Author: Aliaksei Ivanou

As AI workloads scale on AWS, the API layer becomes the primary security surface where every prompt, model response, and agent action flows through. AWS foundational controls and Wallarm runtime API security work together to deliver continuous discovery, behavioral threat detection, and output validation, helping organizations secure agentic systems without re-architecting their environments.

AWS has launched internal access findings, a new feature of IAM Access Analyzer that uses automated reasoning to evaluate policies and generate findings when users have access to critical AWS resources like S3, DynamoDB, and RDS. Several AWS Security Competency Partners, including Cyera, Orca Security, Ping Identity, Saviynt, and Wiz, are integrating this new capability into their solutions to help customers enhance visibility, streamline compliance, and strengthen access controls across their AWS environments.

By integrating RCPs into their solutions, these APN partners are helping our joint customers to centrally manage and enforce access controls on their AWS resources at scale. This helps customers align with their organization’s security policies and help mitigate the risk of unintended external access. Customers can use these partner solutions to simplify policy enforcement and rapidly operationalize security across AWS resources in their organization.