Your AWS Admin team has created an AWS workspace. Users on the on-premises environment don’t seem to have the ability to use the AWS created workspaces. What could be the primary underlying issue?

Answer options:

A.The AWS Workspaces have not been created properly. They need to be recreated.
B.The ports on the company firewall are not open.
C.The NACLs on the AWS Workspaces are not allowing incoming traffic.
D.The Security Groups on AWS Workspaces are not allowing outbound traffic.

Answer – B
The AWS Documentation mentions the following.
To connect to your WorkSpaces, the network that your Amazon WorkSpaces clients are connected to must have certain ports open to the IP address ranges for the various AWS services (grouped in subsets). These address ranges vary by AWS region. These same ports must also be open on any firewall running on the client. 
Options A, C and D are all invalid since the primary concern will be the ports on the company firewall.
For more information on the AWS workspaces port requirements, please refer to the below URL:
https://docs.aws.amazon.com/workspaces/latest/adminguide/workspaces-port-requirements.html