Kiro adds enterprise policy management, Grok 4.7 support and new approval mode

Kiro, AWS's AI coding tool, announced on November 10, 2026 a set of updates covering enterprise governance, model support and agent permissions, including an Enterprise Management preview for org-wide policy control, experimental Grok 4.7 support, and a new "Approve for me" permission mode replacing Autopilot.

What changed in Kiro

• Enterprise Management (preview) lets admins write one policy in the AWS console that applies across Kiro IDE, CLI, Web and Kiro Crew LTS, with allow, deny and prompt rules for models, shell commands, file operations, web search and MCP tools, under a default-deny posture.
• The preview works only for newly created Kiro profiles in US East (N. Virginia), and needs Kiro IDE 1.4.154+ and Kiro CLI 3.1.0+; it integrates with IAM Identity Center, Okta or Microsoft Entra ID.
• A new enterprise-hardened "Kiro Crew LTS" edition ships alongside it, restricting feature previews and debug tools and enforcing SSO login via the CLI.
• Grok 4.7 (xAI) is now available with experimental support in Kiro IDE, CLI, Crew and Web for Pro, Pro+, Pro Max and Power tier customers, with a 500K-token context window; requests up to 200K tokens carry a 2.7x credit multiplier, and above that bill at 5.4x.
• Kiro IDE 1.4.154 replaces the old Autopilot toggle with a permission menu adding "Approve for me", which auto-approves actions it judges safe; Kiro CLI 3.2.0 adds a full-screen Mermaid diagram viewer and simpler MCP server sign-in without manual OAuth setup.

What it means for people building with AI

For teams scaling agentic coding tools, centralized governance across IDE, CLI and web surfaces addresses a core concern: visibility into what AI agents can touch. A default-deny posture plus identity provider integration lets administrators set guardrails once instead of per surface, while the 500K-token context window gives builders a high-context option for larger codebases. "Approve for me" also cuts approval friction by limiting manual review to genuinely uncertain actions.

Availability and next steps

The Enterprise Management preview currently covers only new Kiro profiles in US East (N. Virginia), so other regions and existing profiles will need to wait. Grok 4.7 access is limited to Pro, Pro+, Pro Max and Power tier subscribers. More detail on these and other changes is tracked in the Kiro changelog.

Sources

• Enterprise Management preview (Kiro (AWS), November 10, 2026, official)
• Grok 4.7 now available in Kiro (Kiro (AWS), November 10, 2026, official)
• Kiro changelog (Kiro (AWS), November 10, 2026, official)

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.