New AWS Agents Go Live and Service Lifecycle Updates: Your Questions Answered

In a recent update, AWS announced the general availability of two powerful autonomous agents and provided important service lifecycle changes. This Q&A breaks down what you need to know about the AWS DevOps Agent and Security Agent, as well as the services entering maintenance or sunset. Let's dive into the details.

What is the AWS DevOps Agent and why is it important?

The AWS DevOps Agent is an autonomous AI agent designed to handle cloud operations end-to-end. It investigates incidents, reduces time to resolution, and proactively prevents issues. Introduced at re:Invent and now generally available, this agent works across AWS, multicloud, and on-premises environments. Think of it as an always-available teammate that does the heavy lifting, allowing your team to focus on strategic work. Its impact is measurable: preview customers reported up to 75% lower Mean Time to Resolve (MTTR) and resolutions that were 3 to 5 times faster.

How are companies like United Airlines and WGU using the DevOps Agent?

Organizations across industries are already seeing results. United Airlines, Western Governors University (WGU), and T-Mobile use the AWS DevOps Agent to accelerate incident response and simplify operations at scale. At WGU, resolution time dropped from hours to minutes. By automating multi-step workflows, the agent helps teams reduce downtime and prevent incidents before they occur. This translates directly into cost savings and improved reliability, making it a game-changer for operational efficiency.

What is the AWS Security Agent and how does it enhance penetration testing?

The AWS Security Agent brings continuous, context-aware penetration testing directly into the development lifecycle. Operating like a human pen tester, it automatically identifies vulnerabilities and weaknesses without manual effort. This agent is designed to work across AWS, multicloud, and on-premises environments, providing persistent security assessment. Customers like LG CNS, HENNGE, and Wayspring have reported impressive results: LG CNS teams estimate over 50% faster testing and ~30% lower costs, along with significantly fewer false positives. It's an always-on security teammate that helps you stay ahead of threats.

What specific benefits have LG CNS and other customers seen with the Security Agent?

For LG CNS, the AWS Security Agent reduced testing time by more than half and cut costs by about 30%. The reduction in false positives means security teams can focus on real issues rather than chasing dead ends. HENNGE and Wayspring have also reported strong outcomes, including faster vulnerability discovery and more reliable security assessments. By integrating continuous pen testing into development, teams can catch issues early and avoid costly post-deployment fixes. The agent's context-aware approach ensures tests are relevant and targeted, improving overall security posture while saving time and money.

What recent service lifecycle changes did AWS announce on March 31, 2026?

AWS regularly updates its Product Lifecycle Changes page to inform customers about services entering maintenance or sunset. On March 31, 2026, several changes were published. Services in maintenance (availability change guide) include: AWS App Runner, AWS Audit Manager, AWS CloudTrail – Lake, AWS Glue – Ray jobs, AWS IoT FleetWise, Amazon Application Recovery Controller (ARC) – Readiness Check, Amazon Comprehend (Topic Modeling, Event Detection, Prompt Safety Classification), Amazon Rekognition (Streaming Events and Batch Image Content Moderation), and Amazon SNS Message Data Protection (MDP). Services in sunset (discontinued) include: AWS Service Management Connector, Amazon RDS Custom for Oracle, Amazon WorkMail, Amazon WorkSpaces – Thin Client, and Amazon Chime SDK – Proxy Sessions (reaching sunset). AWS provides migration alternatives and support to minimize disruption.

Why does AWS provide service lifecycle change guides?

AWS understands that changes in service availability can impact operations. The lifecycle change guides offer customers clear guidance on available alternatives and migration support to ensure smooth transitions. By proactively communicating these changes, AWS helps you plan upgrades, replacements, or migrations without unexpected downtime. The guides include timeline information and recommended steps, empowering organizations to make informed decisions. This commitment to transparency is part of AWS's effort to minimize disruption and help customers maintain stable, secure environments even as services evolve or retire.

Where can I learn more about the AWS DevOps and Security Agents?

For deeper technical details, check out Sébastien's preview blog post and the GA announcement for the DevOps Agent. For the Security Agent, refer to Esra's preview blog post and the GA announcement. Both posts provide architecture insights, use cases, and implementation guidance. AWS also offers documentation and hands-on labs to help you get started. These agents are available now, so you can begin experimenting in your environment—whether it's AWS, multicloud, or on-premises—to see how they can accelerate your operations and strengthen your security posture.