AWS 正式发布代码漏洞检测服务 Continuum
原标题:AWS Ships Continuum for Code Vulnerabilities
AI 摘要
AWS 宣布代码漏洞检测服务 Continuum 在美东(弗吉尼亚北部)和美西(俄勒冈)正式可用,距其限量预览发布约四个月。该服务通过构建代码仓库与 AWS 环境的上下文图来发现并验证漏洞,在隔离沙箱中运行漏洞利用并附带概念验证代码,输出攻击路径和爆炸半径评估,而非仅给出风险评分。定价按受保护代码行数(每百万行 200 美元起)和推理单元(每单元 10 美元)两个维度收费。业界人士关注其无法证明可达性的发现如何处理,以及未来自主应用修复类别的验收标准问题。
正文节选
AWS recently made Continuum for code vulnerabilities generally available in US East (N. Virginia) and US West (Oregon), four months after announcing it in gated preview. The pricing page, which the announcement does not mention, shows a model that charges by the finding as well as by the codebase. Principal solutions architect Esra Kayabali describes a service that finds and validates code vulnerabilities, then delivers fixes as patches that can be automated or as pull requests in the connected