When deploying App Volumes for Azure Virtual Desktop Remote Apps, depending on the administrator choices, some resources are automatically provisioned as part of the AWS Marketplace solution and a few others can be created by the administrator.

Following resources are automatically deployed by the AWS Marketplace solution wizard:
Note: For more information about any of the AWS resources, see the relevant Amazon documentation.
Amazon EC2 instance
This resource is based on the latest Windows server OS with App Volumes Manager pre-installed on the virtual machine instance.
Elastic IP address
An elastic IP address can be used to create and assign a static IP address to App Volumes Manager instance ( Amazon EC2 instance).
Security Group
To ensure connectivity between App Volumes agent (installed on an Amazon AppStream 2.0 image and EC2 fleet) and App Volumes Manager, Amazon FSx file share, and Amazon RDS database, a security group must be configured between the virtual network where the EC2 fleet is deployed and the virtual network of the virtual machine where App Volumes Manager is installed.
The security group is preconfigured with inbound and outbound firewall rules to allow the following: RDP (Remote Desktop Protocol) access to the virtual machine where App Volumes Manager is installed. HTTPS access to App Volumes Manager admin UI.
Note: If you want to access the App Volumes Manager admin UI using HTTP (port 80, insecure), then you can manually configure the inbound port rule in the AWS portal, by navigating to the security group of the Amazon EC2 instance where App Volumes Manager is installed.
Amazon FSx Fileshare
This resource is used by App Volumes as application storage for hosting the application packages which are mounted and delivered to Amazon AppStream 2.0.

Administrators can choose an automatic provision of the file share by the AWS Marketplace solution. As a result, the storage is automatically configured.