AWS has released two new security services as part of its Payment Card Industry Data Security Standard (PCI DSS) certification.
Having published its Fall 2025 compliance package earlier this week, this update reinforces AWS’s commitment to ensuring secure, auditable, and regulator-ready infrastructure for customers that handle payment data.
This also allows customer enterprises to continue their focus on business enhancement without worrying about infrastructure risk.
The two new services – AWS Security Incident Response and AWS Transform – can only be used in line with PCI DSS requirements.
This update also includes further improvements to compliance and security expectations, ensuring AWS customers of their commitment to enforcing strong cybersecurity policies.
AWS Security Incident Response
As a managed security service, the AWS Security Incident Response enables enterprises to detect, prioritize, investigate, respond to, and recover from security alerts.
Previously, security alerts were received from multiple tools following a self-managed structure, resulting in limited detection and inconsistent investigation quality.
However, by introducing an integrated, managed layer that supports incident response, AWS customers gain a single, structured experience for handling security events.
This service also utilizes tools such as Amazon GuardDuty and AWS Security Hub throughout the process, reducing the number of unimportant alerts and highlighting only critical issues during a security investigation.
From a customer experience perspective, this service improves clarity during incidents, reduces response time, and delivers consistent security handling at scale.
In doing so, the tool enables customers to shift from manual, fragmented responses to secure, expert-heavy ones.
AWS Transform
This is AWS’s first service that utilizes agentic AI to help enterprises modernize their legacy systems and workloads.
This includes migrating traditional mainframes, VMware systems, and Windows/.NET applications, and transforming information into code, databases, and infrastructure without manual work.
This service can reportedly accelerate the speed of system modernization by up to 5x faster, utilizing agentic AI-powered automation of analysis, planning, documentation, and transformation tasks.
AWS Transform can also automate repetitive, high-end tasks, enabling teams to deliver complex projects faster.
By applying AI agents with decades of AWS migration experience, these bots help customers modernize their systems predictably and consistently, resulting in lower execution risk.
This modernization strategy also helps lower costs and effort for enterprise customers by reducing dependence on expensive infrastructure and software licenses.
Moreover, the solution supports faster migration, lowering spending, and predictable modernization outcomes.
OSCAL in AWS Artifact
The PCI DSS report package is now available in OSCAL in AWS Artifact, reportedly being the first cloud provider offering compliance reports in a machine-readable format.
This format shift will allow customers to automate parts of their compliance work with JSON data for speedier information deployment.
By utilizing JSON data over traditional PDF and manual review documents, this allows both the customer and the machine to decipher with ease.