Andre Baumeier 🇩🇪

Security reviews and penetration testing are critical but often create bottlenecks that slow down development teams. AWS Security Agent changes this dynamic by bringing AI-powered, proactive application security directly into the development lifecycle — from design through deployment. In this hands-on workshop, participants will set up and use AWS Security Agent to enforce organizational security requirements across design documents, code reviews, and live applications. You'll define security standards once — approved libraries, logging policies, data access controls — and see how the agent continuously validates your work against those standards, providing actionable guidance when it detects violations. You'll also experience how AWS Security Agent transforms penetration testing from a periodic, resource-intensive exercise into an on-demand capability. By providing target URLs, authentication details, and application context, the agent develops deep understanding of your application and executes sophisticated attack chains to discover real vulnerabilities. What you'll do: Set up an instance of AWS Security Agent Run AI-powered penetration testing against a provided endpoint and validate the results Define custom organizational Security Requirements and apply them to the agent Use the agent to review architectural design documents for security compliance Integrate the agent into a GitHub pull request workflow for automated code security review Who should attend: Software developers, DevSecOps engineers, and security engineers looking to shift security left and reduce friction between development velocity and security rigor. What you'll take away: Practical experience using AWS Security Agent to automate security enforcement across your SDLC — enabling your teams to ship faster without compromising security posture.