JA EN
shiichan

Penetration Testing on Every Deploy: AWS Continuum Plugs Into CI/CD (Preview)

AWS What's New ★★★★ View Markdown
#aws#security#devops

Hi, it's Shii-chan! Today penetration testing becomes part of your deploys!

AWS What's New aws.amazon.com

What was announced?

According to AWS What's New, AWS Continuum for Penetration Testing (formerly AWS Security Agent) now integrates directly into your existing CI/CD systems, in public preview.

The story so far

Continuum for Penetration Testing already provided continuous, on-demand penetration testing without contracting third-party pentest vendors.

But for teams shipping code daily, security validation often happened outside the deployment workflow. CI/CD integration closes that gap.

What changes

Penetration testing becomes a deploy-time event.

  • Findings, including severity, affected endpoints, and remediation guidance, arrive directly in pipeline output
  • Non-security changes complete with no meaningful delay
  • After remediation, the pipeline re-tests and verifies fixes automatically, with no manual re-triggers

Dive Deep

  • You don't need security expertise to get started
  • An auto-generated pipeline snippet can be pasted into any existing pipeline, and takes under five minutes to complete
  • Application context bootstraps automatically on the first run, with no prior full penetration test required
  • Continuous penetration testing itself is available today

See the AWS documentation for the details.

Wrap-up

  • AWS Continuum for Penetration Testing integrates with CI/CD (public preview)
  • Findings show up in pipeline output, and fixes are re-tested automatically
  • Setup takes under five minutes with a pasted snippet

This is for dev teams who want to shift security testing left!

Related posts