins can be secured with MFA.
• User data can be encrypted at rest with AWS Key Management Service (KMS) keys.
• User logins can be restricted to a specific IP range.
• Each WorkSpace has two Elastic Network Interfaces (ENIs), one of which is in your VPC to allow easy access to resources in that VPC.