# Web content filtering in Amazon WorkSpaces Secure Browser Web content filtering Web Content Filtering is a security and compliance feature that enables your organization to define policies and regulate content access within WorkSpaces Secure Browser. With Web Content Filtering, you can specify which URLs end users are allowed to access or block specific URLs or domain categories to restrict access, addressing critical security and regulatory compliance requirements. **Note** Although you can set up URL filtering policies via Chrome policies to block or allow specific domains, we don't recommend this approach because actions from Chrome policies will not be captured as part of the service logging capabilities. For comprehensive monitoring and compliance reporting, use the Web Content Filtering policies described on this page. **Topics** + [ # Restricting browsing to specific URLs ](restricting-browsing.md) + [ # Blocking specific URLs ](blocking-specific-urls.md) + [ # Blocking categories ](blocking-categories.md) + [ # Example of URLs ](example-urls.md) + [ # Transferring Chrome policies ](transferring-chrome-policies.md) # Restricting browsing to specific URLs Restricting browsing to specific URLs You can implement a "default deny" policy where only explicitly approved websites and URLs are accessible. It's ideal for high-security environments where internet access must be tightly controlled and every permitted site has been vetted for business necessity and security compliance. In the AWS console, under URL filtering: + Navigate to Block list and select the toggle **Block all URLs** + Under Allow list, click **Add URL** to add a URL that will be allow listed for your end user. Add one entry per URL. + Click **Save** # Blocking specific URLs Blocking specific URLs You can balance security with productivity by maintaining open internet access while blocking known problematic sites. It's suitable for organizations that trust their users but want to prevent access to specific threats or inappropriate content without overly restricting legitimate business activities. In your AWS console, under URL Filtering: + Navigate to Blocked URLs + Select **Add URL**, and enter the URL to be blocked. Add one entry per URL you want to block + Click **Save** # Blocking categories Blocking categories In addition to blocking specific URLs, you can also automatically block groups of URLs based on content categories. This is useful for organizations that need comprehensive coverage against various types of inappropriate or risky content without having to manually identify and block individual sites. In your AWS console, under URL Filtering: + Navigate to Blocked categories and click **Add categories** + Select any category you want to block + You can exceptions to these categories by adding URLs to the Allow List. For this click **Add URL** and enter the entry/ies of the URLs you want to allow. Even if they are including in the categories, end users will be able to visit the URLs. + Click **Save** The following categories can be selected. You can select one, many, or all categories. **Available filtering categories** | Theme | Category | Description | | --- | --- | --- | | Adult & Inappropriate Content | Nudity | Sites containing non-sexual nude imagery or artwork. | | Adult & Inappropriate Content | Pornography | Sites with explicit sexual content or provocative nude material. | | Adult & Inappropriate Content | Sex Education | Age-appropriate, medically-reviewed health and sexuality resources. | | Adult & Inappropriate Content | Tasteless | Content inappropriate for children not covered by other categories. | | Communication and Social | Chat | Real-time group and private messaging platforms. | | Communication and Social | Instant Messaging | Private messaging services. | | Communication and Social | Professional Network | Business-focused relationship building platforms. | | Communication and Social | Social Networking | User interaction platforms for sharing personal content and experiences. | | Communication and Social | Web-based Email | Browser-accessible messaging services, including e-cards and greeting systems. | | Entertainment | Games | Recreational gaming resources, including video games, puzzles, and non-gambling activities. | | Entertainment | Image Sharing | Visual content platforms offering hosting, search, and sharing capabilities. | | Entertainment | Peer To Peer | File sharing application providers and related software tools. | | Harmful & Illegal Content | Criminal Activity | Instructions or materials promoting illegal acts. | | Harmful & Illegal Content | Hacking | Unauthorized system access tools and network exploitation resources. | | Harmful & Illegal Content | Illegal Drug | Content promoting recreational drug use or substance abuse. | | Harmful & Illegal Content | Illegal Software | Unauthorized copyrighted material and malicious software distribution. | | Harmful & Illegal Content | Violence | Content promoting physical harm or displaying graphic material. | | Harmful & Illegal Content | Weapons | Legitimate sporting and recreational firearm use resources. | | High-risk Behaviors | Cults | Non-mainstream spiritual and metaphysical content. | | High-risk Behaviors | Gambling | Betting-related activities and information. | | High-risk Behaviors | Hate and Intolerance | Content promoting bias against protected characteristics. | | High-risk Behaviors | School Cheating | Unauthorized academic assistance and homework completion services. | | High-risk Behaviors | Self Harm | Content promoting or discussing self-destructive behaviors. | | Technology & AI | Download Sites | Software, application, and digital asset hosting platforms. | | Technology & AI | Generative AI | AI and machine learning technology resources. | | Technology & AI | Parked Domains | Minimal content domains used for advertising or domain sales. | | Technology & AI | Streaming Media and Downloads | Audio/video content platforms including music, videos, and internet radio. | # Example of URLs Example of URLs The following types of URLs can be provided in the AllowedUrls or BlockedUrls **** | Type | Example | | --- | --- | | Domain | example.com | | Subdomain | login.example.com | | Path | example.com/myvideos | | Query parameter | example.com/?parameter=123 | # Transferring Chrome policies Transferring Chrome policies In case you already have Chrome policies set up to allow or block specific domains, we recommend that you transfer them to the Web Content Filtering feature. The Web Content Filtering feature will detect any URLAllow or URLBlock policies that apply to a WorkSpaces Secure Browser session and will signal it in the AWS Console. To transfer the Chrome policies for URLAllowlist and / or URLBlocklist: + In your AWS Console, under URL Filtering, click **Review Chrome Policies** (if you do not see the Review Chrome Policies button, this means not Chrome policies currently applies for URL Allow or URLBlock) + Under the overlay, review the Chrome policies + Click **Transfer** The Chrome policies will be removed from the JSON Editor under Policy Settings and new URLs will be automatically added to the Web Content Filtering feature.