Danny Cortegaca

In this hands-on session, learn to implement comprehensive container pipeline security from code to production. Configure pre-commit hooks and IDE scanning, establish automated CI/CD security checks, and ensure artifact integrity using AWS Signer for container images.

In this workshop you will dive deep into using Kiro to develop more secure code directly in your IDE through a specification-driven approach as part of an AI-enhanced development lifecycle (AI-DLC).

Many DevSecOps initiatives create bottlenecks despite promising faster, more secure delivery. In this interactive chalk talk, we'll collaboratively design a scalable DevSecOps blueprint that moves beyond checkbox compliance to enhance both security and velocity.

Threat modeling adoption is growing, but teams hit a wall converting 'what can go wrong' into realistic threats with actionable defense strategies. The challenge?

As the capabilities and possibilities of machine learning continue to expand with the advances in generative AI, understanding the security risks introduced by these advances is essential for protecting your valuable AWS workloads.