Setting secure defaults on AWS and avoiding misconfigurations

Wiz's Scott Piper explains enforcing secure AWS defaults with SCPs—blocking public S3 buckets, disabling risky features and protecting the guardrails themselves—with rollout checks.