Amazon WorkSpaces simplifies secure AI agent access to enterprise cloud desktops with less infrastructure to operate and manage

Amazon WorkSpaces for AI agents now handles authentication and desktop connections as a managed Model Context Protocol (MCP) service, enabling AI agents to connect to governed cloud desktops without custom code. This eliminates pre-session requirements, manual generation and rotation of streaming URLs, and complexity each time sessions expire. It uses existing AWS credentials to create OAuth 2.0 sessions while the service manages the connection lifecycle. After configuring a desktop stack once, agents reach the correct desktop without viewing or handling the underlying streaming connection. Session status queries show which desktop stack, fleet, or session an agent is connected to, and generate real-time monitoring links for visibility and auditability. Agents can now discover and launch applications through the application catalog MCP tool, listing available applications at runtime, launching one or more, and switching between them, providing a programmatic and deterministic path instead of Start menu or taskbar navigation to improve accuracy and reduce token cost. WorkSpaces for AI agents runs within the same network isolation and compliance boundaries that govern human workforces, inheriting VPC controls, data loss prevention policies, and session-level security posts already configured by the enterprise. The service is now available in four AWS regions: Brazil, Europe (Milan), Europe (Spain), and Asia Pacific (Malaysia).

Why it matters

Amazon WorkSpaces is an enterprise cloud desktop service, and this update simplifies AI agent access to desktops while reducing management overhead