Amazon WorkSpaces Now Lets AI Agents Use Legacy Desktop Apps Without Rewriting Code

Breaking News – AWS has announced today that Amazon WorkSpaces can now serve as a secure desktop environment for AI agents, enabling them to interact with legacy applications that lack modern APIs. This move eliminates the need for costly application modernization projects, which have been a major barrier to enterprise AI adoption.

According to a 2024 Gartner report, 75% of organizations run legacy applications without modern APIs, and 71% of Fortune 500 companies still rely on mainframes with limited programmatic access. The new WorkSpaces capability allows AI agents to log into the same managed virtual desktops used by employees, operating applications as a user would, but with their own identity and permissions.

“WorkSpaces lets our clients give AI agents the same secure, governed desktop environment their employees already use — no custom API integrations, full audit trails, and enterprise-grade isolation out of the box. For regulated industries, that’s not a nice-to-have — it’s the baseline.”
— Chris Noon, Director, Nuvens Consulting

How It Works

AI agents authenticate via AWS Identity and Access Management (IAM) and connect to their own WorkSpaces instance. All actions are logged through AWS CloudTrail and Amazon CloudWatch, preserving full audit trails. Because agents operate inside the secure WorkSpaces environment, existing security and compliance policies remain intact.

The service supports the Model Context Protocol (MCP), making it compatible with popular agent frameworks like LangChain, CrewAI, and Strands Agents. Administrators can set up a new WorkSpaces Applications stack from the AWS Management Console, selecting an Add AI Agents option to enable agent access.

Background: The Legacy Application Bottleneck

Enterprises have struggled to deploy AI agents because most business workflows still depend on desktop applications and mainframes that lack APIs. The Gartner data highlights the scale: three-quarters of organizations are locked into systems without programmatic hooks. Traditional approaches required either delaying AI adoption or undertaking risky, expensive modernization projects.

Amazon WorkSpaces already provides secure virtual desktops to millions of users. By extending that infrastructure to AI agents, AWS aims to turn existing desktops into scalable automation platforms without new infrastructure management.

What This Means

Businesses can now automate processes that previously required human interaction with legacy software — from data entry in mainframe terminals to complex workflows in Windows-based applications. Agents operate with the same governance as human employees, reducing compliance risks.

For regulated industries such as finance and healthcare, this provides a path to AI adoption without violating security controls. The absence of custom API integrations also cuts development time and maintenance costs. The announcement signals a shift from modernizing applications to adapting how AI accesses them.

Early adopters are already testing the feature. AWS encourages users to explore the new AI agents section in the WorkSpaces console, starting with the setup instructions above.