AWS AI Updates: July 15, 2026

1. Amazon GuardDuty Adds AI Protection for Bedrock and SageMaker Workloads

AWS. Amazon GuardDuty introduced AI Protection, a capability that monitors Amazon Bedrock and Amazon SageMaker workloads for threats by analyzing CloudTrail management and data events from AWS AI services. It detects anomalous model invocations, cost harvesting attacks that force AI resources to consume excessive GPU time and tokens, and prompt injection attempts through integration with Amazon Bedrock Guardrails, routing findings automatically into AWS Security Hub. The feature is available to existing GuardDuty customers with a 30-day free trial and can be enabled organization-wide through AWS Organizations. Source

2. AWS Security Hub Launches AI Inventory for Organization-Wide AI Asset Visibility

AWS. AWS Security Hub added an AI inventory feature that catalogs AI assets across an organization and connects them to active threats, automatically discovering managed workloads from Amazon Bedrock, Bedrock AgentCore, and Amazon SageMaker through AWS Config resource integration. It also surfaces self-hosted models via Amazon Inspector SBOM analysis, identifying frameworks like Ollama, vLLM, and Hugging Face TGI on EC2 and ECR, and detects external AI API endpoints through GuardDuty DNS telemetry. Teams can filter and query the inventory by account, resource type, discovery method, and model identity, and it is bundled with Security Hub Essentials at no added cost across all commercial regions. Source

3. Amazon Managed Service for Apache Flink Gains AI Agent Skills

AWS. Amazon Managed Service for Apache Flink released AI Agent Skills that equip coding assistants including Kiro, Claude Code, and Cursor with expert guidance for building and operating Flink applications. Delivered through the Agent Toolkit for AWS and configured via the AWS CLI, the skills help with creating applications, troubleshooting, scaling, monitoring, networking configuration, cost optimization, and upgrading to newer versions such as Flink 2.2. This lets developers handle tasks that previously required specialized Flink expertise by querying their coding agent in natural language. Source

4. AWS Lambda Console Adds One-Click Setup for Coding Agents

AWS. The AWS Lambda console now offers a one-click prompt that configures coding agents with serverless development tooling, installing AWS Serverless Skills from the Agent Toolkit for AWS plus three Lambda-specific capabilities (MicroVM, Managed Instances, and durable functions) and the Serverless Model Context Protocol (MCP) server. The setup provides installation instructions for Claude Code, Kiro, Cursor, GitHub Copilot, Codex, Devin Desktop, and OpenCode, and includes AWS credential setup assistance for developers lacking local authentication. It is available in all commercial AWS Regions except the Middle East and in AWS GovCloud (US) where Lambda operates. Source