"Security is complex; it's not something you learn from a checklist ... management and risk detection. For AWS, the drive to normalize security best practices stemmed from the need to "shift ...