🔶 Introducing Amazon ECS Gateway: A fully-managed ingress solution for ECS services
Amazon ECS Gateway is a new account-level resource that automatically provisions ingress infrastructure for ECS services. Platform teams define networking, TLS, and WAF settings once, and application teams opt in with a gateway connector.
Claude Code's team automates most code review via pre-PR verification, AI and security reviewers that block merges, risk-tiered human approval, merge queues, feature flags, and fast rollback. Humans review risky code and architecture, minimizing time without raising reverts or incidents.
Thinkst's Agent Provocateur is a Canary personality that exploits agent suggestibility. It greets scanning agents, engages them helpfully, and probes for username, MAC address, and SSH host-key fingerprint, raising alerts. Internal tests reported agents tripping it 100% of the time.
Salesforce's two-track remediation model for AI-discovered vulnerabilities: a strategic track fixes shared architectural choke points, retiring findings in bulk; a tactical track closes validated multi-step exploit chains on adversary timelines.
🔶 Penetration testing every deployment with AWS Continuum
How to deploy a CI/CD gate using AWS Continuum that runs penetration tests scoped to each deployed change. It blocks production promotion when validated findings meet a severity threshold. Authentication uses OIDC rather than stored keys.