Cloud Management for Government Agencies: Enabling IT Transformation through Compliant SaaS or Self-Hosted Solutions

1. P U B L I C S E C T O R S U M M I T Washingt on, DC

2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Cloud Management for Government Agencies: Enabling IT Transformation Through Compliant SaaS or Self-Hosted Solutions Jeff Valentine Chief Product Officer CloudCheckr 3 1 9 3 5 2 Toby Zellers Partner Development Manager AWS Worldwide Public Sector

12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T That 70% Though … • Digital = Complex • Complexity = Lack of Confidence • Lack of Confidence  Slow Down

13. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T CloudCheckr Cloud Management MULTI-FUNCTIONAL LARGEST INDEPENDENT BUILT FOR SCALE PRIMARY AND SECONDARY CLOUDS HIGHLY CONFIGURED

14. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T CloudCheckr is an APN Advanced Technology Partner Security Competency Government Competency Cloud Management Tools Competency ATO on AWS Launch Partner

18. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T 550+ Best Practice Checks Based off legal regulations & compliance frameworks such as CIS, NIST, HIPAA, FISMA, AWS Well-Architected Guidance, and more

19. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Cost Optimization 1. Idle, unused, mis-provisioned, and previous generation resource identification 2. Intelligent budget alerts 3. Advanced grouping of cloud costs 4. Pre-built and custom spend analyses 5. Reserved purchase recommendations for six resource types 6. Tag management, cost mapping tools, and improperly tagged resource alerts 7. Right sizing within and across instance families

20. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Billing Management 1. Simplify EDP forecasting and allocation 2. Fully white-labeled invoices 3. Granular charge descriptions with pre-built itemization formats or using any custom report 4. Multiple export formats 5. Schedule invoices for automatic generation 6. Audit historical billings and view savings analyses 7. Currency conversion to make invoices EU compliant 8. 100% Accuracy in Billing data with Tag Mapping

21. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Utilization & Inventory 1. Interactive Heatmaps Across Resource Types 2. Usage Alerts and Quota Tracking 3. Resource Right Sizing 4. Aggregated, Cross-Account Inventory Details 5. Resource Usage Trending Information 6. Geographic Distribution Overlay 7. Custom Reporting 8. Resource Tag Intelligence

22. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Security Monitoring 1. 250+ Security Best Practice Checks 2. 35+ pre-built CloudTrail alerts, custom alert builder for API calls and resource change information 3. Administrator & Access Management 4. Network & Perimeter Analysis 5. Custom Best Practices via AWS Config 6. Aggregated Change Logs across reporting streams, including CloudTrail, CloudWatch Logs, AWS Config, VPC Flow Logs, Azure Usage Reports 7. Permissions, Security Groups, and VPC Audit Tools 8. Cross Account Inventory Insight 9. Continuous Resource Utilization Metrics

23. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Total Compliance 1. Full mappings of Best Practice Checks to compliance frameworks and international legal standards like CIS, NIST 800-53, PCI, HIPAA, FedRAMP, and more than 30 more! 2. Dozens of automated, customizable remediation options for triggered checks and alerts 3. Remediation and cleanup tasks for security groups, volumes, and S3 bucket permissions.

24. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Automation 1. Full mappings of Best Practice Checks to compliance frameworks and international legal standards like CIS, NIST 800-53, PCI, HIPAA, FedRAMP, and more than 30 more! 2. Dozens of automated, customizable remediation options for triggered checks and alerts 3. Remediation and cleanup tasks for security groups, volumes, and S3 bucket permissions.

26. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T “It’s so easy to get the information I need aggregated and displayed, so I can quickly make decisions that save time and money. AWS has so much information going back and forth, and CloudCheckr helps immensely.” Voice of the Customer

27. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T “[CloudCheckr] is very transparent and easy to navigate, I used to use [another tool] and the reports were difficult to find" Voice of the Customer

28. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T “We want everyone to benefit from the agility, flexibility and lower cost of AWS services, but of course some people are reluctant to leave their familiar on-premises data centers. By offering total visibility and valuable recommendations, CloudCheckr helps us feel even more comfortable stepping into the public cloud.” Voice of the Customer

29. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T “We more or less had way better control over all of our four AWS accounts from day one on using CloudCheckr after the initial setup. CloudCheckr helps us focus on the right things. The cool thing is it gives you a checklist, and this is combined with reporting functionality, and you can prioritize security problems and say yes, we definitely need to work on this problem first.” Voice of the Customer

30. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T “Having [CloudCheckr’s] multi-account views allows us to see everything across all of our AWS accounts without having to login to each individual one … We’re amazed that all of the information in CloudCheckr comes from AWS, but CloudCheckr makes it so easy to use that information.” Voice of the Customer

31. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T “[CloudCheckr] allows [us] to automate actions across hundreds of customers, dramatically accelerating our ability to onboard customers to the AWS platform, while keeping those customers optimized and secure.” Voice of the Customer

32. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T “We’ve seen our margins grow by almost 20% since leveraging the CloudCheckr platform in our reseller business. Without it, we were seeing our partner and consolidated billing discounts slip away to customers, or back to AWS. I honestly have no idea how we could operate at scale without CloudCheckr.” Voice of the Customer

33. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Thank you! © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Jeff Valentine Jeff.Valentine@CloudCheckr.com Toby Zellers zellerst@amazon.com

34. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Related breakouts 295436 – Authority to Operate on AWS: Compliance as Code Ted Steffan/AWS, Tim Sandage/AWS 302830 – Beyond Security Automation: How to Move Past Developing Ad-hoc Tools and Make Tools that Develop Automatically Brad Dispensa/AWS 302828 – USMC: Cloud Governance at Scale through Automation

35. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T Related breakouts 316557 – Achieve Compliance with Security by Default and by Design Andrew Plato/Anitian and Ignacio Martinez/Smartsheet 317684 – Hyperscale Security Data for Continuous Risk Monitoring Telos 302828 – Accelerate ATO & Simplify Compliance Through Automation Josh Hammer/AWS, and Palo Alto Networks

36. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R S U M M I T