ICYMI: June 2026 @AWS Security

This article is a monthly digest of AWS security updates, featuring blog posts, security bulletins, and code samples from June 2026.

• Identity: Secure multi-tenant AI agents with resource-based policies, customize federated sign-in with Lambda triggers, and restrict console access to expected networks
• Infrastructure security: Gain DDoS visibility with flow logs, detect subdomain takeover attacks, and prevent data exfiltration with layered egress controls
• Detection and response: Six-phase maturity roadmap for Security Hub and GuardDuty, AI-native platform for code vulnerability lifecycle, and CLI tools for security investigations
• Data protection: New AWS KMS GetKeyLastUsage API to audit key activity and prevent accidental deletions
• Governance: Multi-account architecture patterns, patch compliance dashboards, and Lake Formation permission preservation during account transfers
• 10 new AWS samples for AI security, identity, infrastructure, and governance including WAF patterns for Bedrock agents and graph-based CMDB tools
• 12 security bulletins addressing vulnerabilities in Kiro IDE, Aurora PostgreSQL, AWS WAF, and containerd CRI plugin

Organizations can operationalize security at scale using maturity roadmaps, AI agent registries, and governance frameworks with deployment-ready code samples.