Independent local gate · Source checked August 12, 2026

Is your AWS agent desktop ready for a bounded rollout?

Review Amazon WorkSpaces Applications agent access without granting access or estimating a live bill. This page cannot test your UI, identities, data, audit trail, or business outcome.

Deployment evidence

The workflow needs a Windows or legacy UI, is low consequence and reversible, and has a deterministic accepted result and human fallback. Region, Always-On or On-Demand fleet, single-session Windows image, latest WorkSpaces Agent, stack, network, capacity, quotas, and application licenses are verified. Orchestrator, IAM, streaming or SAML session, Windows, application, model, forwarded-tool, and approving-human identities are separate and least-privileged. Computer input, vision, forwarded tools, network, clipboard, storage, credentials, and application permissions are limited to the task. CloudTrail data events, CloudWatch alerts, screenshots, agent traces, approvals, application records, and reconciliation share stable operation identifiers. Sensitive screen data, model context, local files, S3 screenshots, logs, and observer access have approved minimization, retention, deletion, and incident controls. UI drift, stale screenshots, dialogs, timeouts, disconnects, session expiry, human stop, duplicate actions, unknown outcomes, and rollback pass tests. The live pricing page and calculator cover agent sessions, user fees, fleet time, models, images, storage, logs, network, licenses, retries, and accepted-task cost. The workflow requires an unsupported fleet, image, VPC endpoint, Region, concurrent connection pattern, or identity path. A prompt or shared credential is treated as business authorization, or a consequential action lacks immutable approval and reconciliation. The business case relies on the old no-additional-cost launch claim instead of current pricing evidence.

Planning result

Complete the evidence review

Select controls only when current configuration, tests, logs, owners, and a live cost estimate support them.

GA status does not certify an application workflow.
IAM MCP access is not desktop-application authorization.
Human stop does not roll back an external transaction.
Use the current pricing page, not the older launch sentence.

AWS agent desktop readiness questions

No. It runs locally in your browser and does not inspect an AWS account, fleet, stack, IAM role, streaming session, MCP server, application, screenshot bucket, or bill.

Yes. AWS updated the launch post on July 1, 2026 to state that agent access moved from public preview to GA.

Do not assume so. The current pricing page lists active agent-session charges after a monthly regional allowance, plus applicable fleet, Windows user, model, storage, network, and observability costs.

Official references: agent access overview, managed MCP server, and current pricing. Recheck them before deployment.

Is your AWS agent desktop ready for a bounded rollout?

Deployment evidence

Complete the evidence review

Approve one observable workflow, not generic desktop autonomy

Continue with source-bounded guides

GA overview

MCP and audit

Regions and cost

AWS agent desktop readiness questions

Features

Resources

Company