AWS appstream2: AppStream agent access docs: add Agent Toolkit, encryption, MCP clarifications
Summary
Restructures the agent access setup guide: adds a new 'Develop agents with the Agent Toolkit for AWS' section, rewrites the computer input/vision capability descriptions and selection rules, adds a link to S3 default bucket encryption for screenshot storage, and clarifies that MCP tools are forwarded from the desktop to the agent.
Security assessment
The change adds guidance to encrypt screenshots stored in S3 via default bucket encryption, and mentions IAM access controls and a secure endpoint for the Agent Toolkit. This documents security best practices (encryption at rest, least-privilege s3:PutObject) but does not address a specific vulnerability or incident.
Evidence
+You can optionally configure screenshot storage for agent sessions. When screenshot storage is enabled, screenshots captured during agent sessions are stored in an Amazon S3 bucket. The MCP service uses the connecting agent's credentials to upload screenshots to the bucket. The agent must have the `s3:PutObject` permission on the bucket. To encrypt screenshots in your bucket, see [Configuring default encryption for an Amazon S3 bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/default-bucket-encryption.html).
Diff
diff --git a/appstream2/latest/developerguide/agent-access-setup.md b/appstream2/latest/developerguide/agent-access-setup.md index b0a38f743..455ca3742 100644 --- a//appstream2/latest/developerguide/agent-access-setup.md +++ b//appstream2/latest/developerguide/agent-access-setup.md @@ -7 +7 @@ -PrerequisitesHow agent access worksComputer input and visionScreenshot storageDesktop screen layoutHome folder storageApplication settings persistenceMCP tool forwardingUser control modeStreaming URLsMCP proxy for AWSMonitoring +PrerequisitesHow agent access worksDevelop agents with the Agent Toolkit for AWSComputer input and visionScreenshot storageDesktop screen layoutHome folder storageApplication settings persistenceMCP tool forwardingUser control modeStreaming URLsMCP proxy for AWSMonitoring @@ -50,0 +51,8 @@ You enable agent access when you create a stack. When agent access is enabled, t +## Develop agents with the Agent Toolkit for AWS + +If you build your agent with an AI coding assistant, you can use the [Agent Toolkit for AWS](https://aws.amazon.com/products/developer-tools/agent-toolkit-for-aws/). It helps you set up agent access and build your first agent. + +The toolkit uses the AWS MCP Server. This managed server gives agents safe access to AWS through the Model Context Protocol (MCP). Agents can run AWS CLI commands, search AWS docs, and follow ready-made skills. They connect through one secure endpoint. You also get CloudWatch metrics and IAM access controls. + +To get started, ask your agent "Help me use WorkSpaces agent access". + @@ -53 +61,8 @@ You enable agent access when you create a stack. When agent access is enabled, t -Agent access provides two interaction capabilities that you configure at the stack level: +Agent access gives you two options for computer use. You set them up at the stack level. For other agent options, see MCP tool forwarding and User control mode. + + * **Computer input** — During a streaming session, agents click buttons, enter text, and scroll on the desktop. + + * **Computer vision** — During a streaming session, agents take screenshots to see the desktop. + + + @@ -55 +70 @@ Agent access provides two interaction capabilities that you configure at the sta - * **Computer input** — Allows agents to click buttons, enter text, and scroll on the desktop during a streaming session. +Use these rules to choose what to turn on: @@ -57 +72 @@ Agent access provides two interaction capabilities that you configure at the sta - * **Computer vision** — Allows agents to see the desktop by taking screenshots during a streaming session. + * For your agent to use computer input, computer vision must be turned on. The agent must see the desktop to use the keyboard and mouse. @@ -58,0 +74 @@ Agent access provides two interaction capabilities that you configure at the sta + * You can leave computer input and vision off if you only use tool forwarding. For details, see MCP tool forwarding. @@ -62 +77,0 @@ Agent access provides two interaction capabilities that you configure at the sta -You must enable at least one of these capabilities. @@ -66 +81 @@ You must enable at least one of these capabilities. -You can optionally configure screenshot storage for agent sessions. When screenshot storage is enabled, screenshots captured during agent sessions are stored in an Amazon S3 bucket. The MCP service uses the connecting agent's credentials to upload screenshots to the bucket. The agent must have the `s3:PutObject` permission on the bucket. +You can optionally configure screenshot storage for agent sessions. When screenshot storage is enabled, screenshots captured during agent sessions are stored in an Amazon S3 bucket. The MCP service uses the connecting agent's credentials to upload screenshots to the bucket. The agent must have the `s3:PutObject` permission on the bucket. To encrypt screenshots in your bucket, see [Configuring default encryption for an Amazon S3 bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/default-bucket-encryption.html). @@ -89 +104 @@ You can optionally enable application settings persistence. When enabled, your a -You can enable MCP tool forwarding to allow agents to interact with applications and the desktop operating system through direct MCP calls rather than using computer use tools. When enabled, MCP tools available on your WorkSpaces application session are forwarded to the agent. The forwarded tools appear when the agent lists its available tools. +You can enable MCP tool forwarding to allow agents to interact with applications and the desktop operating system through direct MCP calls rather than using computer use tools. When enabled, MCP tools available on your WorkSpaces application session are forwarded from your desktop to the agent. The forwarded tools appear when the agent lists its available tools.