趋势解读：AWS says AI agents lack business context and，解读最新 AI 进展

Amazon is launching two new AWS services: AWS Continuum, which automates the fixing of code vulnerabilities, and AWS Context, which feeds AI agents business knowledge through a knowledge graph to improve their decision-making. The AWS DevOps Agent now includes verification capabilities that check AI-generated code before it goes live, automatically testing it in production-like environments to catch potential system failures early. AWS is also releasing its coding agent Kiro as an iOS app for on-the-go control, while expanding the Bedrock AgentCore platform with additional data connectors and security filters. At the AWS Summit in New York, Amazon's cloud division unveiled several services designed to make AI agents production-ready. They include a security service for code vulnerabilities and a knowledge graph that gives agents the business context they need. The announcements centered on two new services. AWS Continuum tackles security vulnerabilities in code. AWS Context serves as a shared knowledge base for agents. Both address typical bottlenecks when deploying AI agents in production. Agents lack business context, and security risks can't keep up with the pace of AI-generated code. Ad With AWS Continuum, AWS is launching a service that covers the full lifecycle of code vulnerabilities, from detection and prioritization to validation and recommended fixes. The service is initially available only to select pilot customers. Ad DEC_D_Incontent-1 AWS points to specialized security models like Anthropic's Claude Mythos as the driving force, writing in its security blog that such models can spot vulnerabilities and map out attack paths faster than defenders can respond. Traditional approaches built around data collection, storage, and dashboards weren't designed for that kind of speed, and the backlog of unresolved issues keeps piling up. Continuum takes the existing list of open vulnerabilities and also scans for new ones on its own. Then it ranks findings based on business context. Is the affected component even reachable? Is it actively used in production? Ad During validation, the service tries to replicate a successful attack in an isolated test environment to separate false positives from real risks. Only then does it suggest specific countermeasures like a modified network config, an adjusted permission setting, or a code patch. Continuum picks different frontier models depending on the task. The service can increasingly automate how code vulnerabilities are handled, but it starts in a learning mode that requires human sign-off. As confidence builds, teams can switch it to an enforcement mode where it applies defined fixes on its own. A companion threat modeling tool automatically generates overviews of possible attack scenarios from design documents or source code. Ad DEC_D_Incontent-2 AWS Context automatically builds a knowledge graph from existing enterprise data and makes it available to every agent across an organization. A knowledge graph links individual data points into a network of relationships. Ad