ICYMI: April 2026 @AWS Security

This article is a monthly digest of April 2026 AWS security announcements, blog posts, code samples, and security bulletins.

• AI security focus: agentic AI principles, Model Context Protocol, Amazon Bedrock guardrails, and Project Glasswing vulnerability research
• Identity management: IAM Identity Center session tags, AWS Service Authorization Reference, access key lifecycle automation
• Data protection: post-quantum cryptography for Secrets Manager, AWS KMS encryption bounds, CloudHSM cluster cloning
• Detection and incident response: threat technique catalog updates, forensic artifact collection, OCSF log transformation, multicloud security
• Governance: shift-left tag compliance, Control Tower automation, compliance lens dashboards
• 16 new AWS code samples covering identity, governance, compliance, AI security, and infrastructure
• 14 security bulletins addressing vulnerabilities in WorkSpaces, ECS, FreeRTOS, and other AWS services

April 2026 emphasizes securing AI workloads with same rigor as traditional infrastructure, automating governance at scale, and preparing for post-quantum cryptography requirements.