Roca-II

During my time at school, I was amazed by the buildings constructed by different civilizations, their similarities and, at the same time, their uniqueness.

Depending on whether it was a house, a farm, a fortress, etc., the planning varied, as it required not only its own design plans but also varied in location, the materials and machinery needed, the number and type of workers (builders, electricians, plumbers, specialists), among other things, and with all this we could then have an estimate of the time and cost of the work.

Does this sound familiar? In this session, I want to share my experience working with different types of applications. I have been fortunate (and old enough) to work with applications ranging from mainframe systems to new multi-agent use cases. We will see how to leverage services such as EC2, ECS, EKS, Lambda, and Bedrock AgentCore across different architectural types.

Most cloud security teams have solved visibility. You can detect misconfigurations, flag drift, and generate findings all day long. But then what? The real problem was never seeing the issues, it was fixing them at scale. In this talk, We’ll share how we went from drowning in findings to setting up our own auto-remediation.

We’ll cover how to implement remediation workflows using AWS services like Security Hub, EventBridge, Lambda, and Config Rules, review open source alternatives worth considering, and explain why we ultimately chose full customization to handle our specific needs.

Whether you’re just starting to think about auto-remediation or already sitting on a backlog of findings you can’t act on, you’ll walk away with practical insights.

Search engines guide users from their initial goals to the information that fulfills those goals. The retrieved items are deemed relevant when they align with the user’s intent. Ensuring relevant results involves having the data in the catalog, analyzing it accurately, representing it through text and vectors, ranking it appropriately, and performing other actions.

In this session, discover how auction houses utilize vector search, powered by Amazon OpenSearch Service, to find similar items within their extensive database, enhancing the customer experience and preventing issues with counterfeit artworks, and see how it assists users in obtaining the most relevant results.

This session also uncovers some peculiarities in getting embeddings with AWS Bedrock and AWS SageMaker serverless inference for the abovementioned goals.

OpenPrime is a platform that allows non-experts to design and deploy production-ready AWS infrastructure using Infrastructure as Code.

Through a guided ClickOps experience and an AI assistant, users define what they need, while OpenPrime automatically generates best-practice, auditable IaC that follows proven architectural, security, and operational standards. The result is consistent, maintainable AWS infrastructure without requiring deep AWS or Terraform knowledge.

Securing and managing network traffic efficiently is crucial for modern cloud architectures. AWS Cloud WAN, combined with Network Firewall and Route 53 DNS Firewall, provides a robust framework for protecting both egress and east-west traffic.

This presentation explores how these security services enhance resilience, prevent threats, and enforce compliance across distributed environments. By integrating firewall policies and DNS security, organizations can strengthen their cloud infrastructure against cyber threats while maintaining optimal performance.

Learn how to build a secure, scalable, and resilient network with AWS’s advanced security solutions.