AWS Launches Service That Fixes Code Vulnerabilities on Its Own

AWS, Amazon's cloud division, has made Continuum for Code Vulnerabilities available to everyone after a preview period. Continuum scans code for vulnerabilities and checks which of them can actually be exploited in a given company's infrastructure. It ranks confirmed issues by business impact. For each confirmed issue, Continuum opens a ready-made fix as a pull request, a proposed code change. A human still has to review and approve it before it goes to production. To confirm its findings, the service cross-checks the code against the company's AWS infrastructure. Then it runs static analysis, meaning it checks the code without executing it. It also tests exploits in an isolated sandbox, a separate safe testing environment. AWS says this kind of check used to take hours of investigation and days of back-and-forth between teams. Right now the service only runs in two AWS regions: Virginia and Oregon.

For teams where AI agents write a growing share of the code, review has become the real bottleneck. Writing code is no longer the hardest part. A service that turns a confirmed vulnerability straight into a pull request ready to merge hits exactly that bottleneck. The limits are clear too. Continuum only works inside a company's own AWS infrastructure. And for now it is available in just two regions. So this looks more like a sign of where the industry is heading than a tool most teams can actually use today.