Category: Security, Identity, & Compliance

As enterprises deploy AI agents at scale, traditional identity governance designed for human users can’t keep pace. With 80% of organizations reporting unintended agent actions, the need for purpose-built agent identity security has never been greater. Learn how SailPoint’s Agent Identity Security (AIS), built on Amazon Bedrock AgentCore, extends proven governance principles to autonomous AI agents, enabling automatic discovery, least-privilege enforcement, and continuous access reviews without slowing innovation.

Grubhub and Vody are proving that the winners of AI-powered commerce won’t be defined by a single breakthrough feature, they’ll be the retailers who invest early in unified, AI-ready data foundations built on AWS. By modernizing catalog, content, and behavioral data across 400,000+ merchants, they delivered initial model results in just 6–10 weeks and demonstrated measurable improvements in search relevance, conversion, and customer experience, offering a blueprint for retailers preparing to lead the next wave of AI innovation.

Learn how Orca Security’s Just-in-Time (JIT) integration with AWS IAM Identity Center helps organizations address permission sprawl by replacing persistent access with time-bound, approval-based permissions that automatically revoke when the time window expires. This post explores how the integration works and what it means for security and engineering teams operating at scale.

As AI workloads scale on AWS, the API layer becomes the primary security surface where every prompt, model response, and agent action flows through. AWS foundational controls and Wallarm runtime API security work together to deliver continuous discovery, behavioral threat detection, and output validation, helping organizations secure agentic systems without re-architecting their environments.

As cloud-native environments expand, security and operations leaders face mounting pressure to reduce response times while managing growing alert volumes and team capacity. Elastic’s AI-powered features on Amazon Bedrock automate the path from detection to resolution across both security and observability workflows. Learn how conversational agents, automated workflows, and custom AI agents accelerate incident response and root cause analysis on AWS.

Learn how to close the detection-to-response gap in your security operations by integrating Amazon Security Lake, Splunk Enterprise Security, and Recorded Future Autonomous Threat Operations into a unified SOC architecture that centralizes dispersed security data, automates event correlation, and accelerates threat mitigation through intelligence-driven response. This post walks through a phased implementation approach that transforms your security posture from reactive alert triage to proactive threat hunting.

Open-weight large language models are being released by research institutions worldwide, but turning published weights into production inference services remains a challenge—especially under strict data residency requirements. This post shows how Public AI built a scalable inference platform on Amazon EKS and Intel-powered Amazon EC2 instances to serve Switzerland’s Apertus model family, and why this architecture provides a repeatable blueprint for sovereign LLM initiatives.

AI coding assistants and MCP servers have made development faster, but they’ve also made secrets exposure harder to catch. Developers share credentials through config files, Git repos, and CI/CD logs without realizing it. This post walks through how GitGuardian integrates with AWS Secrets Manager to give security teams full visibility across the secrets lifecycle: detecting when vaulted credentials show up in code, finding duplicate secrets scattered across multi-account architectures, and putting continuous governance policies in place so secrets management becomes proactive rather than reactive. We cover a phased implementation roadmap, from initial deployment through automated monitoring, that helps you build a secrets security strategy that grows with your organization.

Organizations accumulate thousands of hours of session recordings that satisfy compliance mandates but rarely get reviewed. Learn how Teleport and Amazon Bedrock replace manual playback with AI-powered summarization, risk classification, and SIEM-ready alerts—keeping session data within your AWS environment.

Modern enterprises face a critical challenge: maintaining security visibility across thousands of internet-facing assets created during rapid development cycles. Discover how Detectify’s AWS-integrated solution combines continuous Surface Monitoring and Application Scanning with community-powered intelligence from ethical security researchers to automatically discover, test, and secure external assets, transforming security from reactive, point-in-time testing into an always-on defense that scales with business growth and adapts as quickly as threats emerge.