# AWS Continuum for Code Vulnerabilities Reaches General Availability, Offering AI-Powered Automated Remediation > Source: > Published: 2026-10-23 19:30:50+00:00 Originally published on [PkLavc](https://pklavc.com/blog/en/tech/aws-continuum-code-vulnerabilities-ga-ai-remediation/?utm_source=devto&utm_medium=organic_social&utm_campaign=tech&utm_content=aws-continuum-code-vulnerabilities-ga-ai-remediation). AWS Continuum for code vulnerabilities is now generally available as of October 22, 2026. The service discovers, validates, prioritizes, and remediates code vulnerabilities at machine speed. It constructs a context graph from the AWS environment, incorporating resource topology, identity relationships, and network reachability. This graph is used to identify application resources and assess business risk. Continuum ingests existing vulnerability findings and scans code. It confirms the exploitability of findings by testing them within an isolated sandbox environment. Vulnerability findings are prioritized based on their business impact. Remediation patches are provided as pull requests directly into developer workflows. These pull requests include exploitability proof and a blast radius assessment. The service utilizes AI, described as "picking the right AI model for each task." It operates in two modes: Learn mode: Proposes remediation fixes for user approval. Enforce mode: Allows autonomous action within user-defined guardrails, activated after sufficient trust in its precision is established. AWS Continuum integrates with existing AWS security services, specifically Amazon GuardDuty and AWS Security Hub. Information regarding regional availability is available in the AWS Region table, and further details are on the AWS Continuum product page. The general availability of AWS Continuum for code vulnerabilities introduces an automated solution designed to streamline the entire lifecycle of vulnerability management within AWS environments. This service aims to address the persistent challenges of identifying, validating, and remediating security flaws efficiently, leveraging contextual awareness and artificial intelligence. The service's ability to build a "context graph" from the AWS environment, encompassing resource topology, identity relationships, and network reachability, represents a significant advancement over traditional, isolated code analysis. Conventional static application security testing (SAST) and dynamic application security testing (DAST) tools often operate with limited environmental context, frequently leading to a high volume of findings that require extensive manual triage to determine actual risk. By understanding which resources constitute an application and their interdependencies, Continuum aims to identify vulnerabilities that carry "real business risk." This contextual understanding can help engineering teams prioritize remediation efforts more effectively, focusing on issues that are genuinely exploitable and impactful within their specific deployment environment, rather than generic code flaws that may not be reachable or exploitable in practice. This approach could reduce the noise associated with security findings, allowing developers to concentrate on critical issues with a higher likelihood of exploitation. A persistent challenge in vulnerability management is distinguishing between theoretical vulnerabilities and those that are actually exploitable in a given environment. AWS Continuum addresses this by confirming exploitability through testing findings in an "isolated sandbox." This automated validation step can drastically reduce the time spent by security engineers manually verifying potential exploits. By providing "exploitability proof" directly within the remediation pull request, developers receive concrete evidence of the vulnerability's impact, which can accelerate acceptance and application of patches. The sandbox testing also implies a dynamic analysis component, moving beyond static code analysis to observe runtime behavior, which is crucial for identifying vulnerabilities that manifest only under specific execution conditions. This direct evidence reduces ambiguity and provides a clear rationale for the proposed changes, potentially improving developer trust in automated security recommendations. **Continue reading:** [Full technical article on PkLavc](https://pklavc.com/blog/en/tech/aws-continuum-code-vulnerabilities-ga-ai-remediation/?utm_source=devto&utm_medium=organic_social&utm_campaign=tech&utm_content=aws-continuum-code-vulnerabilities-ga-ai-remediation) Explore more technology articles: [PkLavc Tech Blog](https://pklavc.com/blog/?utm_source=devto&utm_medium=organic_social&utm_campaign=tech) Telegram: [https://t.me/PkLavcTech](https://t.me/PkLavcTech) Discord: [https://discord.gg/zder5EZRK](https://discord.gg/zder5EZRK)