Amazon Web Services (AWS) said on the 7th that it officially launched a feature that lets AI agents safely run corporate desktop applications. Based on the Amazon WorkSpaces application, the feature allows agents to access a managed desktop environment, operate business applications, and perform tasks.
Until now, many corporations have relied on in-house programs without modern APIs or Windows-based business software for core processes. Because of this, AI agents have been unable to reach the final step of real-world workflow automation. AWS said the launch will expand automation coverage without having to transfer existing applications or newly develop separate APIs.
After consolidation to a streaming session, the agent interacts with desktop applications through an MCP-based service endpoint. Authentication is handled by AWS IAM, and the activity history is recorded in CloudTrail and CloudWatch to provide audit trails and operational visibility.
The general availability version also adds three features. MCP tool forwarding handles file lookups, databases queries, and API calls that do not require screen manipulation with separate tools to reduce expense and latency. The real-time user control feature lets a person watch the agent's work and immediately revoke session permissions if needed. Domain-joined fleet support applies Active Directory–based identity management to extend corporations' existing access controls and audit frameworks to agents.
Corporations can enable agent access in new or existing stacks through the WorkSpaces application console, AWS CLI, and APIs.