Category: Security, Identity, & Compliance

AI coding assistants and MCP servers have made development faster, but they’ve also made secrets exposure harder to catch. Developers share credentials through config files, Git repos, and CI/CD logs without realizing it. This post walks through how GitGuardian integrates with AWS Secrets Manager to give security teams full visibility across the secrets lifecycle: detecting when vaulted credentials show up in code, finding duplicate secrets scattered across multi-account architectures, and putting continuous governance policies in place so secrets management becomes proactive rather than reactive. We cover a phased implementation roadmap, from initial deployment through automated monitoring, that helps you build a secrets security strategy that grows with your organization.

Organizations accumulate thousands of hours of session recordings that satisfy compliance mandates but rarely get reviewed. Learn how Teleport and Amazon Bedrock replace manual playback with AI-powered summarization, risk classification, and SIEM-ready alerts—keeping session data within your AWS environment.

Modern enterprises face a critical challenge: maintaining security visibility across thousands of internet-facing assets created during rapid development cycles. Discover how Detectify’s AWS-integrated solution combines continuous Surface Monitoring and Application Scanning with community-powered intelligence from ethical security researchers to automatically discover, test, and secure external assets, transforming security from reactive, point-in-time testing into an always-on defense that scales with business growth and adapts as quickly as threats emerge.

AWS Security Incident Response partners are strengthening customer security posture through new integrations that accelerate incident detection, response, and recovery across AWS environments. With enhanced AI-powered capabilities, expanded partner integrations from industry leaders like CrowdStrike, Palo Alto Networks, and SentinelOne, and new consumption-based pricing with a free tier, organizations can now build more robust, scalable incident response programs that reduce mean time to resolution while maintaining comprehensive security controls. Learn how AWS and our Security Incident Response partners are helping customers resolve security incidents faster through coordinated expertise, proven methodologies, and seamless service integrations.

OPSWAT’s MetaDefender Storage Security delivers automated file security for regulated financial institutions on AWS, combining Deep Content Disarm and Reconstruction with multi-scanning and data loss prevention capabilities. A major U.S. bank achieved 75% faster security update deployments while maintaining compliance with GDPR, HIPAA, and GLBA through containerized deployment on Amazon ECS and EKS with seamless S3 integration. Available through AWS Marketplace, the solution provides continuous monitoring, automated compliance reporting, and reduced operational costs for organizations managing sensitive data across multiple cloud regions.

Salt Security introduces its Model Context Protocol (MCP) server, enabling security teams to query API security data using natural language instead of navigating complex dashboards—transforming hours of analysis into seconds of actionable insights. This democratizes API security expertise across organizations while accelerating threat response for AWS customers running cloud-first environments.

Tines connects AWS Security Hub with security and IT tools to enrich alerts and automate resolution. Through intelligent workflows, teams can balance human insight with automation to achieve faster, more reliable security outcomes.

Discover how TrendAI Vision One™ and AWS services work together to address the most critical cloud security risks. Managing cloud risk requires more than merely deploying security features—it demands a continuous, integrated approach. TrendAI Vision One™ offers a comprehensive risk management platform that combines attack surface discovery, risk assessment and prioritization, and mitigation options to complement AWS solutions and strengthen your security posture in the cloud.

Discover how AWS and Ona enable enterprises to build and scale GenAI development environments with complete security and compliance. This blog explores the powerful integration of Amazon Bedrock and Ona’s secure workspace platform, showing how organisations can accelerate AI-native development from initial experimentation to production-ready systems while maintaining HIPAA, SOC2, and FedRAMP compliance. Learn how leading enterprises are achieving 10x engineering output without expanding their security surface or risking vendor lock-in.

Menlo Security’s File Security technology integrates with Amazon S3 to provide automated Content Disarm and Reconstruction (CDR) that eliminates both known and unknown file-based threats without generating false positives. This solution processes files at the component level through AWS Lambda and Amazon API Gateway, automatically sanitizing uploads while preserving file functionality, all without disrupting user workflows or processing speeds.