AWS Continuum for rapid security risk management announced

AWS Continuum discovers, prioritizes, validates, and remediates security risks at machine speed, operating within user-defined guardrails. It aims to accelerate the process of addressing software vulnerabilities by automating tasks previously requiring significant manual effort and cross-team coordination.

The service ingests findings from existing tools and scans, prioritizes vulnerabilities using a context graph of the environment and business, and validates exploitability in an isolated sandbox. Confirmed exposures are then offered fast, reversible mitigations and durable fixes that integrate with existing review and deployment processes.

A new Continuum threat modeling feature is launching in preview, which automatically generates comprehensive threat models from design documents or source code. The output is provided in STRIDE format, assisting in security design and analysis.

Existing AWS Security Agent capabilities are now available as Continuum penetration testing and Continuum code scanning, both offered in preview. These features are part of the broader Continuum offering for managing code vulnerabilities throughout their lifecycle.

AWS Continuum is designed to work alongside other AWS security services, including Amazon GuardDuty and AWS Security Hub. This integration allows users to leverage Continuum's capabilities within their existing AWS security posture management.