Amazon posted a job listing this week for a Principal Technical Program Manager. The role leads a 40-person engineering team building “Amazon’s strategic integration with third-party agentic platforms” for “on-site and off-site commerce experiences.” The team builds APIs and integration layers connecting Amazon’s core services — Search, Personalization — with external platforms. The job requires navigating “complex technical and business partnerships with external platform providers.”
Forty engineers. Not a skunkworks team. Not a research project. A full platform org with a mandate to build the pipes between Amazon and every AI agent that wants to transact.
Read that alongside everything else Amazon has done in the last 90 days and a strategy comes into focus that most people are looking at in pieces instead of as a whole.
Here’s what Amazon is actually doing. It’s three layers, and they don’t contradict each other — even though they look like they should.
Layer 1: Defend the garden.
Amazon blocked 47 AI crawlers. It sued Perplexity and won a preliminary injunction stopping Comet from accessing Amazon accounts. On the Q1 earnings call in April, Jassy said third-party agents “are not often able to get the pricing right or the product information right” and “do not have any personalization data.” That’s Amazon’s CEO publicly arguing that no external agent can do what Rufus does. Meanwhile, Buy for Me is pulling transactions from external merchants into Amazon’s purchase flow — small businesses are getting $0 orders from buyforme.amazon email addresses with no tracking sync and no customer contact info.
If you only look at Layer 1, Amazon’s strategy is a walled garden. Keep everyone out. Own the agent and the customer.
Layer 2: Monetize the AI surface.
Rufus Sponsored Prompts went generally available on March 25. Brands now show up as product recommendations inside Rufus conversations — and the auction is live. Rufus MAUs are up 115% year-over-year. Engagement is up nearly 400%. Nearly 20% of shoppers who interact with a brand prompt in Rufus continue the conversation. Amazon’s ad business crossed $70 billion TTM. This is Sponsored Products circa 2014. The brands already running campaigns have the data advantage over those still watching.
If you only look at Layer 2, Amazon’s strategy is a new ad channel. Standard retail media expansion into a new surface.
Layer 3: Become the infrastructure.
This is the layer most people are missing, and it’s the one the job posting reveals.
On May 7, Amazon launched Bedrock AgentCore Payments with Coinbase and Stripe — AI agents can now pay for APIs, content, and other agents via x402 micropayments settled in USDC, all running on AWS infrastructure. The same week, Visa launched Intelligent Commerce on AWS, hosting MCP tools inside Bedrock AgentCore so developers can build end-to-end agentic payment workflows with Visa’s authentication and tokenization. Any agent built on Amazon Bedrock can now discover services, authorize purchases, pay via Visa or crypto rails, and complete transactions. All on Amazon’s infrastructure.
The job posting is the retail-facing version of this same play. “Off-site commerce experiences” means Amazon’s services (catalog, payments, logistics, identity) powering purchases that happen outside Amazon.com. It’s a “Buy with Amazon” button for the agent era. ChatGPT, Perplexity, Copilot, or any third-party agent calls Amazon’s APIs to surface Amazon inventory and complete the transaction. Amazon takes a cut regardless of where the sale happens.
Here’s why these three layers aren’t contradictory. Amazon can legally block Perplexity from scraping its storefront while offering API access to Amazon inventory. On Amazon’s terms. At Amazon’s price. Amazon can run Rufus ads on-site while simultaneously building the payment rails that process purchases happening inside ChatGPT. The walled garden and the open infrastructure coexist. Amazon just needs to be on the profitable side of both walls.
This is the same pattern Amazon has run before. In the 2000s, Amazon built AWS while running its own retail business. Competitors thought those were different strategies. They weren’t. Amazon wanted to be the infrastructure that powered commerce regardless of who was selling. The retail business was one customer of that infrastructure. Everyone else’s business was the rest.
Now replace “cloud computing” with “agent commerce” and the playbook is identical. Amazon wants to be the infrastructure that powers agent-mediated transactions regardless of which agent is buying. Rufus is one agent on that infrastructure. Everyone else’s agent is the rest.
The $70 billion US retail media industry was built on one assumption: retailers own the discovery surface. The shopper comes to Amazon, searches, sees ads, clicks, buys. But if a shopper’s AI agent pre-selects products before the shopper opens Amazon, the sponsored placement never gets seen. The brand doesn’t pay. Amazon loses the revenue.
The job posting is Amazon’s response to that threat. If discovery migrates off-site to third-party agents, Amazon wants to be the infrastructure that powers the transaction anyway — and takes a fee regardless.
Compare this to what everyone else is doing.
Walmart built Sparky, its own internal agent, and deployed it directly inside ChatGPT and Google Gemini after Instant Checkout converted 3x worse than Walmart.com. Walmart’s answer was: own the agent, deploy it everywhere, keep the customer relationship. Microsoft launched Brand Agents in January — a merchant trains their own AI agent on their catalog and gets a persistent presence inside Copilot. Shopify is rolling out agent-ready storefronts across ChatGPT, Copilot, Google AI Mode, and Gemini.
Amazon isn’t doing any of that. Amazon isn’t building a brand agent program. Amazon isn’t deploying Rufus inside other AI platforms. Amazon is building the pipes that every other agent plugs into.
Walmart wants to be the agent. Amazon wants to own the plumbing.
For brands, the implication is direct. If Amazon becomes the default transaction layer for third-party agents, then Amazon optimization will matter even when the purchase happens inside ChatGPT. The same Search and Personalization algorithms that determine your organic ranking on Amazon will determine what products get surfaced when an external agent calls Amazon’s APIs. The same ad auction dynamics will apply.
A caveat: this is a job posting, not a product announcement. Job descriptions at Amazon are aspirational — they’re written by hiring managers pitching a vision to attract senior talent. A 40-person team could be 8 people today with headcount approval to grow. The strategy I’m describing is one interpretation of a pattern of behavior, not a confirmed roadmap.
But the pattern is consistent. Bedrock AgentCore. Visa. Coinbase. x402. Rufus Sponsored Prompts. The Perplexity injunction. And now a dedicated team to integrate with external agentic platforms. Each of those is one data point. Together, they point in the same direction.
Three things to do now:
- If you’re running Sponsored Products on Amazon, you should already be in Rufus Sponsored Prompts. The auction is live. The brands running campaigns now are collecting data on which shopper questions trigger their products and what converts. If you haven’t looked at your Rufus performance data yet, you’re behind.
- Watch what Amazon announces at the next AWS event and in the next two quarterly earnings calls. Bedrock AgentCore is the infrastructure. The Visa and Coinbase partnerships are the payment rails. The 40-person team is the retail integration layer. Expect a formal agent commerce API announcement within 6-12 months.
- Don’t assume the walled garden means Amazon is closed to external agents. It means Amazon is setting the terms. “Appropriate value exchange” — Jassy’s phrase from Davos — is Amazon saying: if you want to access our catalog through your agent, you pay us. The wall isn’t to keep agents out. It’s to make them pay the toll.
Amazon didn’t announce a strategy this week. It posted a job listing. But read it alongside everything else they’ve shipped in the last 90 days, and the three-layer pattern is clear. Defend the garden. Monetize the surface. Own the plumbing.
Amazon doesn’t want to be the best agent. It wants to be the infrastructure that every agent runs on. And it’s already building it.