Amazon WorkSpaces Empowers AI Agents with Secure Desktop Access for Legacy Applications

The Challenge of Modernizing Legacy Applications for AI

Enterprises striving to integrate AI agents into their workflows often encounter a critical obstacle: the desktop and legacy applications that underpin daily business operations remain largely inaccessible to modern AI systems. A 2024 Gartner report highlights that 75% of organizations rely on legacy applications lacking modern APIs, and 71% of Fortune 500 companies depend on mainframe systems for essential processes, with no adequate programmatic access. This leaves many organizations at a crossroads: delay AI adoption or invest in costly, risky modernization projects.

Introducing AI Agent Desktops with Amazon WorkSpaces

Today, Amazon WorkSpaces announces a new capability that allows AI agents to securely operate desktop applications without requiring any application modernization. The same managed virtual desktops trusted by millions of employees can now serve AI agents, transforming WorkSpaces into infrastructure that scales enterprise productivity—not just delivers it. Since agents operate within your existing WorkSpaces environment, there are no APIs to build, no application migrations to plan, and no new infrastructure to manage. This means enterprises can finally bridge the gap between legacy applications and modern AI.

Chris Noon, Director at Nuvens Consulting, shared early feedback: “WorkSpaces lets our clients give AI agents the same secure, governed desktop environment their employees already use — no custom API integrations, full audit trails, and enterprise-grade isolation out of the box. For regulated industries, that’s not a nice-to-have — it’s the baseline.”

How It Works: Secure Cloud Desktop Access for AI Agents

With Amazon WorkSpaces, AI agents can securely access and operate desktop applications running inside managed WorkSpaces environments to complete complex business workflows. Agents authenticate through AWS Identity and Access Management (IAM) and connect via WorkSpaces, with complete audit trails available through AWS CloudTrail and Amazon CloudWatch. Because agents operate within secure WorkSpaces environments rather than on local machines, your existing security controls and compliance policies remain fully intact.

Amazon WorkSpaces supports the industry-standard Model Context Protocol (MCP), which means it works with any agent framework, including LangChain, CrewAI, and Strands Agents. This ensures flexibility and compatibility with your preferred AI tools.

Setting Up an AI Agent WorkSpace: A Step-by-Step Guide

To set up a WorkSpaces environment for AI agents, start in the AWS Management Console by creating a new WorkSpaces Applications stack—the environment definition that controls how agents connect and what they’re allowed to do. From the Amazon WorkSpaces console, choose Create stack and configure the basics: name, fleet association, and VPC endpoints. In Step 3 of the stack creation workflow, you’ll notice the new AI agents section with two options:

• No AI agent access (default for standard WorkSpaces designed for human users)
• Add AI Agents (enables AI agents to securely access and operate applications using their own identity and permissions)

Select Add AI Agents to enable the feature. This simple toggle opens up a new realm of possibilities for automating legacy workflows.

Compatibility with Industry-Standard Agent Frameworks

Thanks to MCP support, Amazon WorkSpaces integrates seamlessly with popular agent frameworks. Whether you use LangChain for building complex reasoning chains, CrewAI for multi-agent collaboration, or Strands Agents for specialized tasks, WorkSpaces provides a secure, governed desktop for each agent. This compatibility ensures that enterprises can adopt AI agents without rearchitecting their entire technology stack.

The ability to give AI agents their own desktop—complete with access to legacy applications—represents a significant leap forward. Enterprises can now automate workflows that were previously off-limits, all while maintaining security, compliance, and auditability. Amazon WorkSpaces for AI agents is currently available in preview.