ECS Gateway is an account-level ingress resource that dynamically provisions ALBs, ACM certs, WAF and security groups per service — cutting per-service networking overhead for platform teams running containerized apps at scale.

AWS Continuum for code vulnerabilities is now generally available

AWS Continuum is a security service that finds and validates code vulnerabilities, then delivers fixes as patches you can automate or as pull requests in your repositories. It confirms which findings are exploitable in your environment, ranks issues by business impact, and proposes a fix for each one. Every remediation starts in a mode where Continuum proposes and a person approves before anything ships — with future automation available within guardrails you define.

Why scanners aren't enough anymore

Using frontier AI models, threat actors can turn a vulnerability disclosure into working exploit code in minutes. Meanwhile your scanners produce thousands of findings a day — and many need no action. A finding can be unreachable, unexploitable, or already mitigated by a runtime control. Generic severity scores don't tell you which resources a threat actor can actually reach: a critical score on a dev-only utility looks identical to a medium score on a service one step away from a payments database.

Previously, confirming exploitability took hours of manual investigation, and shipping a fix took days of coordination across security, infrastructure, and application teams. Continuum closes that gap by proving which findings are exploitable and bounding the risk of each fix it proposes.

The context graph

Continuum builds a context graph from two sources: your code repositories and your AWS environment. For AWS, a collector in the account and Region where your code runs gathers resource details — AWS Config resources, network configuration — so Continuum can judge whether a vulnerability is reachable over the network and what an attacker could reach from it.

From that graph Continuum learns which systems are business-critical, who owns them, how services depend on each other, and which data each one touches. It identifies your highest-value systems (customer data stores, payment pipelines, authentication services) and ranks each issue by how close its attack path runs to those systems.

The workflow

Continuum analyzes each finding against the graph, confirms exploitability, and proposes fixes. Reviews show prioritized recommendations ranked against your declared goals, with automation-ready remediation — console actions, updated IaC templates, or CLI commands — and detailed step-by-step instructions you can roll out and verify.

Bottom line

Continuum reframes vulnerability management from "severity numbers" to "what's actually exploitable, and how close to my crown jewels does the attack path run." If your scanners drown your security team in findings they can't triage, a service that filters for exploitability and business impact — with human-gated remediation — is the direction the whole industry is moving.