AWS Security ChangesHomeSearch

AWS appstream2: Doc history: MCP OAuth 2.1 authorization and Region expansion

Service: appstream2 · 2026-10-11 · Documentation low

File: appstream2/latest/developerguide/doc-history.md · Type: authz

Summary

Adds changelog entries for MCP server OAuth 2.1 authorization via AWS Sign-In, simplified connection without a streaming URL, the get_session_info tool, agent access Region expansion, and new launch_application/toggle_app_switcher tools.

Security assessment

The entry announces a new authorization mechanism (OAuth 2.1 via AWS Sign-In) for the MCP server, which is security-relevant documentation, but it is a changelog line with no vulnerability, CVE, or remediation detail.

Evidence

+[MCP server OAuth authorization and simplified connection](https://docs.aws.amazon.com/appstream2/latest/developerguide/agent-access-mcp-server.html)| The WorkSpaces Applications MCP server now supports OAuth 2.1 authorization through AWS Sign-In. You can also connect by providing the stack and user ID instead of generating a streaming URL, and use the `get_session_info` tool to retrieve session identifiers.| September 18, 2026  

Diff

diff --git a/appstream2/latest/developerguide/doc-history.md b/appstream2/latest/developerguide/doc-history.md
index 7768071..64cd531 100644
--- a//appstream2/latest/developerguide/doc-history.md
+++ b//appstream2/latest/developerguide/doc-history.md
@@ -23,0 +24,2 @@ Change| Description| Date
+[MCP server OAuth authorization and simplified connection](https://docs.aws.amazon.com/appstream2/latest/developerguide/agent-access-mcp-server.html)| The WorkSpaces Applications MCP server now supports OAuth 2.1 authorization through AWS Sign-In. You can also connect by providing the stack and user ID instead of generating a streaming URL, and use the `get_session_info` tool to retrieve session identifiers.| September 18, 2026  
+[Agent access Region expansion](https://docs.aws.amazon.com/appstream2/latest/developerguide/allowed-domains.html)| Agent access is now available in the Asia Pacific (Malaysia), Europe (Milan), Europe (Spain), and South America (São Paulo) Regions. For the MCP endpoint in each Region, see the WorkSpaces Applications MCP endpoints table.| September 17, 2026  
@@ -25,0 +28 @@ Change| Description| Date
+[New agent access tools for launching applications](https://docs.aws.amazon.com/appstream2/latest/developerguide/agent-access-mcp-server.html)| Added the launch_application and toggle_app_switcher tools to the WorkSpaces Applications MCP server. These tools let agents launch applications from the fleet catalog and switch between them.| August 21, 2026