AWS Continuum for code vulnerabilities is now generally available

A developer's workflow is being fundamentally altered by the general availability of AWS Continuum for code vulnerabilities. This new security service employs AI to automatically locate, validate, and prioritize security flaws within an environment, providing ready-to-review fixes as pull requests.

Previously, this process demanded hours of manual investigation and days of coordination across various teams. Continuum confirms which identified findings are actually exploitable in your specific environment and ranks resulting issues based on business impact.

Continuum constructs a context graph using data from both your code repositories and your AWS environment. For AWS resources, a collector is set up in the relevant account and Region to gather details like network configuration and AWS Config resources, allowing Continuum to judge reachability.

This graph enables Continuum to map out critical systems—such as payment pipelines or customer data stores—and determine how closely an attack path approaches them, moving beyond generic severity scores.

The service analyzes each finding against this context, assigning an evidence level. If it can reproduce the issue, Continuum runs the exploit in an isolated sandbox, attaching proof-of-concept code and detailing the attack path and blast radius.

For every confirmed problem, Continuum generates a fix—be it a code patch, dependency upgrade, or configuration change—and presents it as a pull request in your connected repository. Crucially, every fix requires human approval before it ships.

The service is now available in the US East (N. Virginia) and US West (Oregon) Regions. Developers can begin testing this capability directly within the AWS Continuum console today.