This course was developed by members of AWS Technical Field Communities (TFC), an AWS community of technical experts. The content is intended to complement our standard training curriculum and augment your AWS learning journey. We are aware some courses have accessibility limitations and are working to address. If you require accommodation, please contact AWS Training and Certification Customer Support.
Learners will gain a practical understanding of how to secure AI coding agents -- such as Kiro and Claude Code -- within their development workflows. The course presents an application security control framework organized around two pillars: author-time controls (shaping what agents produce in the IDE) and build-time controls (gating what reaches production). Participants will learn to identify key risks like prompt injection and expanded tool access, and how to layer additional guardrails on top of existing SDLC practices so application security scales with agent-driven development across any toolchain or cloud environment.