The Security team partners with AWS , Governance, and Infrastructure as Code services to reduce risk in our services as they’re built and throughout their lifecycle. The team of security engineers collaborates directly with software engineers to prevent security issues from being introduced at the time of design and development.
We proactively look for unknown threats in our services to identify and fix them before they can impact customers. When security issues are detected, we support teams with their response to minimize the impact to customers, while determining what can be done to prevent the issue from happening again. In addition to diving deep with individual services, we also own security efforts that raise the security bar across a broad range of services, such as contingent authorization, auth correctness, and service credential management. We instill a high security bar in our services, working alongside service teams to foster a culture of security and continuous learning.