Amazon WorkSpaces Unleashes AI Agents on Legacy Desktop Apps Without APIs

Breaking: Amazon Web Services today announced a new preview feature for Amazon WorkSpaces that enables AI agents to directly use virtual desktops to operate legacy applications—eliminating the need for costly API integrations or application modernization.

The move directly addresses a critical bottleneck: enterprises rely on decades-old desktop software and mainframe systems that lack any programmatic interface for AI. According to a 2024 Gartner report, 75% of organizations still run legacy apps without modern APIs, and 71% of Fortune 500 companies depend on mainframes with limited automation access.

Amazon WorkSpaces now becomes the bridge. AI agents can log into the same managed virtual desktops that human employees use, interact with any installed application, and carry out complex workflows—all while staying within existing security and compliance guardrails.

Background

Enterprises have been torn between two painful options: either delay AI adoption until legacy systems are replaced, or invest heavily in risky modernization projects. The Gartner data underscores how widespread this problem is—three-quarters of organizations have applications that cannot natively talk to AI agents.

Amazon WorkSpaces solves this by giving AI agents their own secure desktop environment within the same Workspaces infrastructure. No custom API building, no migration planning, and no new infrastructure management.

What Customers Say

Chris Noon, Director of Nuvens Consulting, tested the feature early. WorkSpaces lets our clients give AI agents the same secure, governed desktop environment their employees already use—no custom API integrations, full audit trails, and enterprise-grade isolation out of the box, Noon said. For regulated industries, that’s not a nice-to-have—it’s the baseline.

How It Works: Agents Get Their Own Desktop

Administrators create a new WorkSpaces Applications stack via the AWS Management Console. In the stack wizard, a new AI Agents section offers two options: No AI agent access (the default for human-only desktops) and Add AI Agents. Selecting the latter activates agent-specific authentication and permissions.

Agents authenticate through AWS Identity and Access Management (IAM) and connect via WorkSpaces. Every action is recorded in AWS CloudTrail and Amazon CloudWatch, providing complete audit trails. Because the agents operate inside the secure Workspaces environment, existing security controls remain fully intact.

Amazon WorkSpaces also supports the industry-standard Model Context Protocol (MCP), meaning it works with any agent framework—including LangChain, CrewAI, and Strands Agents.

What This Means

This preview effectively turns Amazon WorkSpaces into infrastructure for scaling enterprise AI productivity, not just delivering it. Companies can now automate workflows that involve legacy applications without waiting for APIs or replacing mainframes.

For regulated industries like finance, healthcare, and government, the ability to keep AI agents under the same governance as human workers is a game-changer. WorkSpaces becomes a drop-in automation layer—secure, auditable, and instantly compatible with the tools businesses already rely on.

The preview is available now in select AWS Regions. Enterprises interested in testing the feature can start by creating a WorkSpaces Applications stack with AI agent access enabled.