Roca-II

Most cloud security teams have solved visibility. You can detect misconfigurations, flag drift, and generate findings all day long. But then what? The real problem was never seeing the issues, it was fixing them at scale. In this talk, We’ll share how we went from drowning in findings to setting up our own auto-remediation.

We’ll cover how to implement remediation workflows using AWS services like Security Hub, EventBridge, Lambda, and Config Rules, review open source alternatives worth considering, and explain why we ultimately chose full customization to handle our specific needs.

Whether you’re just starting to think about auto-remediation or already sitting on a backlog of findings you can’t act on, you’ll walk away with practical insights.

During my time at school, I was amazed by the buildings constructed by different civilizations, their similarities and, at the same time, their uniqueness.

Depending on whether it was a house, a farm, a fortress, etc., the planning varied, as it required not only its own design plans but also varied in location, the materials and machinery needed, the number and type of workers (builders, electricians, plumbers, specialists), among other things, and with all this we could then have an estimate of the time and cost of the work.

Does this sound familiar? In this session, I want to share my experience working with different types of applications. I have been fortunate (and old enough) to work with applications ranging from mainframe systems to new multi-agent use cases. We will see how to leverage services such as EC2, ECS, EKS, Lambda, and Bedrock AgentCore across different architectural types.

Search engines guide users from their initial goals to the information that fulfills those goals. The retrieved items are deemed relevant when they align with the user’s intent. Ensuring relevant results involves having the data in the catalog, analyzing it accurately, representing it through text and vectors, ranking it appropriately, and performing other actions.

In this session, discover how auction houses utilize vector search, powered by Amazon OpenSearch Service, to find similar items within their extensive database, enhancing the customer experience and preventing issues with counterfeit artworks, and see how it assists users in obtaining the most relevant results.

This session also uncovers some peculiarities in getting embeddings with AWS Bedrock and AWS SageMaker serverless inference for the abovementioned goals.

As you move into Senior+, Tech Lead, or Engineering Manager roles, your calendar fills up fast, and your time to actually build steadily shrinks. Yet your responsibility for technical outcomes, architectural decisions, and knowledge sharing doesn’t disappear.

This talk shows how an AI-Native Software Development Lifecycle, powered by Kiro, can become a real leverage for senior engineers and engineering leaders.

Through a hands-on story of vibecoding between meetings, we’ll explore a practical setup designed for the challenges that dominate senior roles: problem framing, architectural reasoning, documentation, and alignment. We’ll build a first MCP server / Kiro power and show how AI can amplify impact - helping us learn faster, reduce cognitive load, and keep architecture and documentation in sync with reality, even when hands-on time is scarce.

While the focus is on Senior+ and Engineering Manager workflows, the tools and patterns shown are just as valuable earlier in a career, offering a powerful boost for learning, exploration, and day-to-day development, and you’ll leave with concrete examples and a repeatable blueprint for applying an AI-native SDLC in your own context.

How do we know that our terraform in Git is in sync with Deployments?
How do we ensure automatic Terraform deployments?

As Infrastructure as Code (IaC) adoption accelerates, maintaining synchronization between version-controlled Terraform configurations and deployed infrastructure has become increasingly critical.

This presentation explores the challenges of ensuring GitOps alignment and examines the most prominent solutions for automating Terraform workflows.

Whether you’re managing a startup’s infrastructure or orchestrating enterprise-scale deployments, this session will equip you with the knowledge to make informed decisions about automating your Terraform workflows while maintaining the critical link between code and deployed resources.