Category: Security, Identity, & Compliance

As AI workloads scale on AWS, the API layer becomes the primary security surface where every prompt, model response, and agent action flows through. AWS foundational controls and Wallarm runtime API security work together to deliver continuous discovery, behavioral threat detection, and output validation, helping organizations secure agentic systems without re-architecting their environments.

As cloud-native environments expand, security and operations leaders face mounting pressure to reduce response times while managing growing alert volumes and team capacity. Elastic’s AI-powered features on Amazon Bedrock automate the path from detection to resolution across both security and observability workflows. Learn how conversational agents, automated workflows, and custom AI agents accelerate incident response and root cause analysis on AWS.

Learn how to close the detection-to-response gap in your security operations by integrating Amazon Security Lake, Splunk Enterprise Security, and Recorded Future Autonomous Threat Operations into a unified SOC architecture that centralizes dispersed security data, automates event correlation, and accelerates threat mitigation through intelligence-driven response. This post walks through a phased implementation approach that transforms your security posture from reactive alert triage to proactive threat hunting.

Open-weight large language models are being released by research institutions worldwide, but turning published weights into production inference services remains a challenge—especially under strict data residency requirements. This post shows how Public AI built a scalable inference platform on Amazon EKS and Intel-powered Amazon EC2 instances to serve Switzerland’s Apertus model family, and why this architecture provides a repeatable blueprint for sovereign LLM initiatives.

AI coding assistants and MCP servers have made development faster, but they’ve also made secrets exposure harder to catch. Developers share credentials through config files, Git repos, and CI/CD logs without realizing it. This post walks through how GitGuardian integrates with AWS Secrets Manager to give security teams full visibility across the secrets lifecycle: detecting when vaulted credentials show up in code, finding duplicate secrets scattered across multi-account architectures, and putting continuous governance policies in place so secrets management becomes proactive rather than reactive. We cover a phased implementation roadmap, from initial deployment through automated monitoring, that helps you build a secrets security strategy that grows with your organization.

Organizations accumulate thousands of hours of session recordings that satisfy compliance mandates but rarely get reviewed. Learn how Teleport and Amazon Bedrock replace manual playback with AI-powered summarization, risk classification, and SIEM-ready alerts—keeping session data within your AWS environment.

Modern enterprises face a critical challenge: maintaining security visibility across thousands of internet-facing assets created during rapid development cycles. Discover how Detectify’s AWS-integrated solution combines continuous Surface Monitoring and Application Scanning with community-powered intelligence from ethical security researchers to automatically discover, test, and secure external assets, transforming security from reactive, point-in-time testing into an always-on defense that scales with business growth and adapts as quickly as threats emerge.

AWS Security Incident Response partners are strengthening customer security posture through new integrations that accelerate incident detection, response, and recovery across AWS environments. With enhanced AI-powered capabilities, expanded partner integrations from industry leaders like CrowdStrike, Palo Alto Networks, and SentinelOne, and new consumption-based pricing with a free tier, organizations can now build more robust, scalable incident response programs that reduce mean time to resolution while maintaining comprehensive security controls. Learn how AWS and our Security Incident Response partners are helping customers resolve security incidents faster through coordinated expertise, proven methodologies, and seamless service integrations.

OPSWAT’s MetaDefender Storage Security delivers automated file security for regulated financial institutions on AWS, combining Deep Content Disarm and Reconstruction with multi-scanning and data loss prevention capabilities. A major U.S. bank achieved 75% faster security update deployments while maintaining compliance with GDPR, HIPAA, and GLBA through containerized deployment on Amazon ECS and EKS with seamless S3 integration. Available through AWS Marketplace, the solution provides continuous monitoring, automated compliance reporting, and reduced operational costs for organizations managing sensitive data across multiple cloud regions.

Salt Security introduces its Model Context Protocol (MCP) server, enabling security teams to query API security data using natural language instead of navigating complex dashboards—transforming hours of analysis into seconds of actionable insights. This democratizes API security expertise across organizations while accelerating threat response for AWS customers running cloud-first environments.