AWS Launches DevOps and Security Agents, Promises 'Always-Available Teammate' for Cloud Ops

Breaking News: AWS DevOps Agent and Security Agent Now Generally Available

AWS today announced the general availability of two autonomous frontier agents—AWS DevOps Agent and AWS Security Agent—transforming how organizations handle cloud operations and security testing. The agents, first previewed at re:Invent, operate continuously across multiple steps until the job is done, providing an always-available digital teammate.

“These agents work like a tireless expert, investigating incidents and reducing resolution times from hours to minutes,” said Sébastien Stormacq, AWS Vice President of DevOps. “We’re seeing outstanding results from customers like United Airlines, Western Governors University, and T-Mobile.” Early adopters report up to 75% lower mean time to resolution (MTTR) and 3–5 times faster incident response.

The AWS DevOps Agent automates cloud operations—from troubleshooting to proactive issue prevention. At Western Governors University, “resolution time plummeted from hours to just minutes, allowing our team to focus on innovation instead of firefighting,” noted a WGU IT director.

On the security front, the AWS Security Agent brings continuous, context-aware penetration testing directly into the development lifecycle. It mimics human pen testers but operates round-the-clock across multi-cloud and on-premises environments. “Teams at LG CNS are seeing over 50% faster testing and roughly 30% lower costs, with significantly fewer false positives,” said Esra Kayabalı, AWS Director of Security Services.

Both agents are designed to work seamlessly across AWS cloud, multi-cloud, and on-premises infrastructure, giving organizations an “always-available teammate” that handles the heavy lifting.

Background

At last year’s re:Invent conference, AWS introduced the concept of frontier agents—autonomous AI systems that complete complex, multi-step goals without human intervention. The DevOps Agent and Security Agent are the first two offerings to reach GA after a successful preview period.

In parallel, AWS released its Product Lifecycle Changes update on March 31, 2026, affecting several services. The update includes guidance for services entering maintenance or sunset phases to minimize disruption.

Services in Maintenance

• AWS App Runner
• AWS Audit Manager
• AWS CloudTrail – Lake
• AWS Glue – Ray jobs
• AWS IoT FleetWise
• Amazon Application Recovery Controller (ARC) – Readiness Check
• Amazon Comprehend – Topic Modeling, Event Detection, and Prompt Safety Classification
• Amazon Rekognition – Streaming Events and Batch Image Content Moderation
• Amazon Simple Notification Service (Amazon SNS) – Message Data Protection (MDP)

Services in Sunset

• AWS Service Management Connector
• Amazon RDS Custom for Oracle
• Amazon WorkMail
• Amazon WorkSpaces – Thin Client
• Amazon Chime SDK – Proxy Sessions (reaching sunset)

What This Means

For cloud operations teams: The DevOps Agent shifts the paradigm from reactive troubleshooting to proactive, autonomous management. It reduces toil and enables engineers to focus on high-value work, accelerating innovation while cutting operational costs.

For security teams: The Security Agent embeds continuous penetration testing into CI/CD pipelines, catching vulnerabilities early. This reduces manual testing overhead, improves coverage, and lowers costs—without sacrificing accuracy.

Together, these agents represent a major step toward fully autonomous cloud management. As more enterprises adopt multi-cloud and on-premises strategies, AWS is providing tools that simplify complexity and improve resilience. The message is clear: the future of cloud operations is autonomous, continuous, and always on.