Cloud Management for Government Agencies: Enabling IT Transformation through Compliant SaaS or Self-Hosted Solutions

P U B L I C S E C T O R
S U M M I T
Washingt on, DC

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Cloud Management for Government Agencies:
Enabling IT Transformation Through Compliant SaaS or Self-Hosted Solutions
Jeff Valentine
Chief Product Officer
CloudCheckr
3 1 9 3 5 2
Toby Zellers
Partner Development Manager
AWS Worldwide Public Sector

S U M M I T
Name That Product

S U M M I T
*Hint*

S U M M I T
… Then This Happened

S U M M I T
… And Then This

S U M M I T
… And Eventually This

S U M M I T
By Then, It Was Too Late!

S U M M I T
Jeff Valentine
Chief Product Officer, CloudCheckr
Jeff.valentine@cloudcheckr.com

S U M M I T

S U M M I T
Digital Transformation Pie
Today
10%
Will Never Move
20%
Still to Come
70%

S U M M I T
That 70% Though …
• Digital = Complex
• Complexity = Lack of Confidence
• Lack of Confidence  Slow Down

S U M M I T
CloudCheckr Cloud Management
MULTI-FUNCTIONAL
LARGEST INDEPENDENT
BUILT FOR SCALE
PRIMARY AND
SECONDARY CLOUDS
HIGHLY CONFIGURED

S U M M I T
CloudCheckr is an
APN Advanced
Technology Partner
Security Competency
Government Competency
Cloud Management Tools Competency
ATO on AWS Launch Partner

S U M M I T
$3B

S U M M I T
CloudCheckr Makes AWS Even Better

S U M M I T
550+ Best
Practice Checks
Based off legal regulations &
compliance frameworks such
as CIS, NIST, HIPAA, FISMA,
AWS Well-Architected
Guidance, and more

S U M M I T
Cost Optimization
1. Idle, unused, mis-provisioned, and previous
generation resource identification
2. Intelligent budget alerts
3. Advanced grouping of cloud costs
4. Pre-built and custom spend analyses
5. Reserved purchase recommendations for
six resource types
6. Tag management, cost mapping tools, and
improperly tagged resource alerts
7. Right sizing within and across instance
families

S U M M I T
Billing Management
1. Simplify EDP forecasting and allocation
2. Fully white-labeled invoices
3. Granular charge descriptions with pre-built
itemization formats or using any custom report
4. Multiple export formats
5. Schedule invoices for automatic generation
6. Audit historical billings and view savings analyses
7. Currency conversion to make invoices EU
compliant
8. 100% Accuracy in Billing data with Tag Mapping

S U M M I T
Utilization & Inventory
1. Interactive Heatmaps Across Resource Types
2. Usage Alerts and Quota Tracking
3. Resource Right Sizing
4. Aggregated, Cross-Account Inventory Details
5. Resource Usage Trending Information
6. Geographic Distribution Overlay
7. Custom Reporting
8. Resource Tag Intelligence

S U M M I T
Security Monitoring
1. 250+ Security Best Practice Checks
2. 35+ pre-built CloudTrail alerts, custom
alert builder for API calls and resource
change information
3. Administrator & Access Management
4. Network & Perimeter Analysis
5. Custom Best Practices via AWS Config
6. Aggregated Change Logs across reporting
streams, including CloudTrail, CloudWatch
Logs, AWS Config, VPC Flow Logs, Azure
Usage Reports
7. Permissions, Security Groups, and VPC
Audit Tools
8. Cross Account Inventory Insight
9. Continuous Resource Utilization Metrics

S U M M I T
Total Compliance
1. Full mappings of Best Practice Checks to
compliance frameworks and international
legal standards like CIS, NIST 800-53, PCI,
HIPAA, FedRAMP, and more than 30 more!
2. Dozens of automated, customizable
remediation options for triggered checks
and alerts
3. Remediation and cleanup tasks for
security groups, volumes, and S3 bucket
permissions.

S U M M I T
Automation
1. Full mappings of Best Practice Checks to
compliance frameworks and international
legal standards like CIS, NIST 800-53, PCI,
HIPAA, FedRAMP, and more than 30 more!
2. Dozens of automated, customizable
remediation options for triggered checks
and alerts
3. Remediation and cleanup tasks for
security groups, volumes, and S3 bucket
permissions.

S U M M I T
S U M M I T
“It’s so easy to get the information I need aggregated
and displayed, so I can quickly make decisions that
save time and money. AWS has so much information
going back and forth, and CloudCheckr helps
immensely.”
Voice of the Customer

S U M M I T
S U M M I T
“[CloudCheckr] is very transparent and easy to
navigate, I used to use [another tool] and the
reports were difficult to find"

S U M M I T
S U M M I T
“We want everyone to benefit from the agility, flexibility and
lower cost of AWS services, but of course some people are
reluctant to leave their familiar on-premises data centers. By
offering total visibility and valuable recommendations,
CloudCheckr helps us feel even more comfortable stepping
into the public cloud.”

S U M M I T
S U M M I T
“We more or less had way better control over all of our four
AWS accounts from day one on using CloudCheckr after the
initial setup. CloudCheckr helps us focus on the right things. The
cool thing is it gives you a checklist, and this is combined with
reporting functionality, and you can prioritize security problems
and say yes, we definitely need to work on this problem first.”

S U M M I T
S U M M I T
“Having [CloudCheckr’s] multi-account views allows us
to see everything across all of our AWS accounts
without having to login to each individual one … We’re
amazed that all of the information in CloudCheckr
comes from AWS, but CloudCheckr makes it so easy to
use that information.”

S U M M I T
S U M M I T
“[CloudCheckr] allows [us] to automate actions across hundreds
of customers, dramatically accelerating our ability to onboard
customers to the AWS platform, while keeping those customers
optimized and secure.”

S U M M I T
S U M M I T
“We’ve seen our margins grow by almost 20% since leveraging
the CloudCheckr platform in our reseller business. Without it,
we were seeing our partner and consolidated billing discounts
slip away to customers, or back to AWS. I honestly have no idea
how we could operate at scale without CloudCheckr.”

S U M M I T
Thank you!
S U M M I T
Jeff Valentine
Jeff.Valentine@CloudCheckr.com
Toby Zellers
zellerst@amazon.com

S U M M I T
Related breakouts
295436 – Authority to Operate on AWS: Compliance as Code
Ted Steffan/AWS, Tim Sandage/AWS
302830 – Beyond Security Automation: How to Move Past
Developing Ad-hoc Tools and Make Tools that Develop Automatically
Brad Dispensa/AWS
302828 – USMC: Cloud Governance at Scale through Automation

S U M M I T
Related breakouts
316557 – Achieve Compliance with Security by Default and by Design
Andrew Plato/Anitian and Ignacio Martinez/Smartsheet
317684 – Hyperscale Security Data for Continuous Risk Monitoring
Telos
302828 – Accelerate ATO & Simplify Compliance Through Automation
Josh Hammer/AWS, and Palo Alto Networks

S U M M I T
S U M M I T

Cloud Management for Government Agencies: Enabling IT Transformation through Compliant SaaS or Self-Hosted Solutions

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Cloud Management for Government Agencies: Enabling IT Transformation through Compliant SaaS or Self-Hosted Solutions

Similar to Cloud Management for Government Agencies: Enabling IT Transformation through Compliant SaaS or Self-Hosted Solutions (20)

More from Amazon Web Services

More from Amazon Web Services (20)

Cloud Management for Government Agencies: Enabling IT Transformation through Compliant SaaS or Self-Hosted Solutions