Workflow control planes bring order to chaotic enterprise agent systemsEnterprise AI teams are hitting a wall — not because their models can't reason, but because the workflows underneath them were never built for agents. Tasks fail, handoffs break, and the problem compounds as organizations push agents deeper into back-office systems. A new architectural layer is emerging to address it: workflow execution control planes that impose deterministic structure on processes agents are expected to run.
One of the companies bringing this to the forefront is Salesforce, with a new workflow platform that turns back-office workflows into a set of tasks for specialized agents to complete. Users can upload their processes or use one of the set Blueprints provided by Salesforce, and Agentforce Operations will break it down for agents.
Salesforce senior vice president of Product, Sanjna Parulekar, told VentureBeat in an interview that the problem is that many enterprise workflows are not built for agents. “What we’ve observed with customers is that a lot of times, the brokenness in a process is probably in your product requirements document,” Parulekar said. “So when that’s uploaded into a product, it doesn’t quite work. We can optimize it and cut out some things and replace it with an agent.”
Without this control panel layer, enterprises could risk deploying agents that increase cost rather than fix their workflow problems.
Making the workflow work for agents, not just humans
Enterprises deploying agents are learning a costly lesson: Their workflows were designed around human judgment gaps, not machine execution. Processes that evolved through years of workarounds — loosely defined steps, implicit decisions, coordination that depends on individuals knowing what to do next — break when agents are asked to follow them literally.
Even with all of an enterprise’s context at its fingertips, AI systems will have difficulty completing tasks if it is not clear what it’s supposed to do.
Parulekar said her team found that focusing on what makes the process tick and breaking it down into more explicit steps and workflows makes the system more deterministic. Then, when platforms like Agentforce Operations introduce agents, those agents already know their specific tasks.
“It forces companies to rethink their processes and introduces observability into the mix because of the session tracing model in the system,” she said.
Parulekar said human checks can be built into the system, so the process is more transparent.
What makes this approach different from other workflow automation offerings is that it doesn’t rely on agents to decide what to do next; the system does. Unlike more traditional automation tools that route tasks and agents on probabilistic decision-making, this enforces execution on a more pre-defined, deterministic structure.
The problem it introduces
Codifying a workflow doesn't fix a broken one. If a process has flawed steps, encoding it for agents locks in the problem at scale. And once workflows are distributed across agents, the challenge shifts from execution to governance: who owns the process, who validates it, and how it evolves when business conditions change.
It puts the onus on teams to take a hard look at what works for them and what doesn’t.
Organizations need to consider that, along with the execution control plane offered by platforms like Agentforce Operations, someone should be made responsible for task completion and success.
Brandon Metcalf, founder and CEO of workforce orchestration company Asymbl, told VentureBeat in a separate interview that the key to both humans and agents following a workflow is a shared goal.
“You have to understand the goal or the agent or human won’t complete the task successfully,” Metcalf said. “Someone has to manage that outcome that has to be delivered. It can be a person or an agent.”
The bottleneck has moved. As Metcalf framed it, the question is no longer whether agents can reason through a task, it's whether the workflow underneath them is coherent enough to execute. For enterprises that built their processes around human judgment and institutional memory, that's a harder fix than swapping in a smarter model.
AI spreads across AWS as cloud exclusivity gives way to opennessAmazon Web Services on Tuesday launched one of the most consequential enterprise AI plays in the company's 20-year history, simultaneously bringing OpenAI's most powerful models to its Bedrock platform, unveiling a new agentic developer framework, releasing a desktop AI productivity tool called Amazon Quick, and expanding its Amazon Connect service from a single contact-center product into a family of four agentic AI solutions targeting supply chains, hiring, healthcare, and customer experience.
The announcements, made at a live event in San Francisco titled "What's Next with AWS," landed just 24 hours after OpenAI and Microsoft publicly restructured their exclusive cloud partnership — a move that, for the first time, freed OpenAI to distribute all of its products across rival cloud providers. AWS CEO Matt Garman called it "a huge partnership" and said customers have been asking for OpenAI models inside AWS "from the very early days."
The timing was no accident. Amazon CEO Andy Jassy had flagged the Microsoft-OpenAI restructuring as "very interesting" in a post on X the day prior, promising more details on Tuesday. What followed was a sweeping set of launches that together represent AWS's bid to become the definitive infrastructure layer for the agentic AI era — one where intelligent software agents don't just answer questions but take autonomous action inside enterprise workflows.
OpenAI's most capable models arrive on Amazon Bedrock for the first time, reshaping the cloud AI marketplace
The centerpiece announcement: OpenAI's latest models are now available through Amazon Bedrock in limited preview, with general availability expected within weeks. AWS confirmed that GPT-5.4 is available immediately in limited preview, with GPT-5.5 arriving shortly thereafter.
In an exclusive interview with VentureBeat at the event, Anthony Liguori, Vice President and Distinguished Engineer at AWS, described the significance of the moment. "We announced a partnership about eight weeks ago centered around this idea of the stateful runtime environment, the SRE APIs," Liguori said. "However, today we announced the availability of all of OpenAI's frontier models in Amazon Bedrock available via both the stateless APIs — these are the APIs that are commonly used, like chat completions and responses."
Liguori characterized the stateless API availability as particularly critical because it removes migration friction. "Customers can take their existing workloads today and just start using AWS right off the bat," he said. "They don't have to write any new software, develop any new things. I think that's one of the most exciting announcements that came out today."
The integration means AWS customers can now evaluate and deploy OpenAI models alongside offerings from Anthropic, Meta, Mistral, Cohere, and Amazon's own models — all through Bedrock's unified security, governance, and cost controls. For enterprise procurement teams, this collapses what had been a fragmented multi-vendor landscape into a single pane of glass.
How a $50 billion Amazon investment and a messy Microsoft breakup cleared the way for Tuesday's deal
The path to Tuesday's announcement was anything but smooth. As TechCrunch reported, OpenAI's earlier $50 billion deal with Amazon, announced in February, had created a legal tangle with Microsoft. Under the original Microsoft-OpenAI agreement, Microsoft retained exclusive rights to OpenAI products accessed through APIs, which appeared to conflict directly with OpenAI's promise to give AWS exclusive hosting rights for its new Frontier agent-building tool.
Microsoft had publicly pushed back at the time, stating that "Azure remains the exclusive cloud provider of stateless OpenAI APIs." The Financial Times reported that Microsoft even contemplated legal action. Monday's restructured deal — which replaced Microsoft's open-ended exclusivity with a nonexclusive license running through 2032 — swept those legal obstacles aside.
For AWS, the resolution means its multi-billion-dollar investment in OpenAI can now fully bear fruit. As CNBC reported, OpenAI's revenue chief Denise Dresser had told employees in a memo that the Microsoft relationship "has also limited our ability to meet enterprises where they are — for many that's Bedrock." At the San Francisco event, Dresser framed the moment as a turning point. "They're no longer in the mindset of experimentation and pilots," she said of enterprise customers. "They really want to go full enterprise wide, and they understand that to do that, they need to have powerful models. But even more importantly, they want those models in a trusted environment."
OpenAI CEO Sam Altman, who was unable to attend in person due to his ongoing court case against Elon Musk across the Bay Bridge in Oakland, sent a recorded video message. "We are co-developing an agent platform from the ground up, deeply integrated with AWS services and powered by OpenAI's most advanced models and tools," Altman said, "so that customers can build and run powerful agents in their own environment without worrying about the underlying plumbing."
Inside Bedrock managed agents, the reinforcement learning-trained 'harness' that AWS says will define the agentic era
Beyond raw model access, AWS launched Amazon Bedrock Managed Agents powered by OpenAI — a system that combines OpenAI's frontier models with its proprietary "harness," the agentic execution framework that powers products like Codex. This is where Liguori's technical analysis was most revealing.
He explained that the harness concept represents a shift in how models are trained and deployed for agentic work. "When you think about an agentic platform, there's really two components," Liguori told VentureBeat. "One is the harness — the actual logic that will execute tool calls for the model, determine when to compact the context, all of those sorts of things — and then the model itself."
Critically, Liguori argued, the best agentic performance comes when models are trained specifically against their harness through reinforcement learning — not merely prompted to use tools at inference time. "You can give a model a whole lot of instructions and a set of tools, and it will be able to use it most of the time," he said. "But when you really train the model on a specific set of tools, a specific style of operations, it's just like drilling plays over and over again — the model builds muscle memory for using that harness."
The football analogy is instructive. Where general-purpose models are like versatile athletes who can adapt to any playbook, harness-trained models are like championship teams that have run the same formations thousands of times until execution becomes instinctive. For enterprises deploying agents in high-stakes production environments — managing financial transactions, orchestrating supply chains, or processing sensitive healthcare data — that reliability gap matters enormously.
Bedrock Managed Agents consists of three components: a runtime layer for configuring skills, memory policies, and tool access; an environment layer where the agent lives (deployable on Fargate or other AWS compute); and an inference API for interacting with the agent. The system integrates deeply with AWS's identity and access management, VPC networking, and CloudTrail auditing — meaning every action an agent takes is logged and governed by existing enterprise security policies.
AWS makes its boldest security claim yet: zero human access to inference machines running OpenAI's models
Liguori made what may be his most striking claim when discussing why enterprises should trust AWS over on-premises alternatives or smaller cloud providers. "With Bedrock, the system that we're using to host the GPT-5.4 models, that whole environment is zero operator access," he told VentureBeat. "There's no human that could ever log into one of those machines, so your inference data is never able to be accessed by a human."
He pointed to AWS's custom silicon — Graviton processors and Nitro security chips — as the foundation for this claim. "When you look at one of our servers, either compute servers or the servers we're using for Gen AI, the only thing that you can buy off the shelf is the memory modules. Everything else is either custom boards or even custom silicon."
This argument is designed to counter a growing narrative from what the industry calls "neo-clouds" — smaller providers that offer on-premises model hosting with tighter physical security controls. Liguori flipped that argument on its head: "You're actually way more secure in the cloud because we have built a platform with such strong physical securities... If you were to try to stand up your own inference system today, you'd probably be running open source software on just Linux."
It's a bold claim, and one that enterprise CISOs will undoubtedly scrutinize. But it underscores AWS's conviction that the agentic era — where AI agents access source code, PII data, and critical business systems — demands infrastructure security guarantees that go far beyond what most organizations can build independently.
Codex's 4 million weekly users could soon multiply as OpenAI's coding agent arrives on AWS
OpenAI's Codex coding agent also arrived on Bedrock in limited preview. Dresser shared that Codex has been growing at a blistering pace, expanding "from 3 million weekly active users to 4 million in two weeks." The tool has evolved beyond simple code generation into a full agentic software development lifecycle platform.
For Liguori, who described himself as "10 to 20 times more productive" as an engineer thanks to tools like Codex, bringing this capability into AWS represents the bridge between individual developer productivity and enterprise-scale deployment. "Most developers today are using these OpenAI models on their laptops," he said. "We haven't seen that happen yet in the rest of the industry, and with Bedrock Managed Agents, we think we have a way for enterprises to deploy agents in a means that meets their compliance requirements."
The gap Liguori is describing — between the solo developer experience and enterprise-wide adoption — is arguably the central challenge of the current AI moment. Individual engineers can achieve extraordinary productivity gains with agentic coding tools. But scaling that to thousands of developers across a Fortune 500 company, with proper governance, security, and auditability, requires platform-level infrastructure. That's the market AWS is targeting.
Liguori saw the near-term potential in even more immediate terms. He described leading a team of about 20 engineers who share a common codebase of skills and MCP tools. "That has been an amazingly powerful thing, because we're all able to build on top of each other as we learn how to use these models," he said. "Where I've run into a hurdle is there's a lot of stuff I'd like to share with our finance team... and I can't really ask them to clone a Git repo and build it from a Git repo." Bedrock Managed Agents, he argued, will let teams create hosted agents that non-technical colleagues can access — taking agentic development from a developer-only practice to an enterprise-wide capability within the next six months.
Amazon Quick Desktop aims to be the agentic AI assistant that finally works for non-developers
While the OpenAI partnership dominated headlines, AWS also launched Amazon Quick Desktop — a new desktop application designed to bring agentic AI to knowledge workers who aren't developers. Liguori framed the product as addressing a critical gap. "A lot of these agentic tools have primarily targeted developers," he said. "Quick Desktop is a really great tool if you are a knowledge worker that is not a developer... I think it's been underserved for the non-developer knowledge workers."
Quick Desktop integrates with a user's local files, calendar, email, Slack, and enterprise applications — building what AWS calls a "Knowledge Graph" that maps relationships between people, projects, decisions, and actions. The system connects natively with Google Workspace, Microsoft 365, Zoom, and Salesforce. Unlike other AI productivity tools, Quick doesn't wait for prompts. It proactively surfaces what matters — unanswered emails, deals needing updates, documents awaiting review — and can take action like scheduling meetings, drafting emails, or updating Jira tickets.
Garman, who said he had been using the desktop app for several weeks, called it "by far the most effective tool" among AI productivity products he has tested. "If you think about what we've done with Quick — combine all of your sources of data inside of the enterprise — but then we also saw the power of having access to a local desktop and being able to operate with your local files and your local email and your local Slack... but people were worried about security, appropriately so," Garman said. "What we're doing here is combining a bunch of those things together with QUIC to give you the best of all of those worlds."
The product is available in preview today, with no AWS account required — users can sign up with just an email address. Customers including BMW, 3M, Mondelēz, Southwest Airlines, and the NFL are already using it, with some reporting production time reductions of nearly 80% and customer issue processing cut by more than 50%.
Amazon Connect becomes a family of four as AWS bets that 'agentic teammates' will transform supply chains, hiring, and healthcare
Perhaps the most ambitious long-term bet announced Tuesday was the expansion of Amazon Connect from a single contact-center product — one that reached over $1 billion in revenue last year and processes 20 million interactions daily — into a family of four agentic AI solutions.
The new lineup includes Amazon Connect Decisions, an agentic supply chain planning tool built on more than 25 specialized supply chain tools and 30 years of Amazon operational science, including one of Amazon's SCOT (Supply Chain Optimization Technologies) foundation models. Amazon Connect Talent is a high-volume hiring platform inspired by Amazon's experience hiring 250,000 seasonal employees during peak periods, using AI agents to conduct voice interviews around the clock and present recruiters with anonymized, skills-based scoring. Amazon Connect Customer AI is the renamed and enhanced version of the original contact-center service. And Amazon Connect Health covers the patient journey from appointment scheduling through clinical encounters, including ambient documentation, billing code suggestions, and post-visit summaries drawn from Amazon's experience with One Medical and Amazon Pharmacy.
Colleen Aubrey, who leads applied AI solutions at AWS and previously co-founded Amazon's advertising business, introduced a new design philosophy underlying all four products: "humorphism." Where skeuomorphism translated physical objects into digital metaphors — desks to desktops, files to folders — humorphism translates human interaction dynamics into AI agent behavior. "If we're building products that at the heart of which is an agentic teammate, then how should those teammates interact with you?" Aubrey asked. The philosophy manifests in specific design choices: Connect Decisions agents ask planners why they made manual adjustments and apply those insights across similar products. Connect Talent agents adapt follow-up questions based on candidate responses. Connect Health agents trace every clinical insight back to source data so physicians can verify AI-generated documentation.
What AWS's four-layer strategy reveals about where the real value in enterprise AI will be captured
Taken together, Tuesday's announcements reveal a coherent strategy operating across four distinct layers: custom infrastructure (Graviton, Trainium, zero-operator-access security), model access (Bedrock as a model marketplace with unified APIs), an agentic platform (Bedrock Managed Agents and AgentCore for building and governing agents), and purpose-built applications (Quick for individual productivity, Connect for vertical business operations).
This layered approach addresses a fundamental tension in the enterprise AI market. Companies want choice at the model layer but integration at the platform layer and specificity at the application layer. By offering all three through a single security and governance framework, AWS is betting it can capture value across the entire stack — a strategy that reshapes competitive dynamics for Microsoft, Google Cloud, and the growing constellation of smaller AI infrastructure providers.
Garman pushed back on the "SaaSpocalypse" narrative that agentic AI will destroy incumbent enterprise software companies. "The incumbent providers today have such a huge advantage," he said. "They have deep domain expertise... a large customer set with all of their data." He pointed to Salesforce's recent headless API offering as an example of incumbents adapting smartly. But he also drew an explicit parallel to the early days of cloud computing, when customers would simply replicate their on-premises data centers in the cloud rather than reimagine what was possible. "You see that today with how people are thinking about AI and agents," Garman said. "They're like, 'I have this business process, I'm gonna have agents do the exact same thing that humans do.' It kind of works... but it doesn't give you that transformational change."
He pointed to Amazon's own Prime Video team as proof of what that change looks like in practice. The team used agentic tools to rebuild a partner payment system that was projected to take two years — completing it in roughly two quarters with a handful of people, while simultaneously improving the system for customers, for Amazon, and for the partners who get paid through it.
The enterprise AI arms race enters a new phase as model access becomes table stakes and the platform war begins
For enterprises evaluating their AI strategies, Tuesday's announcements simplify one decision — OpenAI models are now available where most of them already run production workloads — while complicating another. With model access increasingly commoditized across cloud providers, the real differentiator becomes the platform layer: where agents are built, governed, deployed, and trusted to take consequential actions. That's the battleground AWS is staking out, and it's the same ground Microsoft, Google, Salesforce, and a growing number of startups intend to contest.
Liguori sees the transformation accelerating fast. "I think what we're going to see in the next six months is a lot of this agentic stuff going from developer only to being able to be consumed by a larger number of folks within an enterprise," he told VentureBeat. Anthony Liguori, the AWS distinguished engineer who led the technical work over eight sleepless weeks to bring OpenAI's models to Bedrock, said his own productivity as a software engineer has increased 10 to 20 times over the past year. When asked what excites him most about what comes next, he didn't talk about models or infrastructure. He talked about what happens when that same multiplier reaches the finance team, the product managers, the supply chain planners — the millions of knowledge workers who have been watching the agentic revolution from the sidelines.
"We had nothing eight weeks ago," he said, "and now we're here." If the next eight weeks move as fast, the sidelines may not exist for much longer.
Two paths emerge for taming AI agents in production.The era of enterprises stitching together prompt chains and shadow agents is nearing its end as more options for orchestrating complex multi-agent systems emerge. As organizations move AI agents into production, the question remains: "how will we manage them?"
Google and Amazon Web Services offer fundamentally different answers, illustrating a split in the AI stack. Google’s approach is to run agentic management on the system layer, while AWS’s harness method sets up in the execution layer.
The debate on how to manage and control gained new energy this past month as competing companies released or updated their agent builder platforms—Anthropic with the new Claude Managed Agents and OpenAI with enhancements to the Agents SDK—giving developer teams options for managing agents.
AWS with new capabilities added to Bedrock AgentCore is optimizing for velocity—relying on harnesses to bring agents to product faster—while still offering identity and tool management.
Meanwhile, Google’s Gemini Enterprise adopts a governance-focused approach using a Kubernetes-style control plane. Each method offers a glimpse into how agents move from short-burst task helpers to longer-running entities within a workflow.
Upgrades and umbrellas
To understand where each company stands, here’s what’s actually new.
Google released a new version of Gemini Enterprise, bringing its enterprise AI agent offerings—Gemini Enterprise Platform and Gemini Enterprise Application—under one umbrella.
The company has rebranded Vertex AI as Gemini Enterprise Platform, though it insists that, aside from the name change and new features, it’s still fundamentally the same interface.
“We want to provide a platform and a front door for companies to have access to all the AI systems and tools that Google provides,” Maryam Gholami, senior director, product management for Gemini Enterprise, told VentureBeat in an interview. “The way you can think about it is that the Gemini Enterprise Application is built on top of the Gemini Enterprise Agent Platform, and the security and governance tools are all provided for free as part of Gemini Enterprise Application subscription.”
On the other hand, AWS added a new managed agent harness to Bedrock Agentcore. The company said in a press release shared with VentureBeat that the harness “replaces upfront build with a config-based starting point powered by Strands Agents, AWS’s open source agent framework.”
Users define what the agent does, the model it uses and the tools it calls, and AgentCore does the work to stitch all of that together to run the agent.
Agents are now becoming systems
The shift toward stateful, long-running autonomous agents has forced a rethink of how AI systems behave. As agents move from short-lived tasks to long-running workflows, a new class of failure is emerging: state drift.
As agents continue operating, they accumulate state—memory, too, responses and evolving context. Over time, that state becomes outdated. Data sources change, or tools can return conflicting responses. But the agent becomes more vulnerable to inconsistencies and becomes less truthful.
Agent reliability becomes a systems problem, and managing that drift may need more than faster execution; it may require visibility and control.
It’s this failure point that platforms like Gemini Enterprise and AgentCore try to prevent.
Though this shift is already happening, Gholami admitted that customers will dictate how they want to run and control any long-running agent.
“We are going to learn a lot from customers where they would be using long-running agents, where they just assign a task to these autonomous agents to just go ahead and do,” Gholami said. “Of course, there are tricks and balances to get right and the agent may come back and ask for more input.”
The new AI stack
What’s becoming increasingly clear is that the AI stack is separating into distinct layers, solving different problems.
AWS and, to a certain extent, Anthropic and OpenAI, optimize for faster deployment. Claude Managed Agents abstracts much of the backend work for standing up an agent, while the Agents SDK now includes support for sandboxes and a ready-made harness. These approaches aim to lower the barrier to getting agents up and running.
Google offers a centralized control panel to manage identity, enforce policies and monitor long-running behaviors.
Enterprises likely need both.
As some practitioners see it, their businesses have to have a serious conversation on how much risk they are willing to take.
“The main takeaway for enterprise technology leaders considering these technologies at the moment may be formulated this way: while the agent harness vs. runtime question is often perceived as build vs. buy, this is primarily a matter of risk management. If you can afford to run your agents through a third-party runtime because they do not affect your revenue streams, that is okay. On the contrary, in the context of more critical processes, the latter option will be the only one to consider from a business perspective,” Rafael Sarim Oezdemir, head of growth at EZContacts, told VentureBeat in an email.
Iterating quickly lets teams experiment and discover what agents can do, while centralized control adds a layer of trust. What enterprises need is to ensure they are not locked into systems designed purely for a single way of executing agents.
