Building Security at Speed
summary
Shows how AWS moves security from gatekeeping to embedded practice with concrete systems and counts: thousands of security guardians embedded in service teams using the same dashboards and ticketing as central ops; a claim that spec‑driven development via Kira (agentic IDE) turns weeks of threat modeling into minutes and produces executable specs and mermaid diagrams; proofs using automated reasoning (S3 Block Public Access, IAM controls) to verify correctness; COE blame‑free postmortems and Quick agents that build closed‑loop mechanisms. Watch if actionable tools, numbers, and workflow examples decide your evening.
AI-written summary · about
chapters (13)
- 0:00Introduction and opening
- 1:11Fashion-forward security culture
- 2:57Security versus security culture
- 4:20Security guardians program
- 8:54Blame-free culture and COE
- 9:15Practical incentives for guardians
- 13:31Guardians and central security team
- 16:39AI tools Kira and Quick
- 19:52Threat modeling with AI
- 22:40AI-powered security tooling
- 25:08Adversarial AI and defender advantage
- 32:38Staying sharp in rapid change
- 36:07One piece of advice
related talks
20mSecurity Culture & Scaling Your Security Humans
53mAchieving End-to-end Security on AWS
29mPragmatic Security Automation and DevSecOps in the Cloud
33mAutomating Cloud Security and Incident Response (DevSecOps)
20mBuilding security culture on infrastructure teams
27mBuilding a culture of security with AWS and CBA
23mSecurity Best Practices: The Well-Architected Framework
28mSecurity as a Service: Work where You Engineers Live