It improves the organization's overall security posture is correct.

Making security a foundational part of the software development lifecycle means teams identify and remediate vulnerabilities earlier which reduces risk and lowers the cost of fixes over time. This approach promotes practices such as threat modeling, secure coding, automated security testing, and continuous monitoring which together raise the organization's resilience against attacks.

It eliminates the need for external security audits is incorrect. Integrating security reduces issues but it does not remove the value of independent audits for compliance, third party validation, and assurance.

It increases the complexity of application code is incorrect. Secure design may introduce some controls, but the aim is to reduce the attack surface and prevent insecure ad hoc fixes rather than to add unnecessary complexity.

It shortens development timelines by removing security checkpoints is incorrect. Integrating security adds early checkpoints, but it typically shortens overall delivery time by avoiding costly rework and late security remediation.

Full AWS Practitioner Certification Question