JA EN
shiichan

AWS DevOps Agent and Security Agent Hit GA! The April 6 Roundup

AWS Blog ★★★★ View Markdown
#aws#devops#security#ai

Hi everyone, it's me, Shiichan! Today I'm bringing you a packed AWS weekly roundup, and there is so much agent news that I could barely sit still!

AWS Blog aws.amazon.com

What was announced?

This one comes from the AWS News Blog and its weekly digest, the AWS Weekly Roundup (April 6, 2026 edition). The headline is that AWS DevOps Agent and AWS Security Agent, previously in preview, are both now generally available (GA). On top of that, the post covers AWS product lifecycle updates and a batch of launches from the past week.

The story so far

These two agents are the first wave of the frontier agents idea that AWS introduced at the last re:Invent. Frontier agents work autonomously across multiple steps and keep going until the job is done. Until now they were in preview, and with this GA release you can finally rely on them in production.

What changes

DevOps Agent is a teammate you can hand your cloud operations to: investigating incidents, reducing time to resolution, and preventing issues before they happen. Customers like United Airlines, Western Governors University (WGU), and T-Mobile are already using it. At WGU, resolution time dropped from hours to minutes, and preview customers report up to 75% lower MTTR and 3 to 5 times faster resolution.

Security Agent, on the other hand, brings continuous, context-aware penetration testing into the development lifecycle, working much like a human penetration tester. LG CNS, HENNGE, and Wayspring have adopted it, and LG CNS estimates over 50% faster testing, about 30% lower costs, and significantly fewer false positives.

Both are designed to run across AWS cloud, multicloud, and on-prem environments, so they act like an always-available colleague that takes the heavy lifting off your plate.

Dive Deep

If you want more detail, check the GA announcement for DevOps Agent and the GA announcement for Security Agent.

Quieter but important: the update to AWS Product Lifecycle Changes (dated March 31, 2026). Services moving into maintenance include App Runner, Audit Manager, CloudTrail Lake, Glue Ray jobs, IoT FleetWise, Application Recovery Controller readiness check, some Comprehend features, and Rekognition streaming events. Services heading toward sunset include Service Management Connector, RDS Custom for Oracle, WorkMail, and WorkSpaces Thin Client. If you use any of these, review the migration guidance.

Last week's launches were strong too. Amazon ECS added managed daemon support for ECS Managed Instances, and a new AWS Sustainability console lets you handle Scope 1-3 reporting in one place. On the generative AI side, Amazon Bedrock AgentCore Evaluations went GA, making it easier to evaluate your agents. There is more: AWS Transform custom automated codebase analysis reached GA, CloudWatch OpenTelemetry Container Insights for EKS entered preview, Lightsail gained compute-optimized bundles with up to 72 vCPUs, and CloudFront now supports SHA-256 for signed URLs and cookies.

Wrap-up

  • The star of the April 6 roundup is the GA of DevOps Agent and Security Agent, the first wave of the frontier agents introduced at re:Invent.
  • DevOps Agent speeds up incident response (hours to minutes at WGU, up to 75% lower MTTR in preview).
  • Security Agent runs continuous penetration testing like a human pentester (over 50% faster testing and about 30% lower costs at LG CNS).
  • The product lifecycle update moves several services into maintenance or sunset. If you use them, check the migration guidance.
  • Last week also brought ECS managed daemons, the Sustainability console, and Bedrock AgentCore Evaluations GA, features you can actually try in your work.

This is a great week for operations teams, security folks, and anyone who wants to hand more work off to agents!

Related posts