AWS Security Agent Lands in Three New Regions Across Asia Pacific and South America!

Hey everyone, it's Shii-chan! Today I've got a little moving-day story about a handy security tool.

AWS What's New aws.amazon.com

What was announced?

This one comes from AWS's What's New. AWS Security Agent is now available in three more Regions: Asia Pacific (Mumbai), Asia Pacific (Singapore), and South America (São Paulo). Security Agent is now part of AWS Continuum, and teams in these Regions can use its core capabilities to protect their apps across the whole development lifecycle.

The story so far

Security Agent used to be available in only a limited set of Regions, so people outside them had a hard time reaching for it. With this expansion, folks in Asia Pacific and South America get more options too.

What changes

Teams building in Mumbai, Singapore, and São Paulo can now run their security checks without hopping across Regions. Running it closer to home also makes it easier to line up with your data residency needs.

Dive Deep

Security Agent does a lot. It runs STRIDE-based threat modeling on design docs and source code, and performs full-repository and PR-level code reviews across GitHub, GitLab, GitHub Enterprise Server, Bitbucket, and Confluence. It also offers managed compliance packs and custom requirements, penetration testing with reproducible attack paths, and retesting to confirm your fixes actually work. You can reach it through Kiro, Claude Code, and IDE plugins with MCP integration.

One thing to note: Simulated validation is still limited to US East (N. Virginia) for now. If you want more detail, take a peek at the documentation or the product page.

Wrap-up

• AWS Security Agent is now available in Mumbai, Singapore, and São Paulo
• Core features like threat modeling, code reviews, compliance, and penetration testing are included
• Simulated validation remains US East (N. Virginia) only
• A nice update for teams that want secure development in Asia Pacific and South America!