Splunk and AWS: Building the Agentic Enterprise Together

Partners John Morgan

Key takeaways

  1. AWS and Splunk are expanding their partnership to help organizations defend against fast-moving, AI-driven cyber threats.
  2. Splunk’s Agentic SOC combines AI-powered security automation with adjustable human oversight, governance, and control.
  3. The collaboration aims to make cloud security faster, simpler, and more resilient for businesses and government organizations.

Today, I am incredibly excited to announce a transformative step in our mission to secure the digital world: an expanded strategic partnership between AWS and Splunk to help customers succeed in the agentic era. Together, we are building a significant foundation of customer adoption, commercial scale, and technical collaboration to create a long-term product-building partnership that goes beyond a single integration.

AI is Changing Security Operations

We are now at a point where human-driven defense cannot keep pace with automated, AI-driven threats. We have spent years building complex, static rule-based systems that require constant manual tuning. The industry has reached a breaking point where "more features" are no longer the answer.

The AWS and Splunk partnership represents a fundamental shift in philosophy. We are moving away from manual, feature-heavy workflows toward an agentic operating model for faster security outcomes.

Combining Autonomy with Human Control

This structural evolution is both timely and necessary, as AI continues to escalate the complexity and frequency of modern cyber threats. Customers need adjustable autonomy to provide a flexible spectrum of control, allowing security teams to calibrate the balance between AI-driven automation and human oversight. The core principles of the partnership are designed to address these customer pain points:

This partnership will help customers increase speed while maintaining trust, accountability, or control.

A Roadmap to Resilience

We have been working closely with AWS to verify that our shared efforts meet the rigorous demands of enterprise and government environments. We are moving quickly, with a clear roadmap designed to provide high-impact value.

"The collaboration between AWS and Splunk is about helping customers strengthen security for their cloud-native environments at the speed of business,” said Rudra Mitra, VP of Security Services at AWS. “By integrating AWS infrastructure with Splunk’s Agentic SOC, we are moving beyond simple integration to create a brand-new defensive paradigm. This powerhouse alliance offers customers the unified, intelligent architecture required to address evolving security challenges effectively.”

This collaboration signals a commitment to redefine how we collectively strengthen organizational security. We invite you to join us on this journey. Whether you are looking to simplify your SOC operations or leverage the power of agentic AI to improve your security posture, we want to hear from you.

Related Articles

Integrating Splunk Alerts with Amazon EventBridge: Enhancing Operational Efficiency
Partners
5 Minute Read

Integrating Splunk Alerts with Amazon EventBridge: Enhancing Operational Efficiency

Learn how Splunk alerts integrate with Amazon EventBridge, making it easy to route alerts through AWS services to automate responses, connect with incident management tools, and add AWS context to alerts.
Cisco Wins Microsoft Partner of the Year: What's Next at Ignite 2026
Partners
6 Minute Read

Cisco Wins Microsoft Partner of the Year: What's Next at Ignite 2026

Cisco is a 2026 Microsoft Partner of the Year in the Business Transformation – Marketplace winner.
Enhance Your Security Posture with Splunk + Google Workspace
Partners
2 Minute Read

Enhance Your Security Posture with Splunk + Google Workspace

With the launch of the Splunk Add-On for Google Workspace, Splunk customers now have a Splunk-supported, high-quality option for the collection and preparation of critical audit events from their Google Workspace deployment.