Threat-Modeling-As-Code - Transforming Your Threat Statements into Attack Trees

Learn how to transform threat modeling from a manual, time-consuming process into an automated, code-driven workflow in this 54-minute conference talk from AWS re:Invent 2025. Discover how ThreatForest, a Threat-Model-as-Code solution, addresses the common challenge teams face when converting theoretical threat statements into realistic, actionable defense strategies. Explore the step-by-step process of setting up automated workflows that take application context, architecture diagrams, and threat statements as inputs and convert them into detailed attack trees and attack steps with associated mitigation controls using the AWS Threat Technique Catalog and other threat intelligence data. Gain practical knowledge about implementing automated threat modeling workflows that seamlessly integrate into your development process, complete with automation templates and a comprehensive framework for making threat modeling more efficient and effective.