AWS Security Agent Adds Threat Modeling, Kiro Features, and Claude Code Plugin

AWS unveiled new features for AWS Security Agent (part of AWS Continuum), which proactively protects the entire application development lifecycle. Through this update, users can now manage security more sophisticatedly from the design stage all the way to deployment.

Key updates include:

• Code Review Update (Preview): Supports integration with various platforms such as GitHub, GitLab, and Bitbucket, offering Pull Request scanning, security requirement packs, and simulation-based validation features.
• Threat Modeling (Preview): Analyzes design documents or source code to understand the context of application architecture, and presents threat identification and mitigation recommendations based on the STRIDE framework.
• IDE and CLI Integration: Through the powerful features of Kiro, the Claude Code plugin, and MCP (Model Context Protocol) integration, developers can immediately perform code review, threat modeling, and vulnerability fixes without leaving their IDE or CLI.

In particular, AWS Security Agent goes beyond simple pattern matching to perform reasoning-based in-depth analysis, and verifies the actual exploitability of vulnerabilities in a simulation environment, minimizing security delays in the development pipeline.