How AWS and MongoDB raise the security bar with distributed ownership
summary
AWS and MongoDB describe concrete programs that embed trained builders into teams to scale security: over 2,000 Guardians volunteer, attend cohort threat‑modeling training, and share a common Slack channel; automation like Code Whisperer and Inspector for Lambda and targeted guidance reduces manual handoffs. Measured outcomes include 22.5% fewer mid/high findings found only at review, 25% faster security reviews and a claimed saving of over 200,000 human days per year, with ongoing metrics driving what to automate next.
AI-written summary · about
chapters (13)
- 0:00Start
- 1:20What do we see from the modern security leader?
- 3:54What problem are we trying to solve?
- 4:48Distributed security ownership
- 6:07Addressing the human scaling challenge
- 7:16Embedding security into builder teams
- 10:29How do we find these folks and ramp them up?
- 12:29Where do AWS Guardians fit in?
- 14:16There is iteration within this flow
- 17:04Metrics-AWS Guardian feedback
- 18:24Metrics-Team comparisons
- 19:11Metrics - Helping identify common issues
- 38:59Continuous improvement
related talks
20mSecurity Culture & Scaling Your Security Humans
27mBuilding a culture of security with AWS and CBA
38mBuilding Security at Speed
34mWhat “Security Needs to Be Our Top Priority” Means for Aws Builders/Customers
27mIntroduction to AWS Security
15mSecure and scale your cloud foundations using AWS Built-in
44mGuardrails in the Cloud
35mThe Good, the Bad and the Ugly — one year of integrating AWS security services