AWS Continuum for code vulnerabilities reaches general availability with automated sandboxed proof-of-concept generation
·2026.10.27 00:02
Key point
The service builds a context graph to rank risks by proximity to critical systems and opens fixes as pull requests, currently available in US East (N. Virginia) and US West (Oregon).
Details
- AWS Continuum for code vulnerabilities is now generally available, shifting vulnerability management from list-based scanning to end-to-end remediation by reproducing exploitable findings in isolated sandboxes with proof-of-concept code.
- Amazon Threat Intelligence data showed a PHP2Shell exploitation attempt on October 17, four days before the public disclosure of CVE-2026-109618 and CVE-2026-109619, with proof-of-concept exploits circulating roughly twelve hours before the embargo lifted.
- Amazon ECS Gateway is available in all commercial Regions at no additional charge, allowing up to 25 services to share a single Application Load Balancer (ALB) and supporting up to 10,000 clusters per gateway.
- Amazon Polly's Generative engine upgrade adds 14 new voices across 9 locales, bringing the total to 57 voices in 11 languages, with Hindi and Finnish now generally available.
Security and Vulnerability Management
- Continuum assigns evidence levels to findings and ranks issues based on how close the attack path runs to business-critical systems.
- Remediation is currently gated by human approval, requiring users to review and merge pull requests, with autonomous fixes planned behind confidence thresholds.
- AWS published WAF mitigations for the specific CVEs identified in the honeypot telemetry.
Infrastructure and Compute
- TorchNeuron, an open source PyTorch backend for AWS Trainium, is in public beta, allowing models to run on Trainium2 and Trainium3 instances via a .to('neuron') configuration change.
- Amazon SageMaker AI Training sessions are generally available, enabling custom loss functions and reward signals while SageMaker handles GPU allocation and fault recovery.
- Structured outputs for Claude models on Amazon Bedrock provide schema-compliant JSON across bedrock-runtime and bedrock-mantle endpoints without custom parsing.
Data and Migration
- Amazon ElastiCache Serverless for Valkey supports online migration with zero downtime from self-managed Valkey or Redis OSS on Amazon EC2.
- U.S. Bank migrated 119 TB from Oracle Exadata to Amazon RDS for Oracle using a pipeline built on Oracle XTTS, AWS DataSync, and Amazon EFS, with initial baseline copies finishing in about 7 days.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.