AWS First Steps
LanguageEnglish
New feature

AWS Continuum for code vulnerabilities is now generally available

AWS Continuum for code vulnerabilities automatically discovers, validates, prioritizes, and remediates code vulnerabilities at machine speed, integrating with existing AWS security services.

AWS has launched the general availability of AWS Continuum for code vulnerabilities. The service builds a context graph from AWS environments, including resource topology, identity relationships, and network reachability. It ingests existing vulnerability findings, scans code, and validates in isolated sandboxes to identify actually exploitable vulnerabilities. It prioritizes based on business impact, delivering fix patches as pull requests directly into development workflows with proof of exploitability and impact scope assessment attached. Continuum offers learning and enforcement modes: in learning mode, it suggests fix patches for user approval and operates autonomously within set constraints when sufficient confidence is achieved. It also integrates with existing AWS security services such as Amazon GuardDuty and AWS Security Hub.

Why it matters

Useful for developers and security teams who need to efficiently manage and address code vulnerabilities.

Read the original AWS announcement

Related articles and terms

Amazon CodeGuru SecurityA static application security testing service that uses ML to automatically detect source code vulnerabilities and suggest fix codeAutomated Vulnerability Scanning with Amazon Inspector - Continuous Security Assessment for EC2, Lambda, and ECRAutomatically scans EC2 instances, ECR container images, and Lambda functions for vulnerabilities and prioritizes them with CVE-based risk scores. Explains how agentless scanning is also achieved through integration with the Systems Manager agent.Amazon CodeGuruA service that uses machine learning to automate code reviews and identify application performance bottlenecksAmazon InspectorA security assessment service that automatically and continuously scans EC2 instances, Lambda functions, and container images for vulnerabilitiesVulnerability Assessment and Threat Detection - Continuous Security Monitoring with Amazon Inspector and GuardDutyLearn how to design and operate vulnerability assessment and threat detection using Amazon Inspector and Amazon GuardDuty.