Service update · Amazon
Kiro previews Enterprise Management: write one policy in the AWS console and it applies to the IDE, CLI, Web and Crew LTS
- Effective time
- Review updated
Kiro launched Enterprise Management in preview. An administrator writes one policy in the AWS console and every developer on the profile gets it in the Kiro IDE, Kiro CLI, Kiro Web and Kiro Crew LTS. A policy has three parts: rules that allow, deny or ask before Kiro uses a model, runs a shell command, reads or writes a file, searches the web or calls an MCP tool; settings such as the default model, prompt logging and usage reports; and the steering files, Skills and Powers you choose to distribute. A rule can apply to everyone, one group or one user, with IAM Identity Center, Okta or Microsoft Entra ID as the identity source. For now it is available only for new Kiro profiles created in US East (N. Virginia); existing profiles and Europe come later. It needs Kiro IDE 1.4.154 or later and Kiro CLI 3.1.0 or later. Kiro also released Kiro Crew LTS for organizations governed this way. It adds Crew-specific rules on top of the same policy, such as allowed messaging channels, approval modes, scheduled jobs, reachable hosts and browser control. It installs beside the regular Kiro Crew app and updates only from its own lts channel.