AWS Continuum for code vulnerabilities is now generally available

Summary

• AWS Continuum for code vulnerabilities is now generally available as a security service that finds, validates, and proposes fixes for code vulnerabilities.
• The service confirms which findings are exploitable in a specific environment, ranks issues by business impact, and proposes fixes as automated patches or pull requests.
• Every remediation currently requires human approval before shipping, though future updates will allow automated actions within defined guardrails.
• The system uses frontier AI models to address the challenge of threat actors rapidly creating exploit code and the high volume of scanner findings.
• Continuum builds a context graph from code repositories and AWS environment data to determine network reachability and business criticality.
• The service assigns an evidence level to findings, runs exploits in isolated sandboxes for reproducible issues, and provides blast radius assessments.
• For each confirmed issue, Continuum generates a fix such as a code patch, dependency upgrade, or configuration change and opens it as a pull request.
• Users can connect code sources via GitHub integration or Amazon S3 buckets and optionally add AWS infrastructure context using a collector.
• The console displays validated issues with severity ratings, exploitability status, likelihood, impact, and proof sections including source analysis.
• Generated patches do not automatically fix issues; teams must review and merge pull requests to maintain final control over what ships.
• The service is currently available in US East (N. Virginia) and US West (Oregon) Regions.
• Pricing information is available on the AWS pricing page, and further details can be found on the product page and User Guide.