ICYMI: July 2026 @AWS Security

This article summarizes AWS Security Blog posts, samples, and bulletins from July 2026, covering AI agent security, data protection, infrastructure security, threat detection, and compliance.

• AI security: Cedar policies for multi-agent authorization, zero data retention enforcement, system prompt leakage mitigations, and AI coding agent control frameworks
• Data protection: Workload credentials for cross-account secrets, post-quantum cryptography migration guidance, KMS vs CloudHSM comparison, and supply chain protection via dependency cooldowns
• Infrastructure security: Container attribute-based firewall rules, AI agent traffic authentication with WAF Bot Control, Network Firewall troubleshooting automation, and DDoS protection updates
• Threat detection: GuardDuty investigation agent for AI-powered threat assessment, North Korean supply chain attacks analysis, Inspector SBOM plugins, and Security Hub multicloud Azure support
• Governance: HITRUST i1 and HIPAA Technical Safeguards implementation guidance, AWS critical third-party designation in UK financial sector
• 14 new AWS samples and 1 AWS Labs repository for AI governance, identity, data protection, and compliance automation
• 21 security bulletins addressing credential disclosure, SSRF, injection flaws, and input validation issues in AI agent tools

July 2026 provides comprehensive guidance and runnable code for securing AI agent architectures, implementing least-privilege authorization, managing cryptographic transitions, and scaling security across multicloud environments.