What happened
AWS announced (July 20, 2026) public preview of the Amazon GuardDuty investigation agent, an AI-powered agent that automatically investigates GuardDuty security findings across AWS environments, correlating signals and producing threat assessments to cut investigation time from hours to minutes.
Why it matters
This extends AWS's managed threat-detection service into agentic, on-demand SOC-analyst-style investigation, a major cloud vendor validating agentic triage/investigation as a core detection capability with very broad reach across AWS's customer base.
Applicability
AWS security teams and MSSPs using GuardDuty should evaluate the preview now to reduce mean-time-to-investigate for cloud security findings.