(light airy music) >> Hello, everyone, welcome to theCUBE's presentation of the AWS Startup Showcase, AI and machine learning. "Top Startups Building Generative AI on AWS." This is season three, episode one of the ongoing series covering the exciting startups from the AWS ecosystem, talking about AI machine learning. We have three great guests Bratin Saha, VP, Vice President of Machine Learning and AI Services at Amazon Web Services. Tom Mason, the CTO of Stability AI, and Aidan Gomez, CEO and co-founder of Cohere. Two practitioners doing startups and AWS. Gentlemen, thank you for opening up this session, this episode. Thanks for coming on. >> Thank you. >> Thank you. >> Thank you. >> So the topic is hype versus reality. So I think we're all on the reality is great, hype is great, but the reality's here. I want to get into it. Generative AI's got all the momentum, it's going mainstream, it's kind of come out of the behind the ropes, it's now mainstream. We saw the success of ChatGPT, opens up everyone's eyes, but there's so much more going on. Let's jump in and get your early perspectives on what should people be talking about right now? What are you guys working on? We'll start with AWS. What's the big focus right now for you guys as you come into this market that's highly active, highly hyped up, but people see value right out of the gate? >> You know, we have been working on generative AI for some time. In fact, last year we released Code Whisperer, which is about using generative AI for software development and a number of customers are using it and getting real value out of it. So generative AI is now something that's mainstream that can be used by enterprise users. And we have also been partnering with a number of other companies. So, you know, stability.ai, we've been partnering with them a lot. We want to be partnering with other companies as well. In seeing how we do three things, you know, first is providing the most efficient infrastructure for generative AI. And that is where, you know, things like Trainium, things like Inferentia, things like SageMaker come in. And then next is the set of models and then the third is the kind of applications like Code Whisperer and so on. So, you know, it's early days yet, but clearly there's a lot of amazing capabilities that will come out and something that, you know, our customers are starting to pay a lot of attention to. >> Tom, talk about your company and what your focus is and why the Amazon Web Services relationship's important for you? >> So yeah, we're primarily committed to making incredible open source foundation models and obviously stable effusions been our kind of first big model there, which we trained all on AWS. We've been working with them over the last year and a half to develop, obviously a big cluster, and bring all that compute to training these models at scale, which has been a really successful partnership. And we're excited to take it further this year as we develop commercial strategy of the business and build out, you know, the ability for enterprise customers to come and get all the value from these models that we think they can get. So we're really excited about the future. We got hugely exciting pipeline for this year with new modalities and video models and wonderful things and trying to solve images for once and for all and get the kind of general value and value proposition correct for customers. So it's a really exciting time and very honored to be part of it. >> It's great to see some of your customers doing so well out there. Congratulations to your team. Appreciate that. Aidan, let's get into what you guys do. What does Cohere do? What are you excited about right now? >> Yeah, so Cohere builds large language models, which are the backbone of applications like ChatGPT and GPT-3. We're extremely focused on solving the issues with adoption for enterprise. So it's great that you can make a super flashy demo for consumers, but it takes a lot to actually get it into billion user products and large global enterprises. So about six months ago, we released our command models, which are some of the best that exist for large language models. And in December, we released our multilingual text understanding models and that's on over a hundred different languages and it's trained on, you know, authentic data directly from native speakers. And so we're super excited to continue pushing this into enterprise and solving those barriers for adoption, making this transformation a reality. >> Just real quick, while I got you there on the new products coming out. Where are we in the progress? People see some of the new stuff out there right now. There's so much more headroom. Can you just scope out in your mind what that looks like? Like from a headroom standpoint? Okay, we see ChatGPT. "Oh yeah, it writes my papers for me, does some homework for me." I mean okay, yawn, maybe people say that, (Aidan chuckles) people excited or people are blown away. I mean, it's helped theCUBE out, it helps me, you know, feed up a little bit from my write-ups but it's not always perfect. >> Yeah, at the moment it's like a writing assistant, right? And it's still super early in the technologies trajectory. I think it's fascinating and it's interesting but its impact is still really limited. I think in the next year, like within the next eight months, we're going to see some major changes. You've already seen the very first hints of that with stuff like Bing Chat, where you augment these dialogue models with an external knowledge base. So now the models can be kept up to date to the millisecond, right? Because they can search the web and they can see events that happened a millisecond ago. But that's still limited in the sense that when you ask the question, what can these models actually do? Well they can just write text back at you. That's the extent of what they can do. And so the real project, the real effort, that I think we're all working towards is actually taking action. So what happens when you give these models the ability to use tools, to use APIs? What can they do when they can actually affect change out in the real world, beyond just streaming text back at the user? I think that's the really exciting piece. >> Okay, so I wanted to tee that up early in the segment 'cause I want to get into the customer applications. We're seeing early adopters come in, using the technology because they have a lot of data, they have a lot of large language model opportunities and then there's a big fast follower wave coming behind it. I call that the people who are going to jump in the pool early and get into it. They might not be advanced. Can you guys share what customer applications are being used with large language and vision models today and how they're using it to transform on the early adopter side, and how is that a tell sign of what's to come? >> You know, one of the things we have been seeing both with the text models that Aidan talked about as well as the vision models that stability.ai does, Tom, is customers are really using it to change the way you interact with information. You know, one example of a customer that we have, is someone who's kind of using that to query customer conversations and ask questions like, you know, "What was the customer issue? How did we solve it?" And trying to get those kinds of insights that was previously much harder to do. And then of course software is a big area. You know, generating software, making that, you know, just deploying it in production. Those have been really big areas that we have seen customers start to do. You know, looking at documentation, like instead of you know, searching for stuff and so on, you know, you just have an interactive way, in which you can just look at the documentation for a product. You know, all of this goes to where we need to take the technology. One of which is, you know, the models have to be there but they have to work reliably in a production setting at scale, with privacy, with security, and you know, making sure all of this is happening, is going to be really key. That is what, you know, we at AWS are looking to do, which is work with partners like stability and others and in the open source and really take all of these and make them available at scale to customers, where they work reliably. >> Tom, Aidan, what's your thoughts on this? Where are customers landing on this first use cases or set of low-hanging fruit use cases or applications? >> Yeah, so I think like the first group of adopters that really found product market fit were the copywriting companies. So one great example of that is HyperWrite. Another one is Jasper. And so for Cohere, that's the tip of the iceberg, like there's a very long tail of usage from a bunch of different applications. HyperWrite is one of our customers, they help beat writer's block by drafting blog posts, emails, and marketing copy. We also have a global audio streaming platform, which is using us the power of search engine that can comb through podcast transcripts, in a bunch of different languages. Then a global apparel brand, which is using us to transform how they interact with their customers through a virtual assistant, two dozen global news outlets who are using us for news summarization. So really like, these large language models, they can be deployed all over the place into every single industry sector, language is everywhere. It's hard to think of any company on Earth that doesn't use language. So it's, very, very- >> We're doing it right now. We got the language coming in. >> Exactly. >> We'll transcribe this puppy. All right. Tom, on your side, what do you see the- >> Yeah, we're seeing some amazing applications of it and you know, I guess that's partly been, because of the growth in the open source community and some of these applications have come from there that are then triggering this secondary wave of innovation, which is coming a lot from, you know, controllability and explainability of the model. But we've got companies like, you know, Jasper, which Aidan mentioned, who are using stable diffusion for image generation in block creation, content creation. We've got Lensa, you know, which exploded, and is built on top of stable diffusion for fine tuning so people can bring themselves and their pets and you know, everything into the models. So we've now got fine tuned stable diffusion at scale, which is democratized, you know, that process, which is really fun to see your Lensa, you know, exploded. You know, I think it was the largest growing app in the App Store at one point. And lots of other examples like NightCafe and Lexica and Playground. So seeing lots of cool applications. >> So much applications, we'll probably be a customer for all you guys. We'll definitely talk after. But the challenges are there for people adopting, they want to get into what you guys see as the challenges that turn into opportunities. How do you see the customers adopting generative AI applications? For example, we have massive amounts of transcripts, timed up to all the videos. I don't even know what to do. Do I just, do I code my API there. So, everyone has this problem, every vertical has these use cases. What are the challenges for people getting into this and adopting these applications? Is it figuring out what to do first? Or is it a technical setup? Do they stand up stuff, they just go to Amazon? What do you guys see as the challenges? >> I think, you know, the first thing is coming up with where you think you're going to reimagine your customer experience by using generative AI. You know, we talked about Ada, and Tom talked about a number of these ones and you know, you pick up one or two of these, to get that robust. And then once you have them, you know, we have models and we'll have more models on AWS, these large language models that Aidan was talking about. Then you go in and start using these models and testing them out and seeing whether they fit in use case or not. In many situations, like you said, John, our customers want to say, "You know, I know you've trained these models on a lot of publicly available data, but I want to be able to customize it for my use cases. Because, you know, there's some knowledge that I have created and I want to be able to use that." And then in many cases, and I think Aidan mentioned this. You know, you need these models to be up to date. Like you can't have it staying. And in those cases, you augmented with a knowledge base, you know you have to make sure that these models are not hallucinating. And so you need to be able to do the right kind of responsible AI checks. So, you know, you start with a particular use case, and there are a lot of them. Then, you know, you can come to AWS, and then look at one of the many models we have and you know, we are going to have more models for other modalities as well. And then, you know, play around with the models. We have a playground kind of thing where you can test these models on some data and then you can probably, you will probably want to bring your own data, customize it to your own needs, do some of the testing to make sure that the model is giving the right output and then just deploy it. And you know, we have a lot of tools. >> Yeah. >> To make this easy for our customers. >> How should people think about large language models? Because do they think about it as something that they tap into with their IP or their data? Or is it a large language model that they apply into their system? Is the interface that way? What's the interaction look like? >> In many situations, you can use these models out of the box. But in typical, in most of the other situations, you will want to customize it with your own data or with your own expectations. So the typical use case would be, you know, these are models are exposed through APIs. So the typical use case would be, you know you're using these APIs a little bit for testing and getting familiar and then there will be an API that will allow you to train this model further on your data. So you use that AI, you know, make sure you augmented the knowledge base. So then you use those APIs to customize the model and then just deploy it in an application. You know, like Tom was mentioning, a number of companies that are using these models. So once you have it, then you know, you again, use an endpoint API and use it in an application. >> All right, I love the example. I want to ask Tom and Aidan, because like most my experience with Amazon Web Service in 2007, I would stand up in EC2, put my code on there, play around, if it didn't work out, I'd shut it down. Is that a similar dynamic we're going to see with the machine learning where developers just kind of log in and stand up infrastructure and play around and then have a cloud-like experience? >> So I can go first. So I mean, we obviously, with AWS working really closely with the SageMaker team, do fantastic platform there for ML training and inference. And you know, going back to your point earlier, you know, where the data is, is hugely important for companies. Many companies bringing their models to their data in AWS on-premise for them is hugely important. Having the models to be, you know, open sources, makes them explainable and transparent to the adopters of those models. So, you know, we are really excited to work with the SageMaker team over the coming year to bring companies to that platform and make the most of our models. >> Aidan, what's your take on developers? Do they just need to have a team in place, if we want to interface with you guys? Let's say, can they start learning? What do they got to do to set up? >> Yeah, so I think for Cohere, our product makes it much, much easier to people, for people to get started and start building, it solves a lot of the productionization problems. But of course with SageMaker, like Tom was saying, I think that lowers a barrier even further because it solves problems like data privacy. So I want to underline what Bratin was saying earlier around when you're fine tuning or when you're using these models, you don't want your data being incorporated into someone else's model. You don't want it being used for training elsewhere. And so the ability to solve for enterprises, that data privacy and that security guarantee has been hugely important for Cohere, and that's very easy to do through SageMaker. >> Yeah. >> But the barriers for using this technology are coming down super quickly. And so for developers, it's just becoming completely intuitive. I love this, there's this quote from Andrej Karpathy. He was saying like, "It really wasn't on my 2022 list of things to happen that English would become, you know, the most popular programming language." And so the barrier is coming down- >> Yeah. >> Super quickly and it's exciting to see. >> It's going to be awesome for all the companies here, and then we'll do more, we're probably going to see explosion of startups, already seeing that, the maps, ecosystem maps, the landscape maps are happening. So this is happening and I'm convinced it's not yesterday's chat bot, it's not yesterday's AI Ops. It's a whole another ballgame. So I have to ask you guys for the final question before we kick off the company's showcasing here. How do you guys gauge success of generative AI applications? Is there a lens to look through and say, okay, how do I see success? It could be just getting a win or is it a bigger picture? Bratin we'll start with you. How do you gauge success for generative AI? >> You know, ultimately it's about bringing business value to our customers. And making sure that those customers are able to reimagine their experiences by using generative AI. Now the way to get their ease, of course to deploy those models in a safe, effective manner, and ensuring that all of the robustness and the security guarantees and the privacy guarantees are all there. And we want to make sure that this transitions from something that's great demos to actual at scale products, which means making them work reliably all of the time not just some of the time. >> Tom, what's your gauge for success? >> Look, I think this, we're seeing a completely new form of ways to interact with data, to make data intelligent, and directly to bring in new revenue streams into business. So if businesses can use our models to leverage that and generate completely new revenue streams and ultimately bring incredible new value to their customers, then that's fantastic. And we hope we can power that revolution. >> Aidan, what's your take? >> Yeah, reiterating Bratin and Tom's point, I think that value in the enterprise and value in market is like a huge, you know, it's the goal that we're striving towards. I also think that, you know, the value to consumers and actual users and the transformation of the surface area of technology to create experiences like ChatGPT that are magical and it's the first time in human history we've been able to talk to something compelling that's not a human. I think that in itself is just extraordinary and so exciting to see. >> It really brings up a whole another category of markets. B2B, B2C, it's B2D, business to developer. Because I think this is kind of the big trend the consumers have to win. The developers coding the apps, it's a whole another sea change. Reminds me everyone use the "Moneyball" movie as example during the big data wave. Then you know, the value of data. There's a scene in "Moneyball" at the end, where Billy Beane's getting the offer from the Red Sox, then the owner says to the Red Sox, "If every team's not rebuilding their teams based upon your model, there'll be dinosaurs." I think that's the same with AI here. Every company will have to need to think about their business model and how they operate with AI. So it'll be a great run. >> Completely Agree >> It'll be a great run. >> Yeah. >> Aidan, Tom, thank you so much for sharing about your experiences at your companies and congratulations on your success and it's just the beginning. And Bratin, thanks for coming on representing AWS. And thank you, appreciate for what you do. Thank you. >> Thank you, John. Thank you, Aidan. >> Thank you John. >> Thanks so much. >> Okay, let's kick off season three, episode one. I'm John Furrier, your host. Thanks for watching. (light airy music)

(electronic music) (background party chatter) >> All right. Hello, everyone. Welcome to The Cube. Coming up, Bryan Talebi will be here with Ahura A.I? >> Ahura A.I. >> Ahura A.I. Bryan Talebi here with Ahura A.I. We are at The Cube post party networking event, special on the ground, extended coverage. Bryan, we were at The Futurist, not The Futurist Conference, The Future of Blockchain which was the Monaco Crypto Summit over at the Grimaldi Center. Now we're at the VIP gala, the prince is here, a lot of action's happening. You had a chance to look all the presentations we have all the heavy hitters here, kind of a movement going on, right? >> Absolutely. Well, first of all, I think it's absolutely amazing that Prince Albert II put this all together. He obviously understands the future and understands technology. It's absolutely brilliance. And Julio as well, I mean is incredible. So I take off my hat to all the people that put this event together and the speakers were brilliant. I mean, did you see all the speakers the technologies that they've built have the potential to radically transform billions of people's lives. >> It's interesting, you know, I've been covering crypto for a very long time and watched it emerge and then start exploding. And there's always been, and I saw this with the web too early on, legit versus not legit. And all early markets have the hype cycles go down and up, and you always kind of have that but now you're starting to see legitimate tie-in between physical digital assets where, and the confluence of the business value, societal value, government value, all across the spectrum. Every vertical, every use case is got a decentralized vibe going on right now because it's a forcing function. And, and here in Monaco, the price and the king they're leaning into it cause I think they see the future because they could answer their legacy. >> Yeah. Absolutely. And look, you're absolutely right about this because this downturn that we're facing, especially this new crypto winter, I think is the best thing that could possibly have happened to the crypto space because what it's doing is pushing out the let's call them the less than honest brokers within the crypto community, the people that were just in it for a buck, the pump and dumpers and so forth it's really pushing those folks out. And the companies that remain are the true technologists that aren't looking at crypto as just a speculative asset, but rather an underlying technology that can transform the way that we engage with the world in a decentralized way. >> Bryan, you know, we didn't mention in the intro but you also do investment. >> I do. >> You also have a lot of things going on. You got a great history, great pedigree of seeing the waves of innovation the best. That's something, an investment question, like are you in it for the money or are you in it for the make it happen mission? That becomes kind of like the probing question. Someone comes to the table, "Hey, I need some cash. We do funding." What's your exit strategy? "I want to make an exit in two years." Okay. You're out. (Bryan laughs) (John) But it's almost that easy now, right? >> Sure. >> (John) To figure out who's in it for the money. >> Sure. >> (John) Who's in it for the mission. Yeah, the mission's successful. You make a lot of money. >> That's exactly right. Look, one of my mentors once taught me is, money like power is only amassed in great amount if indirectly sought because money by itself is not intrinsically a motivator. And so, what we do at our AB+ Ventures, my venture capital fund, is we only invest, not only in companies that are impact driven and have the capacity to impact a billion people, but we invest in founders that are climbing their third or fourth mountain. So these are people who've already made their money. They either had a couple big exits at over a hundred million dollars or they became rock stars or they became astronauts. They did things where they achieved the highest levels of achievement. And now are building technologies because they believe that they're going to impact the world in a meaningful way. >> They kind of know it's important, right? They made some money, they've been successful. They have scar tissue and experience to apply almost I want to say for the legacy of it, but more for value. >> Yeah. >> For everybody. >> Absolutely. >> All right. So I got to ask about what your current venture, I know you got some good action going on. It's growing pretty good. As they say in golf, it's middle of the fairway. It's growing, got momentum. It's a turbine market. You probably has some offers on the table. I mean, I could imagine all the AI you got going on. Blockchain, very attracted. It's a hard problem, but it's the first inning. Not even. >> Yeah. >> What going on with the company? >> We're very early. Look, we've been building our technologies, the deep tech platform we've been building for four and a half years. There's a whole bunch of offers on the table to buy us. But look, the reality is right now is a fantastic hiring opportunity. There's a lot of amazing talent out there that now wants to come to us, which is great. Number one, number two, if you look back to the 2000 Dot-com bubble, what you saw is all of the companies that didn't really solve real problems went away and it left a more oxygen in the room for the companies that were really solving problems that needed to be solved. And those are now all trillion dollar companies. So, >> Well, Brian, you and I both got a little gray hair. So let's talk about the Dot-com bubble. The other thing, I'll add to that, by the way great commentary, is that everything that was like bullshit actually happened. People bought pet food online, >> Right. >> Groceries delivered to their house. So to your point, the things actually happen. See the visions and the aspirations were correct, timing and capital markets spree. >> Sure. >> Is there similarities going on in crypto? Is it the crypto winter, weeding out those pretenders? Is that what you're saying? >> Well, there's definitely a lot of similarities there but if you look at the example that you use, right, pets.com versus Amazon, people are still buying pet food online. I buy all my pet supplies for my two puppies online. However, if you look at the reason that Amazon works is because of their supply chain and the innovations that they created on being able to deliver anything to you within a day or two days in an extremely cost effective manner. It wasn't just because they had a website and they did some hand wavy stuff to say isn't this a good idea. You actually have to have the underlying operational capability and innovation from a technology standpoint to make it happen. And so, when we talk about crypto over the past number of years, and I've been in the crypto space for a long time, as you have there's been a lot of hand wavy stuff. There's been a lot of people like, "wouldn't this be a good idea?" but then you have the true operators that are able to find the underlying competitive advantages that actually make it work. And that's what I'm interested in. >> I'd love to get your thoughts on that. First of all, great point if you look at like, I was just commentating earlier I was asked the question what I think, and I said, well, I do a lot of lot of reporting and analysis on cloud computing. I watch what Amazon Web Service has done from many, many years ago. And all the followers now. Scale data, higher level services, they're all happening and it's creating a lot of value. Okay? That's going to come to crypto. And so, okay, the dots aren't connected there yet, but you've got this, but one of the things that has proven to be a success criteria, ecosystems. When you have enabling technology like DigitalBits, for instance, is kind the main powering of this ecosystem here, the value that's being created on top of it has to be a step function or multiple of the cost or operational cost to deploy the platform. Okay, so that's kind of in concert with everyone else. You product decentralized, what's your thoughts on that? Because now you have a lot of potential ecosystems that could connect together cause there's no one centralized ecosystem. >> (Bryan) Absolutely. >> But what is, what, how do you get that? How do you square that circle? So to speak. What's your take on that? How does ecosystems play into defi, decentralization, de-apps blockchain? >> So what you really talking about is interoperable, right? So again, if we use an analogy, if we look back to the late nineties, when Web 1.0 was really flourishing and then in the 2000s where everybody created their own websites, people went to the world wide web, but every company had their own website. They had their own social media platform. They had their entire Salesforce platform or what have you. So everyone had their entire separate organization. And so, I suspect that the future of crypto is going to be very similar, where there's going to be a bunch of different metaverses, a bunch of different ecosystems, but someone's going to come along, and I think there's a number of people on the back end that are actually working on this, Some of them are really brilliant, that are going to create an interoperable mechanism for people that jump from metaverse to metaverse from chain to chain in a completely easy experience from a user experience standpoint where you don't have to have a PhD in crypto, so to speak, that doesn't exist, but you don't have to have that level. >> Well, if you're working on crypto for the past five years you've got a PhD. >> Basically. >> The thesis is, you're still alive producing. (Brian laughs) Well, that's a good point. So I'm looking for like, this defacto enabler, right? Because TCP/IP was an example in the old days, you know, the levels of the stack that never, TCP/IP is part of the OSI model. It's just interconnect. That layer, nothing got above it, was open. It was just hard and top that TCP/IP the rest was all standard. Ethernet, token ring add that data layer and then cards. That worked, the industry could galvanize around that. I'm waiting for the crypto moment now, where, what is going to be that cloud (indistinct), Kubernetes and service matches and whatnot. What, is there anything on the horizon that you see that has that kind of coalescent ecosystem, let's get, if we all get behind this, we all win. Rather than chasing crumbs. >> Sure. >> You know, the bigger pie, rising tide, all that stuff. >> Well, so I think there's a really interesting analogy from a couple of hundred years ago on this. So most people don't realize that when the United States first had their railroad system which was the innovative infrastructure play at the time each state or each region had their own systems they had different size railroad. So what would happen if you were trying to ship a bunch of grain from one part of the country to the other you would take it by a train. You get to a train station, you'd have to take everything off, put it on a different train, on a different set of train tracks. You would go a couple states over. You'd have to do that again, go a couple states over. You have to do that again. Eventually what happened is the federal government came in and said, hey, we need to create a system of policies around one set of rules for all trains and all logistics across the country. And so, I do think there's a role for governments to come together, along with the operators and the companies to work collaboratively together to say, hey, what are the regulations? What are the rules of the road? How do we make sure we get all the scam artists out of the system? How do we create a system that actually works for everybody? Now, there's always dangers there, right? You have regulatory capture. Sometimes the government, oftentimes they're slow, they don't understand the technology. So they come down with a heavy hand. And so if it's done properly, and it's not just the United States alone, by the way, it's all the countries in the world. Now at this point, it's a global effort. >> There's money involved, too. >> Exactly. But if we are able to bring together people that are much smarter than me from the public and private sectors as well as the nonprofit sectors, together to come up with one set of rules I think that will enable crypto to massively expand across the entire globe. >> What are you passionate about right now? I know you got the investment fund for, you know, helping society and the planet, you get your project with your startup company, AI is in a hot area. What's going on? What's your top goals for the year? >> So there's two things. Number one, my company, Ahura A.I. is my baby. It's where I spend 70, 80 hours a week. We invent a technology that enables people to learn three to five times faster than traditional education. >> (John) Is that so? >> Because I believe that education is the first step. It's the first variable, that impacts all of the sustainable development goals, impacts the world in a very real way. >> And you're not wearing your UA pin. >> I'm not wearing my pin, I always point to it. >> I wanted to grab it, I saw it earlier. >> But then the second thing I'm super focused on is existential risk. Look, so I throw a lot of events where I bring together four categories of people, CEOs of impact driven companies, investors, whether they're VCs or billionaires or family offices, global experts, and celebrities that want to use their influence for good in the world. And one of the speakers that I had at one of my events is a guy at Stanford who runs their lab on existential risk and what he told the group, and what he told me, is according to Stanford and all the researchers, there's a one in six chance that we're all going to go extinct by 2050. One in six, that's a dice roll. And so to me, the most important thing I can do is bring people together that have capacity, have resources, have capabilities, to address these drivers of existential risk because selfishly, I don't want to live in a dystopian Hellscape. >> Exactly, yeah. Bryan, thanks for coming on. We're going to get back into dinner. Great to see you. >> Thank you very much. >> The Cube after dark, extended hours. Look at us, we're going the whole day. VIP gala, Prince Albert, the team, DigitalBits, The Cube, all here at the Yacht Club in Monaco. I'm John Furrier. Thanks for watching.

>>Mhm. >>Hello, Welcome to the Cubes presentation of women in Tech Global events Celebrating International Women's Day. I'm John for a host of the Cube. Got a great guest here. Isabella, who is the vice president of worldwide Public Sector EMEA Sales for AWS Amazon Web service Europe, Middle East and Africa Isabella Thanks for spending the time and coming on this, uh, this programme for International Women's Day. Appreciate it. >>Thank you very much for having me on that one. It's an exciting topic, John. >>A lot of things going on. A lot of themes. Um, we'll get into that. But first tell us about your career and how you got to be working at a W s. >>Yeah, that that's that's really interesting. Storey, I would say I give you first of all the headline. I am a dental technician by training. I am business administration economics by study, and I spent my really whole life intact. So my first message here is that you can have a great career press intact, having a diverse background. Um, what you need really is to be curious and to be eager to learn. And you see that I've slightly tweaked our leadership principles saying learn and be curious on that one. But when you agree on that one saying, I am curious, I want to learn this is really a great place in technology and in a W s to be in and to progress a career. It's really, really cool. And when I look ahead, I see that because the industry lines are blurring more and more, they are more and more diverse skill sets that were reverse roles coming in, and that is really opening an exciting opportunity also for women, but also in a broader sense of diversity to go and and have a career in technology. It is quite exciting. Back to my career. I started in a in a company. I think when I look back at that and reflect, it was a startup these days very, very early in parallel computing moved on than into management consulting into into international consulting project and managing those ones. And when I look at that piece, I have built out at that point exactly my industry skills and that was beginning in the oil and gas industry when I then transitioned in a bigger cooperation into the e R P space that also continues on a global scale. And then eventually I switched over and, um, and started to go deeper into another industry segment, which was the public sector. And when you come from oil and gas, that is a transition that comes to national oil companies. So that just a sort of naturally came but gave me absolutely different scope. So 16 years in oil and gas and then processed into public sector. Now, in my last global role, I really get across the whole discussion about Cloud. And this is why I got also in touch with aws, um, talking about Wow, this is the future. This is really the way of how computing is gonna be consumed in future and how agile those types of a of a model is. And that was really super intrigued, also having a sort of a really startup mentality. And this is and here I am, as this is responsible for for a mayor in public sector. >>But I love the throwback to parallel computing. I remember those days exciting Storey and I love the point about a lot of opportunities with tech. There's so the aperture of technology has really widened the surface area for things you can do and bring a diverse background to is really amazing. Great point. Great insight. I have to ask you, um what first Got you interested in working in the tech sector? How did you get attracted to the parallel computing? Um, what was the gravitational pole? Was there a moment of of luck? Serendipity. What happened? Tell us, uh, how you got interested in the tech sector, >>John, I wish I would tell you now, a storey that this was the wow moment, right where I came across something and that sparked the idea. Can I tell you a secret? So when I started my study, the the thing that I said or the statement I made was it just I want to work in everything, but not in, >>uh >>this is And and maybe maybe that is how the brain process. So the brain process I want to work in i t. And this is how I got into it. No, but seriously, I think the first part was I got my business degree, but I got it from a technical in your university. This is why I come First time came across that in a broader sense. What I say is it later or is it early? I don't think so. That was for me at the right time. That was mechanical engineering engineering and I t. I've also built a couple of seasons around that part. That was the first one. And certainly when I get into this company that was on parallel computing at that time and under talk, being responsible for optimisation models for refineries as sort of transition into that one. So coming really from a technical university background being on a daily basis was that and being in in this in those topics all the time and also thinking about how could I progress that way and also having my first engagement with the company, Um, in that space that got me intrigued and stuck into the startup space. Um, not calling as a startup those days, but also in the technology side. And I think the farms have been so cool if I look back on that one, >>you know, what's the thing about that Storey is that you were in an environment that was technical and nerdy, and we're seeing that now people are. We had a leader on a W s that I interviewed. She said we're nerd native. The younger generation is natively nerdy. And there they got tech. They're touching it everywhere there in things owns there in think tanks and build a building things. So this is this is the new situation. So, you know, this is kind of where we're going. So the next question I have for you is, um how do we encourage young women and girls to get a career in tech? Are there initiatives that you guys have? I know get I t initiative that 80 bucks runs is one. How do we get this? This word out that it's all in front of us that the environment is rich to >>bring careers >>in together. >>Yeah, and I think to your point, you can't start early enough on that one, right? So I can say it has been a different touch points, but I think I also had an inspiration earlier where I really thought about here. I can do everything right. So from that perspective that paves the way into a looking at, I can equally proceed different career passes, but you touched on the get I t side And I really, really love that initiative that that we as a W s have put together. And I've been a judge on that one. And it's amazing results that have been driving that. So the initiative has and and and and defined frame it is encouraging girls in the age of 12 13 and also that but but potentially also then later going and considering and career in tack. Um, with that one, it brings these challenges that that teams are solving for specifically. For example, schools are taking problems on that they're gonna frame and set up into a in a sort of a mini startup mode, thinking about what is the business case, How do I go from a detailed plan but also still keep a big picture in mind and then bring it forward into a pitch? This is a very, very round of and defined programme that we have set up, and it really very it sparks very, very great. Not very, but but great ideas in the sense of it sparks the ideas for for really how those problems can be can be solved in those communities and potentially be beyond what I really love about it. It forces diversity. You think about it. It's not only just for for girls or it's not for younger women, but it is diverse team. So they are from a diversity perspective. It brings different perspectives into it, and it's in and is solving those problems for communities or challenges for communities. So since we started that one we have, we have had a very, very strong participation in the UK, for example, from 136 schools and I think over 30,000 students. We are now rolling this initiative also out to other countries in Europe, and I had the pleasure to participate in the one in Germany. So I think that that was really an outstanding experience and it really brings that top of mind again and again. Think thinking about no matter what your background is, just go and solve problems for your school, for your community, get people together, get diverse perspective and get things going. >>I love that example, is a great storey because it also allows people to get their hands on some technology experiment breaks to fix it get building at the young age. But also the theme this year is breaking the bias. Right. So when you get to the younger ages, the bias can be worked on there. This is a great example of that. Is that have an impact there as well? >>Yeah, I think so. Very much it is. You have You have those teams that are naturally then working around the problem, and they are really absolutely focused on the topic. They are absolutely focused on solving a challenge. And I think that really brings this the diversity of perspective together. And in that context, the teams are also looking at what we what we have in in in our organisation, what makes really that strong culture, which are the leadership principles. Right? So we are this this is a invent and simplify. This is a built trust very much. Just just deal respectfully with other people, but also be able to discuss, had you a strong opinion but then also agree on the direction. So I think it really brings that to the topic. And by that broadens the base of the collaboration great >>organic diversity from day one as they say Amazon phrase. But let's speaking of Amazon phrases and leadership principles. One of the things that we hear Amy Jackie talked about this all the time. But now Adam Sadowsky talks about as well as the new CEO of AWS. Um is to be the world's best employer, right? So you know, one of the things is the diversity, inclusion and equity part of the equation. And and, of course, they're they're putting storeys out like this is a great, great service, and we're happy to be working with them on this. So why is diversity, inclusion and equity such an important part of this leadership principle? Uh, for Amazon and the world? Can you share your thoughts and and share the the urgency and imperative of why this is a big deal? >>Look, I think now, first of all, we need to acknowledge that we are all diverse, right, and we can, by default, say that So we are bringing all these diverse views. We are bringing a lot of diverse perspective when we are joining a company. When we are talking to other people in each and every interaction, we are expressing our diversity and and we we we as a W s believe that when technology is delivered, it should be in a way that it should be built in a way that is first of all, diverse. It is equitable, and it is inclusive. Um, and we have the responsibility to make that happen. And we also have, as an organisation, the responsibility to take the way, way on to understand what does it take to get there and to get the commitment out to make sure that we bring more diverse perspective, we bring more diverse perspective. We force those ones, and we build on that we never stop on looking at bringing more and more diversity. And that's one, I think, Um, we are as a W s committed to a diverse workforce for one reason, and that is our customers are diverse. The challenges are diverse, so delivering the best solution needs a diverse perspective. This is where the best of innovation comes together when you have people that can discuss. But those people also feel safe to express themselves and to have their voice heard. So that's the second part where it is. It's the customer focus, and we are extremely customer obsessed. But on the other hand, it is also the question about we do it for our people because we want and that comes then back to your point on also on the on the leadership principle. We want our people to feel the belonging into the organisation. This is what they are in their safe point. This is what they deliver at the best, also for our customers and what they feel that they are part of the organisation. When you take diversity equity and inclusion together, the outcome of of all of three is is belonging. So we want to to really drive that to make sure that we we dr more aspects of that diversity into the organisation. So we bring a broad basis of our colleagues, um, into into the organisation and make the work voice heard. Now that that's one hang on and then we we we we want actively recruit women into to drive this gender diversity specifically as well. When we look, for example, at a media and we are going to colleges, we're going to two events were going to conferences when we want to really offer the benefits for for our industry leading, for example, parent leave, mentorships and sponsorship programmes which are women to develop their careers to to really focus on that one. So I think it is striving for being the Earth were best employer by bringing those top industry programmes to live, to make sure that each and every diverse personality can find a space at AWS and run at the best for the best of our customers, >>that's a great point. The world's divers, the customers are diverse and if you put the three words together, they're all equally important. It got to include everyone got to be diverse. Everyone has to have equity. That is a community that's about what community is about. And and we are now doing seeing more community focus than ever before. In today's world, this is super important. Quick follow up on that the role of community. What's your vision on community? Because >>people want to belong >>to something, they want to be part of a tribe. This community, >>Yeah, and that's why I'm saying I think when you to, to your point again to reinforce that when you bring the three words together, you get this community feeling you get the belonging. I think it's also the question of a strong culture. You, you, you the ability to offer a cultural framework that people can identify with where they see that the breaths and depths of their skills and all the people around the globe can be folded in. I think this is massive, and this is extremely powerful to bring that to life and to be able to offer this to to our colleagues that are working at a W S. But also beyond that is a universal, universal message that we can spread. >>Yeah, I gotta say, uh, props to Amazon AWS and we're investing in the queue. We're doing more of these interviews. This is a force multiplier. I think, uh, diversity, inclusion and equity is a force multiplier. Competitive advantage. The product gets better, the people are happier. It's just a wonderful thing. So I really appreciate the the insight and points on that. That's a great, great segment. Lastly, though we're speaking of the number of inspiring women, you're one of them. Thanks for joining us as part of Celebration International Women's Day. I'd like to ask you, um, who inspires you? Yeah, >>Look, there are there are so many just I I think we are. We are living in a world where you get the inspiration from very, very many sources. But if I drive that back to what has shaped my career, what has shaped my past? I would say that there are There are two main data points. The first one is I'm really going back to my dad. When I went back to him and says that what eventually can I do? He just looked at me and said, Do whatever you want And this is how I really went into life rolling up the sleeves, saying Okay, yeah, well, let's go there, Right So it inspired me to to to look at the positive side and to always take it from an opportunity perspective to go and do whatever I wanted to do. What I thought is interesting for me and where I have been really curious and wanted to learn more about that is one and the other one. Besides the all the framework that we, for example, have had a W s, the leadership principles, our culture of diversity, but also our culture of of, um of of discussion, high debate, and those types are super, super inspirational when it also comes for me to drive in the next level of getting getting everybody on the same page. Um, I had a discussion, was one of my former escape managers as capable managers, and the the sentence that he has formed that is still sticks with me is I was looking at the next career point, and we have been discussing that back and forth, and he he was always asking the same questions. What do you want to do next? And I gave him an answer. He never answered. He just walked away and I did that two times, and I eventually figured out that it's probably not what he really wanted to hear. And when we started to go into a discussion, he he pointed me to a to A to A to to affect or to a direction that he said, Do you want to wait for dead man's slippers? And this is a sentence just you don't really under need to understand that in price and deaths. But if you think about the picture just like this, there is the old chair and then you have the slippers. Is that something? This is something we always think myself back and forth. I'm thinking. What? What? Which point I am I at. And is that eventually also a point where I would say this is a dead man slippers transition point. And this is what inspired me of thinking about the next three points staying agile and also staying, staying always curious and learning. >>So go on to the next level is about pushing yourself and really rethinking and going after things that maybe aspirational but attainable at the same time. Understanding that role sounds like that was growth opportunity. >>Yes, it was a growth opportunity. Then it never comes to the to the point where you're gonna say, I'm gonna now that's it, right? I've learned everything. It is a I'm gonna step out. It's gonna be outside my comfort zone. Am I ready to do that? And it's at the right point for me and I think it's the answer to that. One is always Yes, this is how you stay, Stay, keep up with technology. But you keep up also with all the fantastic opportunities that that that the life and also the environment. Like, for example, a W s offer. >>Isabella, thank you for coming on and sharing this storey. One last question I'll ask you, is what's next for you. What do you want to do next? Your worldwide public sector executive leader for Europe, Middle East and Africa for AWS Hot company? The regions are everywhere. There's more regions as locals owns. Everything is happening. It's expanding. You're in the middle of it. What's next for you? >>I want to see cloud being the driver of innovation and and business dynamics. Business model change. And I want to be part of this business model change that is based on cloud in future, for the benefit of public sector and all the other entities, and also very much for the for the benefit of all citizens around the globe. That's my next >>Well, it sounds like it's been a very diverse, inclusive and highly equitable, and I want to be part of that. Want to belong to that? Thank you for sharing and looking forward to more conversations and thank you for spending the time to come on the cubes presentation here. Thank you so much. >>Thank you. so much I >>appreciate. Okay. The representation of women in tech global events celebrating International Women's Day. This is the first episode will be more. We're going to get more and more storeys out. But March 8th is a big day. We're celebrating today. International. I'm John Ferry, the host of the Cube. Thanks for watching.

>> from Bahrain. It's the Q recovery AWS Public sector Bahrain brought to you by Amazon Web service is >> welcome to the cues conversation here. You're in Bahrain for Amazon Webster, is this summit our second summit? Um, here. Big news. Amazon Web services announced the availability of the region in the Middle East. I'm here with the chief of Public Sector Theresa Cross and vice President of Worldwide Public Sector. This is a huge milestone. This event one just in terms of the event. The interest across multiple countries in the region. Yes. And you have a new region with multiple availability zones? Yes, up and running. Congratulations. >> Hey, we launched the confetti today and yes, we're open for business and we do. It's a hyper scale region with three available the zones and lots of activity already here in the delays. But it really is a substantial kind of milestone because we started this sometime back in the Middle East, was one of the top regions around the world requested by our partners and customers. And now here we are. >> We've been talking with you for many, many years and I love interviewing you, but this one to me feels like it's not the weight off your shoulders. It's you're at the start line of another marathon. You've achieved so much with this because what's the first thing about Bart Rainey? We've reported on this on Select Angle and our other sites is that you get a lot of work here, is not just turning on a region. There's a lot of government commitment cloud first, full modernization, fintech banking systems, a full re platforming of a government and society and Amazons powering a lot of it and causing a lot of economic growth. So this is a big deal. >> It really is a big deal because, like you said, it really is about digital transformation here. And when I met the crown Prince in 2014 we had this conversation about really creating the economy here in a different way because Bob terrain itself, it's not oil rich country, but a smaller country with lots and lots of tourism. But in this region, while we haven't based here in Bahrain, this is truly a Middle East GCC region and but But part of that, the reason to start it here in my reign was that they really did take a lead in government transformation. As you heard them say, they're going all in shake Some on today talked about government is moving really fast, and they actually did the hard work to think about their telecommunications industry, their government regulations. They started with cloud first, and then they created all the write regulations to make this happen. So it is kind of phenomenal how quickly, in some ways, you know, feel slower than we'd like, But it's really moving quite fast. >> It's pretty fast. You should get a lot of kudos for that. I think you will. But I think to me what's interesting. The news here is that there is a balance between regulation and innovation going on, and regulation can be hampering innovation, some cases and not enough regulation. You have a Facebook situation or >> right so >> it's a balance. These guys have done it right. But to me, the tell sign is the fintech community, >> because that's where >> the money is. The central bank and then the ABC bank are all talking about a pea eye's all in with Amazon that's gonna create an ecosystem for innovation. Startups, et cetera. >> It totally isn't you heard Thean Vivid Jewel from ABC Bank today talk about their platform. What they're doing with clouds and the reason they chose a DBS was because we had this region of Bob Terrain, and they wanted to move quickly in. The regulations now have been updated in a way that actually allows them to do their banking applications in the lab. There's also a startup accelerator here, Fintech May, and they're doing a tenant work with new types of financial applications. So it's so exciting to see this kind of happening than the lace for I think a lot of people thought it would be much slower. We have a ways to go. It's still day one, for sure, but all the building blocks are getting there in the right place to really make this happen. >> You know, 80. Jessie's quoting the announcement you guys had just a couple weeks ago. Laura Angel And in July, the clouds of chance unlocked digital transmission. Middle East, says Andy chassis. Obviously unlocking is a key word because now you have customers from startups to large enterprises and ecosystem of a P M party. So the Ap N Group is here. Yes, So you have global I SUV's here and knew I s V's. You got the government and the education and to me, the news of the show. To me at least maybe it's not the big news, but is that you guys? They're offering a computer like a cloud computing degree. Yeah, for the first time about that news, >> you are right in terms of kind of every sector's picking at, but like in most places around the world, this is not unique. We need skills, and we've got to make sure that we're teaching the skills, working backwards from what the employer needs, like a TVs. So what? We've been here. We announced today we're launching our first cloud computing degree at the university of our terrain, and they're kind of thing. That's really unusual, John. They're going to do a phase one where they offer a cloud certification starting in early 2021 every program at the University of Bahrain, Whether you're in finance or banking, or business or health care or law, you can do this cloud computing certification, which gets you going and helps you understand how you last cloud in your business and then in the fall will be announcing the four year starting, the four year cloud computing degree, and that is in conjunction with our A DBS Educate program. And it will be all the right cloud skills that are needed to be successful. >> Talk about the demographics in this country because one of the things that's coming up is when I talk people in the doorways and it's a chance to talk to some local folks last night that that all in an Amazon, the theme is this. This younger generation yes, is here, and they have different expectations. They all want to work hard. They don't want to just sit back on their laurels and rest on their on their location. Here. They want to build companies they want to change. This is a key factor in the bottle rain modernization. Is that >> Yeah, generation well, all across the Middle East. The thing that's unique about the mill aces, the very young population you had millions of gamers across the Middle East as an example that comic con and Saudi like two years ago on that was one of the most popular things was fortnight. As soon as the region got at all the different gaming started taking place. But we want to create a culture of builders here, and the way you do that is what you said, John putting it into their hands, allowing these young people have the tools create a startup became entrepreneur, but they need to have access to these tools. And sometimes capital is often not that easy to get. So they want to make sure that the capital that they're given or that they have, whether it's bootstrap capital or venture capital, fending or whatever friends and family, they want to make sure that they can use that capital to the greatest advantage to build that company out. And I truly believe that this is gonna help them having an eight of us cloud region. I mean, you saw. Today we have 36 companies that launched their offering in the region on the day we actually announced so that they had specific offerings for the Middle East, which pretty exciting. I mean, that's a lot on day one. >> I mean, it's still day. One of you guys always say, but literally day one they were launching Yeah, I wanted to comment if you could just share some insights. I know, Um, your passion for, you know, entrepreneurship. You guys are also some skill development investing a lot of women in tech power panel this morning, there's major change going on. You guys were providing a lot of incentives, a lot of mentoring, this internships in conjunction with by rain. There's a lot of good things. Share some of the new things that you're working on, maybe deals you're talking about doing or >> way announced Thio kind of new things today. One is we have our we partake program, which I'm, of course, super passionate about. And that is about preventing tech learning and skills to women and underserved in representative communities. So we announced three other training programs here across the Middle East time. So those were put up today and you'll continue to see its role more and more of those out. And the other thing we did yesterday we announced a internship program with the minister of Youth here in Bahrain. That was shaped Nassir, who's a very famous He's that King san, and he's a very famous sportsmen. He does. He just won the Ironman Ironman and 2016. It was the world champion. He does endurance horse racing, so he's a He's a someone that the youth look at to here, and so he's doing all these programs. So we announced a partnership that were the first group doing the internship with this youth program, and so we're very excited. We're going to start that small and scale it, but we want to get these young people quickly and kind of get them excited. But here, what they focus on it is underrepresented communities. So it fits so nicely in with what we're doing with our attack. So you have both Oliver training our over 400 online courses that we offer with a dubious education academy. Now degree now our internship program and we protect. So, John, we're just getting going. I'm not saying that this is all will offer, but these are the things that were getting going with, and we need to make sure we also Taylor things like this Ministry of Youth program and sports at to the region in terms of water, their local needs, and we'll make sure that we're always looking >> at the entrance. Just just get him some great experience. Yes, so they can earn and feel good about themselves. This is kind of a key, exactly thing not just getting an internship, >> and it's, I think, locally it will be about teaching them to do that, disagree and commit really have that backbone to build that company and ask all those hard questions. So we're really going to try to indoctrinate them into the Amazon a TVs culture so we can help them be entrepreneurs like we are every day. >> And you got the data center, you got the city, the centers, you get the regions up and running, and architect, it perfectly suits up with people in it. Are you going to staff that with local talent, or is it gonna be Amazonian is coming in? What's the makeup of staff gonna be? What's the >> story? I mean, our goal is to hire as many local talent. We everywhere we go around the world. We want to get local talent because you can't yet if we did, First of all, we don't have enough people in our headquarters to bring folks in here, so we really have to train and educate. But locally, we have an office open here by rain. We haven't Office Open and Dubai and one down Saudi, and that is local talent. I mean, we are trying to use as much local talent and will continue to create that. And that's kind of the point. Jonas talking about the degree working backwards from what the employer needs. We want to give input because we think we also are getting good. Yeah, so we need to get the top. But we need those other individual employers that keep telling us we need more cloud skills to give that input. But, yeah, >> we're going to get a degree, migrate them into the job >> market, right quick like >> and educates. Been doing great. I learned a lot. This is a whole opportunity for people who want to make money, get a job. Amazon Web service is >> It's a place you could either work for us. Work for someone now, like even the government has a >> virus. Make a person tomorrow >> there. Yet >> we had one, >> but the point of being a builder, what we're seeing more and more John are these companies and government entities are building their talent internally. They're not outsourcing everything anymore, and the whole culture at being a builder, not just outsourcing all that. And that's what eight of us really helps all these entities. D'oh is moved quicker by having kind of some in house talent and not outsourcing everything to slow you down. That >> really thank ABC pointed that out beautifully in his point was, Hey, I'm gonna you know, I'm all in on AWS. We have domain expertise, We have data. That's our intellectual property. We're going to use that and be competitive and partner. And >> yes, and the new models it is. And that I p stays in house with that company or entity or government organization. It was so fun for me today to hear Shake some on from Maggie. A talk about the government is moving fast, and I think that's an example of a really are they figured out clown helps him just go a lot faster and save many security. >> I'm glad you brought that up. I know you got a short time here, but I want one last point in. We've been talking a lot about modernization of government, your success with C i a United States jet I contract still under consideration. All this going on you're experiencing by ranges and, um, unbelievable, fast moving government. They kind of get it. United States some places gets it. This is really about focusing in on the workloads. What have you learned? As you've been engaging these modernization efforts with governments summer slow, some of political ramifications behind. No one wants to lose. Old guard will hold onto the rails. We've seen that in the news, but this is coming fast. What are you learning? What do you >> take away its leadership? I mean, at the end of the day, all these things were driven by a very strong leaders. And even you can see everybody today on stage. It is leaders that make a decision that they wanted a faster and they want to modernize but have the capabilities. No matter if you're the U. S. Department of Defense. Ah, yes. Health and human resource is National Health Service in the UK or RG a hearing by rain, the government's or enterprises that we work with around the world. The key is leadership. And if there's that leader that is really strong and says we're moving, did you actually see organizations move a lot faster if you see people kind of waffle anger. I'm not sure, you know, that's when you can see the slowness. Wow, What I will tell you is from the early days of starting this business in 2010 the individuals that always move fastest for the mission owners because the mission owners of whatever the business West at a governmental level or enterprise, they said, we need to keep our mission going. So that's the reason they wanted to walk through this transformation. >> And now, I think, with developers coming in and started to see these employees for these companies saying, No, no, what's the reason why we can't go fast? That's right now a groundswell of pressure you see in both government, public sector and commercial. >> And you saw Mark Allen today on stage talking about security. It iss literally day. Zero thing for us, and the reason a lot of our customers are meeting faster now is because of security. Cloud is more secure in their meeting to the cloud for security because they feel like they could both optimize, move faster for workloads, and now they have security. Better, faster, cheaper security, bad design, >> Theresa always pleasure thinking coming. Spending time. Thank >> you for coming to Barbara Ryan. Thank you. So >> we're going global with you guys is seeing the global expansion 20 to 22nd region. 69 availabilities owns nine more coming. More regions. More easy. You guys doing great. Congratulations. >> Thank you. >> Secure. We are here in Bahrain. Form or coverage. Global coverage of the cube with Reese Carlson, vice president of worldwide public sector. She's running the show doing a great job. We're here more after the stroke break. Stay with us.

>> from Seattle WASHINGTON. It's the Q covering AWS Imagine nonprofit brought to you by Amazon Web service is >> Hey, welcome back and ready Geoffrey here with the Cube. We're in downtown Seattle, actually, right on the water from the AWS. Imagine nonprofit event. We're here a couple weeks back for the education version of this event. First time to come into the non profit of it, and >> we're really excited to have our next guest. I knew a little bit about this organization before. Now we know a lot more. As he came off his keynote, he's brought Excuse me, Byron Hill, global head of >> technology for the Movember Foundation. By a great job on the keynote >> in the bay here to talk to you. >> And I think you came further than anybody did. Any other hands come up? I couldn't see the audience. 1000 miles, one >> I actually asked with from. So my whole stick around, you know, being from Australia 8140 miles to Seattle lost its appeal. If I'd said half Are you from 10,000 miles? >> Yes. Yes. We're glad we're glad you made it so that for the people that aren't >> familiar with them. Forgive him. Kind of a quick overview, Absolutely so in November >> is one of the world's largest men's health charities. We focus on three areas of men's health. Prostate cancer, mental health and testicular cancer. And every year we have annual fundraising campaign where we encourage men and women to fund. Rise for our cause is >> so Men's health is a really tricky situation. Let's met with GAL. She's like, Yeah, I'm going to do this. Start up. I'm gonna help. I'm gonna help all my male friends get to their doctor. Please. I was like, That's not the problem. The problem is, I never want to go in the first place. I don't want to talk about it. They want to acknowledge it. You know, they don't want to get their colonoscopy. They've heard horrible things about the prostate exam. So this is a really challenging thing to tackle. So how did you guys decide to go after it? How are you doing it a little bit differently so that you can have some success and he's not easy to operate areas. >> We realize that men's health was in a state of crisis. Men live on average sixties. Lesson. Women. And as you say, it's because way sit on the couch. We don't let things. We don't take action as opposed to women who always talk to themselves and should get out there and get something checked. So focusing on areas such as prostate cancer, where we know the family, history and ethnicity really important factors around these disease types and really targeting those populations and making sure we can have a big impact. We also spend a lot of time looking at survivorship. But how we can help people through that journey and understand what that journey looks like and help them actually have a really positive outcome At the end of it. My oh suicide is a huge area. Focus. One man every minute globally will die by suicide. And while that's not a uniquely mild disease, three out of four suicides a mile to really try to develop unique messaging, to talk to men in a very direct way is being one way we've I tried to get a cut through to really make a difference, right? >> So the mustache is in November in November, How did that come together? So you know, you've got these very serious diseases that we're trying to address a really big global problem. And you're coming at it with this kind of fun, kind of tongue in cheek thing. Movember. So for the folks that aren't familiar, what is movin, roll about? How did it come about? And really, what's the impact that actually, he has a huge impact with you outlined in the keynote? >> Absolutely So remember, started with two guys in a pub talking about fashion trends. They got onto the fact that the mustache had been the mainstay of seventies and eighties fashion and all but disappeared in the nineties. They just started to bring the mustache back as a gag. They got 30 mites, my yoga, robust ashes. They raise $0. They realized that papal complete strangers in the street. We're coming up to them asking about the mustache. What's that thing when you leave? And they realize the power of the mustache was something much more created conversations and allowed people to connect with one another to create an environment. We were able to talk about men's health. That's where we started. We never intended to become a men's health charity, but fast forward to 2009 and we've had over 6,000,000 people participating in a fundraising campaigns in the top 45 engineers globally and have funded over 1200 men's health programs. And again, all starting with two guys and pub. Having having a conversation about fashion trends >> you have, The numbers are amazing. I >> think you said S O start in 2004 and you guys were raising over $100,000,000 a year. How does it tie back to the mustache? Is just a conversation starter? No, by the way, this is why I'm doing it and please go go to the Web site. One of the mechanics. >> It's all about fun. Originally, the idea of the moustache was just fun. Just grow a mustache. Race and funds. That's it. We've really matured and progress in the last few years around really focusing in on the importance of men's health. So it started as a fun thing back in the day, and now we still try to maintain the fund. We also have a serious message to get through. So, quite literally, will ask people to grow a mustache last. Him too host and van will ask them to move. We've got a whole range of different fundraising ideas, and the idea is to absolutely get people raising funds in November. Getting as many people as we can to sign up and to grow moustache is and two doughnuts. So that's quite literally how we do it. And then we invest those funds back into women's health records. A >> great Well, I can assure you, after today we will be. The Q team will all be doing their best to get them. The mustache is there in a couple of months, but >> you had a >> lot of other really interesting messages within your within. You're talking about a culture of innovation, Mom. And everyone is always struggling. How do I and still a culture of innovation, especially in a large organization? You had a great quote. You're not the 1st 1 ever say it, but you said it with such passion, and clearly it's fall in love with the problem, not the solution to many people especially intact. Yeah, they want to talk about the attack. They don't want to talk about the problem. How do you know X ticket that? How do you instill that in your team. And how's that be really been a great driver for your success in development as a zone organization? >> Absolutely. So you're quite right. Paper will jump to the solution. And it's not just technical. People, like most people will come to you with a solution because I think they're actually helping. They think that they know exactly what the problem is to really just trying to position that to say, Well, let's get really clear and say Fall in love with problem Get really clear around the outcomes, withdrawn and deliver. Think about the experience is withdrawn. Give people here and then think about the technology. I talked about bringing the community into the conversation. Imagine the power you can have by bringing the community at the table when you're designing a new product. We try to do that all the time having a man in the room that suffered from prostate cancer. The insights they give you. We're very quickly highlight that you may have absolutely no idea of what the problem is. I talked a lot about assumptions. We form assumptions in her mind that crystallized. We have this bias and you have to challenge yourself to constantly go back to the coalface and look at those assumptions. Are they right? Are we solving completely the wrong problem Here you can deliver a great solution that completely misses a problem. So how do we do that? We encourage people to think about the problem. Immersed herself in the research. I talked about an example in testicular cancer. We spent three months on understanding the problem. Three months we spent four weeks on building a solution, and that was for a feeling that we didn't quite have the confidence that we knew what the problem. Waas. We wanted to know what itwas who wanted to delve into that research and really engage with people. Engage the community to get a deep seated understanding of what we were trying to solve. Right? >> Another PC talked about Is the community the importance of the community and really said the community is the why really powerful statement And I don't know people. Sometimes I think, think of community 10 gentle They're not really is the purpose for what? You know why you get up in the morning every day and why you do what you do. You have that come about. And how do you make sure that that stays, You know, clearly in focus for everyone. >> It's a really important point, and it's why we exist. And for us, it's a mobile rose and most sisters and the men that we serve. So how do we do it? We have to constantly anchor ourselves back to the point that there are means and means of men out there suffering from this desert diseases that we support. We want to create a better world for them so we can a line around the Y. If everyone in the organization understands why we're doing the work, it helps us deliver some amazing outcomes and again, the context of having people in the room, the community being part of the conversation that you're having gives that really sense of context. And it hasn't been easy. It's taken time to get there and you can't involve. I give an example of 20,000 people responded to a survey. You know, it doesn't have to be huge amounts of data. The voice of one or two people could be enough to provide unique insights. They give you a real sense of purpose and really give you a sense of what you're trying to change >> right? The third piece, he talked about the third leg of the stool, if you will. His culture. Onda geun driving, innovation of culture and your example you gave him the key note was phenomenal, which is when your team, you know, found a problem and asked you for approval on the $500 fixes. And you said, you know, empower your people to find the problem to solve the problems out Me and I think it's such a great message. And you spoken depth about learning about a screw up a failure and really identifying that as a terrific learning opportunity. You know, where did you learn about that kind of cultural approach? How do you keep that up? Because that is really the key to scale. And I think so many people are afraid to trust and afraid to have kind of blameless. Blameless postmortems is another phrase that we've heard so important to enabling your people to actually go out and accept. It's not easy, >> and how do we learn, Like all good things we did on the fly like if you're facing a situation where you've got a major piece of work that's kind of screwed up, and it doesn't do what you think it's gonna do. We had two choices. We could try to fix it, and I just knew we weren't gonna get there. It's a really using it as an opportunity toe positively reinforce what we should be doing that was learning. We had a really narrow opportunity to learn and learn in an in depth way. And how do we develop that culture we had to spend that time? It was really consciously thinking about when you got a team who are not feeling a lot of love there really worried. They actually concerned for their jobs, refocusing their their effort, giving them conference, telling them I've got your back and ultimately it helped us create this coach where people can proactively go out there and solve problems and my example of the business case or a showcase every single time we will go for the showcase, getting people to talk about how they're solving these problems, what is the problem and actually putting a proof of concept in or showing us that an example of what it looks like that's taken a long time to develop that culture, however, it's been absolutely worth it. >> Yeah, that's great. And you gave you gave the audience three challenges. At the end of the day, I was pretty interesting that weren't in there because they kind of encapsulated there kind of your key three themes that was, you know, really understand the problem you're trying to solve. I talked to people in the community. I like that. Don't presume you know what's going on. Talk to people. And then the last thing is encouraged. Three people to start working on the problem. Don't start working on it yourself. But again, you know you're going to have such a good grasp on engaging the team to the benefit of the whole great great messages >> over the year. Or didn't appreciate the homework I gave them to go. Go back to their desks on Monday morning and try these things. But I firmly believe that you know those three challenges and they're only small like this is not about trying to solve world hunger. This is just starting with something small in your business that you can look at. You can get two of your people 23 other people to focus on that validated the problem and look for ways around it. So it doesn't have to be a huge a group of people just getting a stock. And I've already talked to a number papal off to the canine who who really said that really resonated just starting that conversation. Small in that that I did a snowball and eventually growing as part of the organization. Right culture is something which takes a huge amount of time to get right, and I go in starting small one and letting that grow and permeate and do as much as you can do to reinforce that culture within your organization. Really living and breathing that cultures is important. But >> even those starting small your guys goals were huge. I mean, your goals are to cut to cut the prostate and the testicular percent, 50% and drop the suicides by 3/4. So, you know, it's a really interesting approach. Start small, you know, focus on the small, but but you clearly have a really big goal is my >> goal, and we know we can't achieve those goals by ourselves so way collaborate as much as we can with others who have similar missions and trying to band together. And we realized very early on that bringing together the best and brightest minds in the world to solve these problems was absolutely essential. We couldn't do it myself. So forming those network says global networks of experts researching constantly evaluating that research, making sure we're having to cut through and with nests in the process of scale in those programs that have shown great outcomes to reach the lives of means of men. So it's again starting small, proving these ideas out there looking to scour those ideas to reach frankly means in England. >> All right, Byron, we're almost out of time. We've got about 10 weeks until the month. Formally. No, it's November for >> me knowing this. So how do >> people get involved? What should people do? Give us give us some concrete tips for the audio? >> Absolutely, absolutely. So, first of all, you want to go to moveon dot com and you want to sign up, Sign up to be a mobile. Almost Easter, you can either grow a mustache. You can host in the van. You can move for Movember start donating, and it's like any people to die tonight. So grow a mustache and asking me to give you money. That's the 1st 1 to do it. Second tip is what sort of moustache gonna grow. There's so many styles. There's the >> little style guide on the course, But not everyone >> can go. We could, Tash, but, uh, we do have wards for the line, Mark. So some of those >> little lame of the Lane >> Mart I can always always recommend some augmentation of the mustache if you got a few gray hairs and maybe bush it out. A little bit of color lamentation. Something like that. Um, but above all else, it doesn't live. Use one message. It's about getting yourself checked. When things don't feel normal, go to the doctor, have that positive impact on your life. And, of course, Movember dot com is full of really useful tips and great content to help you on that journey. >> All right. Well, Byron, thanks to you very much. And again. Congrats on the keynote. Thank you. Seem really enjoyed the time. Excellent. Thank you. Alright, He's tired. I'm Jeff. You're watching The key were eight of us imagined nonprofit in Seattle, Washington. Thanks for watching. We'll see you next time

>> live from New York. It's the Q covering AWS Global Summit 2019 brought to you by Amazon Web service, is >> Welcome back. Rush hours started a little bit early here in New York City, with over 10,000 people in attendance for any of US Summit in New York City. I'm stupid, and my co host for today is Corey Quinn. Having a welcome to the program to first time guests from our host Amazon Web service is to my right. Here is Deepak Singh, who is the director of Compute Service's. To his right is Aaron Cow, Who's the senior manager product marketing Gentlemen, thanks so much for joining us. Thank >> you for having us >> for having us, all right, so we know that every day we wake up and there's new announcements coming from Amazon, and the only way most of us keep up with it is trying to re Cory's newsletter here. But in your group and computer, we know there's a lot going on and quite a few announcements. So, Aaron, what do you kick us off with? Some of the hard news that went >> through this morning? Yeah, we just launched Amazon event. Bridgette's Ah, serverless event boss that allows youto connect your applications with data from sources like sass applications. A devious resource is in your own applications. >> All right, So Deepak would look to dig into that a little bit. I like you said, you that Amazon. You learned a lot from cloudwatch in building this tool. Everybody looking at kind of lambda and the service faces, Like Okay, how all these pieces together is that all? Amazon service is all the time. And, of course, Amazon has a huge ecosystem. But help help us understand a layer down. You know how this works. >> Yeah. So, you know, a dress service send events watchman consumer event from one of the best ways to do it is through Lando. Lando. One of London's biggest trends is the number off integration we have with events both taking in events and triggering event. But to your point there already events inside database system. I think one of the things as a service owner, that really excites me about event. How now? Customers of access, not just two ventricles inside eight of us were awesome apartments extended so that the application you can build will be really exciting. >> Quite a few other announcements maybe August or someone CK >> is another announcement where it's open. Source. Software development framework allows you to model your applications using programming language like typescript Job a python and got that. You know the whole thing with building in the cloud. It's slightly different. You usedto take your coat. Put it on a servant. Run it. Now people are building things a little more distributed. Using a lot of different resource is for their applications, so it's getting provisioning. Your infrastructure is a little bit harder, right? Either Have to do a lot of things manually. Are maybe you're writing. A lot of scripts are using a domain specific language, But with CD Kay, you're now able to use the programming languages that you're hurting your applications with two model and provisions your infrastructure. So it's super helpful. Really think it's gonna help developers increase their development velocity? They're able to use things like loops, conditions, object oriented programming. They don't have to do context switching and just a few lines of code. They're able to do a lot more. All right, >> I want I want a playing with it a little bit when it was in review, and one of things that I found that it was extremely helpful was it was a lot easier for me to write something in using CD kay and then see what that rendered down to in terms of cloud formation. And then, oh, I guess that's how I do it in cloud formation, which was great. The counterpoint, though, is it also felt, at times like it was super wordy. So if I read that what it generates compared to what I normally right, which is admittedly awful. But it's all right, we'll start to feel like I'm doing it wrong with that. And then with amplify and with Sam and the rest. There's a lot of higher level abstractions that build cloud formation for you. But then it renders down in a few different key ways under the hood. How much are these products that you're coming out with starting to shape the direction of confirmation itself? Or is that mostly baked and done? >> There's a lot of products that we're building that you know are complimenting information. Information is the template ing modeling language to provisional abusive resource is put on top of that. We have things like Sam, right? That provides a declared of ATM or high level abstracted declared way to build on topical information. You know, we have amplified also use this information to help you build mobile applications in front development and then finally have see decay for general use other things. They're all complimenting and you know are things customers are asking for helping us >> get the ecosystem. Deepak. The container space, of course, has been You know what one of these tidal waves that we've been watching on It's fundamentally changing the way people architect their applications. That huge impact on your product line Give us the update. If you could just start with some of the high level. Remember first when I talk to you. A couple of years ago, the whole kubernetes piece was sorting out. So you know, e c s E. K s usedto have a much longer name that Cory >> Cory. Finally, you fix the compensation problem where someone was getting compensated based upon number of syllables in a service name. So good on you on that one. >> Right on. Uh, you know, acronym, am I? Maybe you can you know, settle once and for all. You know how how we pronounce that >> I'm old school in love with the Army. >> But what what walk us through? Kind of. You know, your container service is, >> I think, the great thing about container, I said, adoption is everywhere on what we find. It brought a VCs the growth of cares where they're running it on to our fargate. Everything is growing like crazy because people find new interesting ways to run applications based on what they know. One what they're comfortable with their customers. Customers like Snap. There's no community well, and they're building on their building a big chunk of their new infrastructure on kneecaps or need to be with, and it basically helped develop a velocity. On the flip side, your customers like Turner Broadcasting that run a lot of their Web service is the comedy central content properties like that on Fargate because they can just stamp them out. They all you know, it's about time. It's a service that you can just keep expanding. So it boils down to one of the key things that you're comfortable with. One of the reasons you fix something if you are running like snap across. You know, in many different looks places you are likely to choose community and standardize on that. So that's the best part for me is people have choices and then the pic based on what they need. At that point in time, it can be two different teams at the same place. Picking a different solution. I will add that one of the areas that we are focused on now is a dub ability and develop experience, though the areas that our customers have been asking for CD Kay played into that record in the demo this morning. And with the probability with container inside on with the fluid that be announced, I think though that area, they do a lot more >> going forward, right? That was one of those cloudwatch container insights. Just explain what that one is >> so historically, when you do cloudwatch look very bm centric, you're looking at CPU memory. You're zooming application. We are instances run for a particular period of time. At the container world you have service is with the underlying tasks. Come and go all you know, a very different rate container inside. It's meant to be a world aware of the fact that you're containerized application that fast service is and part, they're able to get more fine grained metrics on the things that container customers care about. And you're not trying to use the BM centric language to look at the content. That's the biggest reason for doing that. And then on the floor in bedside Boy, our customers want loud rounding to whatever they want to do it on where they understand three or elasticsearch. We do that with data borrows. So we basically wrote a bunch of open source plug in for fluent, but they just end your log where you want them to go. That's kind of maybe a >> Yeah, I view it as more of a log router than I do. Almost anything else? Yeah, a question of where did it come from? Where does it go? How do you do? Keep straight. It's at this point. What is it out? What is it output to these days of their various destination options? Third party vendors cloudwatch history >> to plug in 14315413 because so many people in the center there with three the other one was like Anita. There. Apart from there, you can send it to read, Chef, you can send it todo you can send it to elasticsearch. So based on what however you want and I'll analyze it, you can send it to a custom resource. So you want you're using some third party provider. You can just send your logs over to those. >> Corey, you know, you're dealing with a lot of customers. You know, there's so many, you know, different instance types and some of some of the pieces. You know, what's the feedback you're giving? You know, Amazon these days >> entire depends upon the service teams, and it ranges from This is amazing. Excellent job, too. Okay, it's a good start, and it's always a question, though. It's when you have what 200 service options are darn near. It at this point aren't 70. It's impossible to wind up with something that is evenly consistent, and you have service is that air sub components of other service is built on top. I mean, I think the uh, I guess the feedback I've been giving almost universally across the board is assume that I am about 20% as smart as you right now seem to think I am and then explain it to me, and then I'll probably understand it a lot better. It comes down to service the storytelling more or less of meeting people of various points along their journey, and that I was mentioning in our editorial session just before this segment that that's something that AWS has markedly improved on the last two or three years, where you have customer stories that are rapidly moving up the up the stack as Faras Leverage Service's It's not just we took the EMS, and now we run them somewhere else. Now it's about building of extremely volume intensive applications on top of a whole bunch of managed service is and these air serious cos these air regulators. It's not just Twitter for pets anymore. >> Nothing wrong with that. No, >> So way were discussing like Enron was a great case this morning, and they talked about in the four years that they've been on, they re architected three times, you know, how do you balance all of these new wins is coming out with, you know, how do we make sure that I deploy something today that I've got the flexibility to change. But, you know, I want to be able to lock in my pricing and make it easier. >> Actually, we think about that quite a bit. One of the reasons we met, the way we did something that sits outside a container orchestrator. What? It doesn't lock you into choosing one or the other or even using an architecture. You can start over the monolith, start putting sidecars on it. It's getting with the ability to all your traffic portions of applications. You can start breaking out. You can put them on target. You can put them on PCs. You can put them on it, too. I think that is something we did very consciously because so many of our customers are in that position. And I think more and more are going to go higher up the stock using managed databases. You think lambda. But it's not decision they need to make all up front. They can do it piecemeal, and we see a custom fender. The good example there done that. >> I think one of the >> philosophies of like eight of us is giving customers building blocks the buildings on, so the whole thing is here's a new primitive that you can use. Then you can take it out, replace something with something else, depending on your needs. So we give customers flexibility and choice. >> And part of the problem is that that very much becomes a double edged sword. I mean, most recently you've had effectively declared war on alphabet. I don't mean the large cloud provider that turns things off for a living. I'm talking about the English alphabet where you take a look at all the different ec2 instance types. I think in US East one. Now there's over. What is it? 100 90 different instances you can pick from. It leads to analysis paralysis. Which one do I pick? What's the right answer? What am I committing to? What am I not? And you see that? That's a microcosm. The larger service problem. I want to build a Web app that does a thing. Which service is do I use? You open up the service listing and you just get this sort of sinking sensation. I get that. I can't imagine what someone new to the space is getting to >> you, and this is where things like amplify fargate aws patch. You don't need to select an instance where you just tell us for your requirements are on Batch makes that collection for you the core building. What's important because you can't really figure out what to do. But then you see us too much more about the attack to help people get there. It's an ongoing thing that will keep trying to tackle, but you see a lot more of that. >> It's controversial. One of my favorite things about Lambda, for example, is there's one knob ram, and as you turn that up, other performance characteristics increase and people complain about it. But I love the simplicity because I don't have to sit and think and make all these different decisions. It's one access, >> but if you want more knob, you can you fuck it. So I think that that's the beauty ofit that you do have that choice. >> Yeah, one lines there, and I really liked it. Borders keynote. Is he said way? Really? You know my words, commoditized. I t We all have access to all of the tools now, you know that was you know what big date originally file. It also was used to have to be a nation state 4100 to be able to do some of these things. So, you know, what do you hear from customers? How do they make sure you know, they're staying competitive and ahead on their four in that relationship between the business and I T. What do you hear from your customers these days? >> In terms of that? Well, I think, um, for you know, for customers like I think of Emperor age is a, uh, a pretty good example off that in terms of customers asking us for ability to, you know, integrate their SAS providers and a great a lot of different things and not have thio you No, no, no. >> I have >> to do a lot of undifferentiated heavy lifting and things like that. And customers are increasingly moving towards, like avenger oven architectures. And they asked us, Hey, we really like cloudwatch events and how you do things with a iittie automation and then bringing SAS providers and on way wantto you know, we don't want to build a polling infrastructure and orderto access athe eyes and do all all the heavy lifting. What we did was we built out way took cloudwatch events and added new features for SAS applications and build that into a separate service for people to use. That's like, you know, a lot of the relationships we have our customers listening to what they need and giving them what they want. >> I think that that's a very valuable thing. We used to say, You know, five years ago you would talk about, you know, let's get rid of indifferent, heavy lifting Well, now it's like, No, no, let's enable you know some thing that you would have thought was heavy lifting and we're daunted to be able to do it. But now hopefully it's easier because a lot of this stuff, you know, he said, This is still a little bit daunting, and you know, you've got a lot of ecosystem and service providers, and service is help us. You take care of, you know, because it's the paradox of choice. With all the options that you >> have on. I think that's the beauty of what I'm in a customer that smart. They managed to find interesting ways to keep challenging us and keep us busy. But I also think that really, really many of them the ones who've been able to be successful. I figured out what it needs to be. Take all the tools to give them which other ones where they want to completely hand it over to AWS and give us the responsibility. And then which ones today really feeling, get they care about and the ones who can find their balance of the ones that we see moving faster. I think that's what we're trying to >> write that one thing that does absolutely permeates virtually every service team I've worked with that AWS. I mean, I've had this experience with you where I talk about how my use case isn't a terrific fit for your product, and your response is always well, what is your use case? It's not. Is starting off on the baseline assumption that my use cases ridiculous, which, let's face it, it probably is. But being able to address a customer need to understand that even if it doesn't dictate, road map is incredibly valuable, and I don't find there are too many players in any space, let alone this one that are willing to have the patience to listen to. Frankly, some loud person wearing a suit. >> Way try. I mean, I think you heard me say this so much like a big junk. 85 90% of a road map. Customer request. I would say that even though remember remaining 10% maybe not think that they're directly asked for but think that you observed their running to or that we run into working with, you know, the one of the customers go ahead of the pack. Okay. They have this problem, Baker. How do you generalize that? And we try and understand what it means. One of the reasons to be made the container road map public was This space is moving so quickly. It's almost impossible for us to talk to enough customers to figure that out. So, like, okay, that gives us an avenue for them to come to us and just tell us and get have >> issues. Yeah, s o right. Final question for both of you directions. Looking forward, you know, the road map we love when there is publicly facing material, not under the NBA's that we normally have to be able to hear. So what are you hearing from your customers? What direction are they pulling you towards and that we should expect tow watch aws kind of a cz we head towards reinvent later this year. Yeah, >> like customers are asking us for different things for developer experience, especially event driven architectures. I think there's gonna be a lot of interesting things happening in the land of space and that entire space >> on to add to that. I think your point earlier helping the simplified choices is going to be a big part of it. Meeting them where they are in their ideas with the cooling is a big part of what you'll see us do. So you know, I think you saw examples today. We'll keep building on top of >> All right. Well, send our congratulations to the two pizza teams that worked on all of the projects that were announced today. Look forward to seeing you. You know, down the road in tracking down. Thanks so much. And welcome to be in Cuba one night having us Deepak, you know, from AWS. He's Cory Quinn on student back with lots more coverage from 80 West Summit here in New York City. Thanks for watching

>> live from Boston, Massachusetts. It's the Cube covering AWS reinforce 2019. Brought to you by Amazon Web service is and its ecosystem partners. >> Okay, welcome back. It was two cubes. Live coverage in Boston, Massachusetts, for Amazon Web services reinforces A W s, his first inaugural conference around security, cloud security and all the benefits of security vendors of bringing. We're here with a man who runs the marketplace and more. Dave McCann Cube, alumni vice president of migration, marketplace and control surfaces. That's a new tail you were that you have here since the last time we talked. Lots changed. Give us the update. Welcome to the Cube. >> Great to be back, ma'am. Believe it's seven months of every event. >> Feels like this. Seven years. You know, you've got a lot new things happening. >> We do >> explain. You have new responsibility. You got the marketplace, which we talked about a great product solutions. What else do you have? >> So we've obviously been expanding our service portfolio, right? So either us is launching. New service is all the time. We have a set of service is a road in the migration of software. So I run. No, the immigration Service's team and interesting. We were sitting in Boston, and that's actually headquartered 800 yards down the road. So there's a set of surfaces around the tools to help you as a CEO. Move your applications onto the clothes. Marketplace is obviously where we want you to find short where you need to buy. And then once you get into the topic of governance, we had one product called Service Catalog and reinvent. We announced a new product. That was a preview called Control. Yesterday we went to G A full availability off control, Terror and Control term service catalog together are in the government space, but we're calling them control service is because it's around controlling the access off teams to particular resources. So that's control service. >> What people moving into the cloud and give us a sense of the the workload. I know you see everything but any patterns that you can see a >> lot of patterns and merging and migration, and they are very industry specific. But there are some common patterns, so you know we're doing migrations and frozen companies were weighed and professional service is run by. Todd Weatherby is engaged in hundreds of those migrations. But we also have no over 70 partners that we've certified of migration partners. Migration partners are doing three times as many migrations as our old professional service is. Team are doing so in collection. There's a lot going on there, one of the common patterns. First of all, everybody is moved a Web development other websites have done. They're all running on the AWS know what they're doing is they're modernizing new applications. So the building in Europe or bring enough over moving onto containers. So it was a lie that ran on a sever server on. As they move into the clothes, they're gonna reshape the throw away. Some of the court brief the court up into micro service is on. Deploy out, Let's see on E. C s, which is continuing. There's a lot of application organization, and then on the migration side, we're seeing applications clearly were migrating a lost a lot of ASAP. So the big partners like Deloitte and Accenture are doing a C P migrations, and we've done a lot of ASAP migrations. And then there are other business applications are being moved with particular software vendors. You know there's a company here in Boston called Pegasystems. They do a world leading workflow platform. We've worked with Pagan, and we have migrated loss of paga warped floors in dozens of paying customers up on the float. >> You innovated on the marketplace, which is where people buy so they can contract with software. So now you got moving to the cloud, buying on the cloud, consuming the cloud and then governing it and managing that aspect all under one cohesive unit. That's you. Is that good? >> Yeah, it's a good way to think about it. It's a san of engineering teams with Coleman purpose for the customer. So you know, one of the things we do AWS is we innovate a lot, and then we organize the engineering teams around a common customer needs. So we said, above all of the computer stories service is on. We pay attention to the application layer. We described the application, So if you think of a migration service is says, I've actually got a service called Discovery, I crawl over your servers and I find what you have way. Then what we do is we have a tool that says, Are you gonna bring and move the till. So you have to build a business case. We just bought a company in Canada called TSA Logic. They had a Super Two for building a business case that said, what would this absolutely running with either of us. >> So is the need of the business case. What's the courtney that you guys have focused on? What was that? >> So, interestingly, we run more Windows Server and the clothes when Microsoft. So you actually have to business keys here. So many windows servers are running on print. What does it look like when a run on either the U. S. And T s so logic? Really good, too. And we find our customers using it. That says, Here's your own prim Windows server configuration with an app on run the mortal What would it look like when it runs on AWS? >> But why would you just do that with a spreadsheet? What? What is the T s so logic do that you couldn't do especially >> well? First of all, you want to make a simple too Somebody has to go run a spreadsheet. They've turned it into a tool that a business years Ercan used a sales person you could use on. They've built on top of a database. So it's got a rich set of choices. You are richer than you put in. A special with a U IE is intuitive, and you're gonna learn it in 20 minutes. I'm not gonna have you made up >> this date in their best practice things like that that you can draw a library >> of what's going down, and it keeps the data store of all the ones we've done. So we're turning that into two. Were giving Old Toller solution architect. >> Well, you got a good thing going on with the marketplace. Good to see you wrapping around those needs there. I gotta ask for the marketplace. Just give us the latest stats. How many subscriptions air in the marketplace these days? What's the overall number in the marketplace? It's >> pretty exciting. Way decided just at San Francisco to announce that we now have over 1,000,000 active subscriptions in the marketplace, which is a main boggling number on its own 1,000,000 subscriptions. Ice of Scrape. Within those subscriptions, we've got over 240 foes and active accounts, you know, and the audience doors you could be an enterprise with 100 cases and in an enterprise. What we typically see is that there are seven or eight teams that are buying or using software, so we'll have seven or eight accounts that have the right to subscribe. So you could be a one team and you're in another team you're buying B I tools. You're buying security tools. So those accounts on what? We're announcing the show for the first time ever. Its security is we have over 100,000 security subscriptions. That's a while. That's a big number. Some companies only have 100 customers, and the market, please. Our customers are switched on 100,000 security. So >> many product listings is that roughly it's just security security. At 300 >> there's over 100 listings. Thing is a product with a price okay on a vendor could be Let's see Paolo off networks or crowdstrike or trains or semantic or McAfee or a brand new company like Twist located of Israel. These companies might have one offer or 20 offers, so we have over 800 offers from over 300. Vendors were having new vendors every week. >> That's the next question. How many security app developers are eyes? Do you have over 300? 300? Okay. About 100. Anyway, I heard >> this morning from Gartner that they believe that are over 1000 security vendors. So I'm only 30% done. I got a little work >> tonight. How >> do you >> govern all this stuff? I was a customer. Sort of Make sure that they're in compliance. >> Great question. Steven Smith yesterday was talking about governance once she moved things on the clothes. It's very elastic. You could be running it today, not running a tomato, running it in I d running in Sydney. So it's easy to fire up running everywhere. So how did the governance team of a company nor watch running where you know, you get into tagging, everything has to be tagged. Everything has to have a cord attached to it. And then you do want to control who gets to use what I may have bought about a cuter appliance. But I don't know that I gave you rates to use it, right, so we could have border on behalf of the company. But I need to grant you access. So we launched a couple of years ago. Service catalog is our first governance to and yesterday we went into full release over new to call the control tower. >> Right. What you announced way reinvents >> preview. And yesterday we went to Jenny. What control does is it Natural Owes me to set up a set of accounts. So if you think of it, your development team, you've got David Kay and tested and the product ain't your brand new to the company. I'm a little worried. What, you're going to get up. You >> don't want to give him the keys to the kingdom, >> so I'm actually going to grant you access to a set of resources, and then I'm gonna apply some rules, or what we call God reels is your brand. You you haven't read my manual, you're in the company. So I'm gonna put a set of God reels on you to make sure that you follow our guide length >> Just training. And so is pressing the wrong button, that kind of thing. So I gotta ask you I mean, on the buying side consumption. I heard you say in a talk upstairs on Monday. You have a buyer, buyer, lead, engineering teams and cellar Let engineering, which tells me that you got a lot of innovation going on the marketplace. So the results are obviously they mention the listings. But one of the trends that's here security conference and it was proper is ecosystems importance in monetization. So back in the old days, Channel partners were a big part of the old computer industry. You're essentially going direct with service listings, which is great. How does that help the channel? Is there sinking around channel as a buyer opportunity? How do you How does that work with the market? Is what your thinking around the relationship between the scale of a simplicity and efficiency, the marketplace with the relationships the channel partners may have with their customers? And how do you bridge that together? What's the thinking >> you've overstayed? Been around a long time? >> Uh, so you have 90 Sydney? Well, the channels have been modernizes the nineties. You think about a >> long time. It's really interesting when we conceived Market please candidly. Way didn't put the channel in marketplace, and in retrospect, that was a miss. Our customers are big customers or small customers. Trust some of the resellers. Some resellers operates surely on price. Some resellers bring a lot of knowledge, even the biggest of the global 2000 Fortune 100. They have a prepared advisor. Let's take a company record. You often got 700 security engineers that are blue chip companies in America trusts or they buy the software the adoptive recommends. So mark it, please really didn't accommodate for Let's Pick another One in Europe, it would be computer center. So in the last two years we've dedicated the data separate engineering team were actually opened up. A team in a different city on their sole customer is a reseller. And so we launch this thing called Consulting Partner Private offer. And so now you're Palo. Also, for your trained, you can authorize active or serious or s h I to be the re sailor at this corporation, and they can actually negotiate the price, which is what a role resellers do. They negotiate price in terms, so we've actually true reseller >> write software for fulfillment through the marketplace. Four partners which are now customers to you now so that they could wrap service is because that's something we talk to. People in the Channel number one conversation is we love the cloud. But how do I make money and that is Service is right. They all want to wrap Service's around, So okay, you guys are delivering this. Is that my getting that right? You guys are riding a direct link in tow marketplace for partners, and they could wrap service is around there, >> will you? Seeing two things? First of all, yes. We're lowering the resale of to sell the software for absolutely. So you re sailor, you can quote software you build rebuild for you so that I become the billing partner for a serious or a billing partner for active on active can use marketplace to fulfill clothes software for their customers. Dan Burns to see you about pretty happy. You crossed the line into a second scenario, which is condone burns attached. Service is on. Clearly, that's a use case we hear usually would we hear use cases way end up through feeling that a little, little not a use case I have enabled, but we've done >> what you're working on It. We've had what the customer. How does the reseller get into the marketplace? What kind of requirements are there. Is it? Is it different than some of your other partners, or is it sort of a similar framework? >> They have to become an approved resale or so First of all, they have to be in a peon partner. I mean, we work tightly with a p N e p M screens partners for AWS. So Josh Hoffman's team Terry Wise, his team, whole part of team screen. The reseller we would only work with resellers are screened and approved by the PM Wants the AP en approved way have no set up a dedicated program team. They work with a reseller with trained them what's involved. Ultimately, however, the relationship is between Splunk in a tree sailor, a five and a three sailor named after a tree sailor or Paulo trend or Croat straight. So it's up to the I S V to tail us that hey, computer centers my reseller. I don't control that relationship. A fulfillment agent you crow strike to save resellers, and I simply have to meet that work so that I get the end customer happy. >> So your enabler in that instance, that's really no, I'm >> really an engine, even team for everybody engineer for the Iast way, engineer for the buyer. And they have to engineer for the re. So >> you have your hands in a lot of the action because you're in the middle of all this marketplace and you must do a lot of planning. I gotta ask you the question and this comes up. That kind of put on my learning all the Amazon lingo covering reinvent for eight years and covering all the different events. So you gotta raise the bar, which is an internal. You keep innovating. Andy Jassy always sucks about removing the undifferentiated heavy lifting. So what is the undifferentiated heavy lifting that you're working toe automate for your customers? >> Great questions. Right now there's probably three. We'll see what the buyer friction is, and then we'll talk about what the sale of friction is. The buyer frustration that is, undifferentiated. Heavy lifting is the interestingly, it's the team process around choosing software. So a couple of customers were on stage yesterday right on those big institutions talked about security software. But in order for an institution to buy that software, there are five groups involved. Security director is choosing the vendor, but procurement has to be involved. Andre. No procurement. We can't be left out the bit. So yesterday we did. The integration to Cooper is a procurement system. So that friction is by subscribing marketplace tied round. Match it with appeal because the p O is what goes on the ledgers with the company. A purchase order. So that has to be a match in purchase order for the marketplace subscription. And then engineers don't Tidwell engineers to always remember you didn't tag it. Hi, this finance nowhere being spent. So we're doing work on working service catalog to do more tagging. And so the buyer wants good tagging procurement integrated. So we're working on a walk slow between marketplace service catalog for procurement. >> Tiring. So you've kind of eliminated procurement or are eliminating procurement as a potential blocker, they use another. Actually, we won't be >> apart for leading procurement. VPs want their V piece of engineering to be happy. >> This is legal. Next. Actually, Greek question. We actually tackled >> legal. First, we did something called Enterprise Code tracked and our customer advisory board Two years ago, one of our buyers, one of our customers, said we're gonna be 100 vendors to deploy it. We're not doing 100 tracks. We've only got one lawyer, You know, 6000 engineers and one lawyer. Well, lawyers, good cord is quickly. So we've created a standard contract. It take stain to persuade legal cause at risk. So we've got a whole bunch of corporations adopting enterprise contract, and we're up to over 75 companies adopting enterprise contract. But legal is apartment >> so modernizing the procurement, a key goal >> procurement, legal, security, engineering. And then the next one is I t finance. So if you think of our budgets on their course teams on AWS, everything needs to be can become visible in either of US budgets. And everything has become visible in course exporter. So we have to call the rate tags. >> I heard a stat that 6,000,000 After moving to the cloud in the next 6,000,000 3 to 5 years, security as a focus reinforces not a summit. It's branded as a W s reinforce, just like reinvents. Same kind of five year for security. What's your impression of the show so far? No, you've been highly active speaking, doing briefing started a customer's burn, the midnight oil with partners and customers What's that? What's your vibe of the show? What's your takeaway? What's the most important thing happening here? What's your what's your summary? >> So I always think you get the truth in the booth. Cut to the chase. I made a customer last night from a major media company who we all know who's in Los Angeles. His comment was weeks, either. These expectations wasn't she wanted to come because he goes to reinvent. Why am I coming to Boston in June? Because I'm gonna go to reinvent November on this. The rates of security for a major media company last night basically said, I love the love. The subject matter, right? It's so security centric. He actually ended up bringing a bunch of people from his team on, and he loves the topics in the stations. The other thing he loved was everybody. Here is insecurity, reinvent. There's lots of people from what's the functions, But everybody here is a security professional. So that was the director of security for a media company. He was at an event talking to one of the suppliers, the marketplace. I asked this president of a very well known security vendor and I said. So what's your reaction to reinforce? And he said, Frankly, when you guys told me it was coming, we didn't really want the bother. It's the end of the quarter. It's a busy time of year. It's another event, he said. I am sure glad we came on. He was standing talking to these VP of marketing, saying, We want to bring more people, make sure, So he's overjoyed. His His comment was, when I go to Rio event 50,000 people but only 5% of their own security. I can't reinforce everybody's insecurity >> in Houston in 2020. Any inside US tow? Why Houston? I have no clue what I actually think >> is really smart about the Vineyard, and this is what a customer said Last night. I met a customer from Connecticut who isn't a load to travel far. They don't get to go to reinvent in Vegas. I think what we did when we came to Boston way tapped into all the states that could drive. So there are people here who don't get to go to reinvent. I think when we go to Houston, we're going to get a whole bunch of takes its customers. Yeah, you don't get a flight to Vegas. So I think it's really good for the customer that people who don't get budget to travel >> makes sense on dry kind of a geographic beograd. The world >> if we're expanding the customers that can learn. So from an education point of view, we're just increase the audience that we're teaching. Great, >> Dave. Great to have you on. Thanks for the insights and congratulations on the new responsibility as you get more coz and around marketplace been very successful. 1,000,000 subscriptions. That's good stuff again. They were >> you reinvented and >> a couple of months, Seven days? What? We're excited. I love covering the growth of the clouds. Certainly cloud security of his own conference. Dave McCann, Vice president Marketplace Migration and Control Service is controlled cattle up. How they how you how you move contract and governed applications in the future. All gonna be happening online. Cloud Mr. Q coverage from Boston. They just reinforced. We right back with more after this short break

>> live from Boston, Massachusetts. It's the Cube covering A W s reinforce 2019 brought to you by Amazon Web service is and its ecosystem partners. >> Hey, welcome back, everyone to Cubes. Live coverage here in Boston, Massachusetts for eight of us reinforced Amazon Web service is inaugural event around Cloud Security. I'm Jeffrey Day Volante. Two days of coverage. We're winding down Day two. We're excited to have a year in The Cube Special guest, part of Big and that one of the big announcements. Well, I think it's big. Nerdy Announcement is the automated reasoning. Byron Cook, director of the Automated Reasoning Group within AWS. Again, this is part of the team that's gonna help figure out security use automation to augment humans. Great to have you on big part of show here. Thanks very much to explain the automated reasoning group. Verner Vogel had a great block post on All things distributed applies formal verification techniques in an innovative way to cloud security and compliance for our customers. For our own there's developers. What does that mean? Your math? >> Yeah, let me try. I'll give you one explanation, and if I puzzle, you all try to explain a different way. 300 So do you know the Pythagorean Theorem? Yeah, sure, Yeah. So? So that the path I agree in theory is about all triangles that was proved in approximately B. C. It's the proof is a finite description in logic as to why it's true and holds for all possible triangles. So we're basically using This same approach is to prove properties of policies of networks of programs, for example, crypto virtualization, the storage, et cetera. So we write software. This finds proofs in mathematics and this the proofs are the same as what you could found for thuggery and should apply into >> solve problems that become these mundane tasks of checking config files, making sure things are that worries kind of that's I'll give you an example. So so that's two in which is the T. L s implementation used, for example, in history. But the large majority >> of AWS has approximately 12,000 state holding elements, so that with if you include the stack of the heat usage, so the number >> of possible >> states it could reach us to to the 12,000. And if you wanted to show that the T. L s handshake Implementation is correct or the H Mac implementation is correct. Deterministic random bit generator implementation is correct, which is what we do using conventional methods like trying to run tests on it. So you would need, if you have, like, 1,000,000 has, well, microprocessors and you would need many more lifetimes in the sun is gonna admit light at 3.4 $4,000,000,000 a year to test to exhaustively test the system. So what we do is we rather than just running a bunch of inputs on the code, we we represent that as the mathematical system and then we use proof techniques, auto automatically search for a proof and with our tools, we in about 10 minutes or able to prove all those properties of s two in the way of your intimidates. And then we apply that to pieces of s three pieces of easy to virtual ization infrastructure on. Then, uh, what we've done is we've realized that customers had a lot of questions about their networks and their policies. So, for example, they have a complicated network worldwide different different availability zones, different regions on. They want to ask. Hey, does there exist away for this machine to connect to this other machine. Oh, are you know, to do all this all SS H traffic coming in that eventually gets to my Web server, go through a bastion host, which is the best, best practice. And then we can answer that question again, using logic. So we take the representation that semantics of easy to networking the policy, the network from the customer, and then the question we're asking, expressing logic. And we throw a big through their call ifthere improver, get the answer back. And then same for policy. >> So you're analyzing policies, >> policies, networks, programs, >> networks, connections. Yeah, right. And it to the tooling is sell cova. Eso >> eso eso basically way come with We come with an approach and then we have many tools that implement the approach on different, different problems. That's how you apply Volkova all underneath. It's all uses of a kind of tool called SMT inside. So there's a south's over, uh, proves theorems about formula and proposition. A logic and SMT is sat modular theories. Those tools can prove properties of problems expressed in first order logic. And so what we do is we take the, for example, if you have a question about your policies answering, answering semantic level questions about policies is actually a piece space problem. So that's harder than NP complete. We express the question in logic and then call the silvery and they get their answer back on Marshall it back. And that's what Volkova does. So that's calling a tool called CVC four, which is which is an open source. Prove er and we wenzel Koval. We take the policy three question encoded to logic. Call a Silver and Marshall answer back. >> What's the What's the root of this? I mean, presumably there's some academic research that was done. You guys were applying it for your specific use case, But can you share with this kind of He's the origination of this. >> So the first Impey complete problem was discovered by a cook and not not me. Another cook the early seventies on. So he proved that the proposition a ll satisfy ability problem is impeccably and meanwhile, there's been a lot of research from the sixties. So Davis and Putnam, for example, I think a paper from the mid sixties where they were, we're trying to answer the question of can we efficiently solved this NP complete problem proposition will satisfy ability on that. Researchers continue. There have been a bunch of breakthroughs, and so now we're really starting to see very from. There's a big breakthrough in 2001 on, then some and then some further breakthroughs in the 5 4008 range. So what we're seeing is that the solvers air getting better and better. So there's an international competition of Let's Save, usually about 30 silvers. And there's a study recently where they took all of the winners from this competition each year 2001 5 4008 30 2002 to 2011 and compared them on the same bench marks and hardware, and the 2002 silver is able to solve 1/4 of the benchmarks in the 2011 solved practically all of them and then the the 2019 silvers, or even better. Nowadays they can take problems and logic that have many tens of millions of variables and solve them very efficiently. So we're really using the power of those underlying solvers and marshaling the questions to those to those overs, codifying thinking math. And that's the math. The hour is you gave a talk in one sessions around provable security. Kind of the title proves provable. >> What's what is that? What is that? Intel. Can you just explain that concept and sure, in the top surfaces. So, uh, uh, >> so mathematical logic. You know, it's 2000 years old, right? So and has refined Sobule, for example, made logic less of a philosophical thing and more of a mathematical thing. Uh, and and then automated reasoning was sort of developed in the sixties, where you take algorithms and apply algorithms to find proofs and mathematical logic. And then provable security is the application of automated reasoning to questions and security and compliance. So we you wanna prove absence of memory, corruption errors and C code You won't approve termination of of event handling routines that are supposed to handle security events. All of those questions, their properties of your program. And you can use these tools to automatically or uh oh, our find proofs and then check The proofs have been found manually. That's what that's >> where approvable security fix. What was the makeup of the attendee list where people dropping this where people excited was all bunch of math geeks. You have a cross section of great security people here, and they're deep dive conversations Not like reinvent this show. This is really deep security. What was some of the feedback and makeup of the attendees? >> Give you two answers because I actually gave to talks. And the and the answers are a little bit different because the subject of the talk So there was one unprovable security, which was a basically the foundation of logic And how we how Cheers since Volkova and our program, because we also prove correctness of crypto and so on. So those tools and so that was largely a, uh uh, folks who had heard about it. And we're wanting to know more, and we're and we're going to know how we're using it and trying to learn there was a second talk, which was about the application of it to compliance. So that was with Tomic, Andrew, who is the CEO of Coal Fire, one of the third party auditors that AWS uses in a lot of customers used and also Chad Wolf, who's vice president of security, focused on compliance. And so the three of us spoke about how we're using it internally within eight of us to automate, >> uh, >> certification compliance, sort of a commission on. So that crowd was really interesting mixture of people interested in automated reasoning and people interested in compliance, which are two communities you wouldn't think normally hang together. But that's sort of like chocolate and peanut butter. It turns out to be a really great application, >> and they need to work together to, because it is the world. The action is they don't get stuck in the compliance and auditing fools engineering teams emerging with old school compliance nerds. So there's a really interesting, uh, sort of dynamic to proof that has a like the perfect use casing compliance. So the problem of like proving termination of programs is undecided ble proving problems and proposition a logic is np complete as all that sounds very hard, difficult and you use dearest six to solve this problem. But the thing is that once you've found a proof replaying, the proof is linear and size of the proof, so actually you could do extremely efficiently, and that has application and compliance. So one could imagine that you have, for example, PC I hip fed ramp. You have certain controls that you want to prove that the property like, for example, within a W s. We have a control that all data dressed must be encrypted. So we are using program verification tools, too. Show that of the code base. But now, once we've run that tool that constructs a proof like Euclid founded the sectarian serum that you can package up in a file hand to an auditor. And then a very simple, easy to understand third party open source tool could replay that proof. And so that becomes audit evidence. It's a scale of total examples >> wth e engineering problem. You're solving a security at scale. The business problem. You're solving it. Yeah. His customers are struggling. Just implementing There just >> aren't enough security professionals to hire right? So the old day is, the talk explains. It's out there all on YouTube's. The people watching the show can go check it out. But I am by the way I should I should make a plug for if you Google a W s provable security. There's a Web page on eight of us that has papers and videos and lots of information, so you might wanna check that out. I can't remember what I was answering now, but >> it's got links to the academic as >> well. Oh, yes. Oh, yes. That was the point that Tommy Kendra is pointing out, as in the old days, you would do an audit would come in to be a couple minutes box that we win this box. You check a few things to be a little network. Great. But now you have machines across the world, extremely complex networks, interaction between policies, networks, crypto, etcetera. And so there's There's no way a human or even a team of human could come in and have any reasonable chance of actually deeply understanding the system. So they just sort of check some stuff and then they call it success. And these tools really allow you to actually understand the entire system buyer and you guys doing some cutting edge work, >> folks watching and want to know how math translates into the real world with all your high school kids out their parents. This is stuff you learn in school like you could be played great work. I think I think this is cutting edge. I think math and the confidence of math intersects with groups. The compliance example audited example shows that world's gonna come together with math. I think this is a big mega trend. It's gonna not eliminate the human element. It's going augment that so great stuff, its final question just randomly. And while you're here, since your math guru we're always interested, we always covering our favorite topic of Blockchain, huh? We believe that a security conference is gonna soon have a Blockchain component because because of the mutability of it, there's a lot of math behind it. So as that starts to mature certainly Facebook entering him at their own currency. Whole nother conversation you don't want to have here is bring a lot of attention. So we see the intersection of security being a supply chain problem in the future. Your thoughts on that just generally. So So the problem of proving programs is undecided, and that means that you can't build a general solution. What you're gonna have to do is look >> for niche areas like device drivers, networks, policies, AP, I used to dream crypto et cetera, and then make the tools work for that area, and you will have to be comfortable with the idea that occasionally the tools aren't gonna be able to find an answer. And so the Amazon culture of being customer obsessed and working as closely as possible with the customer has been really helpful to my community of of logic, uh, full methods, practitioners, because they were really forced to work with a customer, understand the problem. So what I've been doing is listening to the customer on finding out what the problems with concerns. They are focusing my attention on that. And I haven't yet heard of, uh, of customers asking for mathematical proof on crypto currency Blockchain sorts of stuff. But I'm I I await further and you're intrigued. Yeah, I'm s I always like mathematics, but where we have been hearing customers asked for help is for Temple. We're working on free Our toss s o i o T applications Understand the networks that are connecting up the coyote to the cloud, understanding the correctness of machine learning. So why, why So I reused. I've done some machine learning. I've constructed a model. How do I know what it does? And is it compliant? Does it respect hip fed ramp PC, i et cetera, and some other issues like that. >> There's a lot of talk in the industry about quantum computing and creating nightmares for guys like you. How much thought given that you have any thing that you can share with us? >> Yes. Oh, there's there's work in the AWS crypto team preparing for the post quantum world. So imagine Adversary has quantum computer. And so there are proposals on eight of us has a number of proposals, and we've and those proposals have been implemented. So their standards and we've our team has been doing proof on the correctness of those. So, actually, in the one of my talks, I think the talk not with Chad and Tom. I show a demo of our work to prove the correctness of someplace quantum code. >> So, Byron, thank you for coming on the inside. Congratulations on the automated reason. Good to see it put in the practice and appreciate the commentary. Thank you very much. Thank you. Here for the first inaugural security cloud security event reinforced AWS is putting on cube coverage. I'm John Fairy with Day Volonte. Thanks for watching

>> live from Boston, Massachusetts. It's the Cube covering A W s reinforce 2019 brought to you by Amazon Web service is and its ecosystem partners. >> Okay, welcome back. Everyone's two cubes Live coverage here in Boston, Massachusetts, for AWS reinforce. This is Amazon Web services Inaugural conference around Cloud security There first of what? Looks like we'll be more focused events around deep dive security to reinvent for security. But not no one's actually saying that. But it's not a summit. It's ah, branded event Reinforce. We're hearing Mark Ryland off director Office of the Sea. So at eight of us, thanks for coming back. Good to see you keep alumni. Yeah, I'm staying here before It's fun. Wait A great Shadow 80 Bucks summit in New York City Last year we talked about some of the same issues, but now you have a dedicated conference here on the feedback from the sea. So as we've talked to and the partners in the ecosystem is, it's great to have an event where they go deep dives on some of the key things that are really, really important to security. Absolutely. This is really kind of a vibe that how reinvents started, right? So reinventing was a similar thing for commercial. You're deep, not easy to us. Three here, deeper on Amazon. But with security. Yeah, security lens on some of the same issues. One thing that happened >> and kind of signal to us that we needed an event like this over the years with reinvent was consistently over the years, the security and compliance track became one of the most important tracks that was oversubscribed in overflow rooms and like, Hey, there's a signal here, right? And so, but at the same time, we wanted to be able to reach on audience. Maybe they wouldn't go to reinvent because they thought I'd say It's all the crazy Dale Ops guys were doing this cloud thing. But now, of course, they're getting the strong message in their security organizations like, Hey, we're doing cloud. Or maybe as a professional, I need to really get smart about this stuff. So it's been a nice transition from still a lot of the same people, but definitely the different crowd that's coming here and was a cross pollination between multiple and I was >> just at Public sector summit. They about cyber security from a national defense and intelligence standpoint. Obviously, threesome Carlson leads That team you got on the commercial side comes like Splunk who our data and they get into cyber. So you started to see kind of the intersection of all the kind of Amazon ecosystems kind of coming around security, where it's now part of its horizontal. It's not just these are the security vendors and partners writes pretty much everyone's kind of becoming native into thinking about security and the benefits that you guys have talk about that what Amazon has to have a framework, a posture. Yeah, they call it shared responsibility. But I get that you're sharing this with the ecosystem. Makes sense. Yeah, talk about the Amazon Web service is posture for this new security >> world. Well, the new security world is if you look at like a typical security framework like Mist 853 120 50 controls all these different things you need to worry about if you're a security professional. And so what eight obvious able to do is say, look, there's a whole bunch of these that we can take care of on your behalf. There's some that we'll do some things and you got to do some things and there's some There's still your responsibility, but we'll try to make it easy for you to do those parts. So right off the bat we can get a lot of wins from just hey, there's a lot of things will just take care of. And you could essentially delegate to us. And for the what remain, You'll take your expertise and you'll re focus it on more like applications security. There still may be some operating systems or whatever. If using virtual machine service, you still have to think about that. But even there, we'll use we have systems Manager will make it easy to do patch management, updating, et cetera. And if you're willing to go all the way to is like a lambda or some kind of a platform capability, make it super easy because all you gotta do is make sure your code is good and we'll take care of all the infrastructure automatically on your behalf so that share responsibility remains. There's a lot of things you still need to be careful about and do well, but your experts can refocus. They could be very you know like it's just a lot less to worry about it. So it's really a message for howto raise the bar for the whole community, but yet still have >> that stays online with the baby value properties, which is, you know, build stuff, ship fast, lower prices. I mazon ethos in general. But when you think about the core A. W. S what made it so great Waas you can reduce the provisioning of resource is to get something up and running. And I think that's what I'm taking away from the security peace you could say. We know Amazon Web service is really well, and we're gonna do these things. You could do that so us on them and then parts to innovate. So I get that. That's good. The other trend I want to get your reaction to is comments we've had on the Cube with si SOS and customers is a trend towards building in house coding security. Your point about Lambda some cool things air being enabled through a B s. There's a real trend of big large companies with security teams just saying, Hey, you know what? I wanna optimize my talent to code and be security focused on use cases that they care about. So you know, Andy Jazz talks about builders. You guys are about builders you got cos your customers building absolutely. Yet they don't want Tonto, but they are becoming security. So you have a builder mindset going on in the big enterprises. >> Yes, talk about that dynamic. That's a That's a really important trend. And we see that even in security organizations which historically were full of experts but not full of engineers and people that could write code. And what we're seeing now is people say, Look, I have all this expertise, but I also see that with a software defined the infrastructure and everything's in a P I. If I pair up in engineering team with a security professional team, then well, how good things will happen because the security specials will say, Gosh, I do this repetitive task all the time. Can you write code to do that like, Yeah, we can write code to do that. So now I can focus on things that require judgment instead of just more rep repetitive. So So there's a really nice synergy there, and our security customers are becoming builders as well, and they're codifying if you moment expression in code, a policy that used to be in a document. And now they write code this as well. If that policy is whatever password length or how often we rode a credentials, whatever the policy is where Icho to ensure that that actually happening. So it's a real nice confluence of security expertise with the engineering, and they're not building the full stack >> themselves. This becomes again Aki Agility piece I had one customer on was an SMS business. They imported to eight of US Cloud with three engineers, and they wrote all the Kuban aged code themselves. They could have used, you know, other things, but they wanted to make sure it's stable so they could bring in some suppliers that could add value. So, again, this is new. Used to be this way back in the old days, in House developers build the abs on the mainframe, build the APS on the mini computers and then on I went to outsourcing, so we're kind of back. The insourcing is the big trend now, >> right in with the smaller engineering team, I can do a lot that used to require so many more people with a big waterfall method and long term projects. And now I take all these powerful building blocks and put an engineering team five people or what we would call it to pizza team five or six people off to the side, given 34 weeks, and they can generate a really cool system that would have required months and not years before. So that's a big trend, and it applies across the board, including two security. >> I think there's a sea change, and I think it's clear what I like about this show is this cloud security. But it's also they have the on premises conversation, Mrs Legacy applications that have been secured and or need to be secured as they evolve. And then you got cloud native and all these things together where security has to be built in. Yeah, this is a key theme, so I want to get your thoughts on this notion of built in security from Day one. What's your what's your view on this? And how should customers start thinking >> about it? And >> what did you guys bringing to the table? Well, I think that's just a general say maturation that goes on in the industry, >> whether it's cloud or on Prem is that people realize that the old methods we used to use like, Hey, I'm gonna build a nap And then I'm gonna hand it to the security team and they're gonna put firewalls around it That's not really gonna have a good result. So security by design, having security is equal co aspect of If I'm getting doing an architecture, I look a performance. I look, it cost. I look at security. It's just part of my system designed. I don't think of it as like a bolt on afterwards, so that leads to things like, you know, Secure Dev ops and kind of integration teams through. This could be happening on premises to it's just part of I T. Modernization. But Cloud is clearly a driver as well, and cloud makes it easier because it's all programmable. So things that are still manual on premises, you can do in a more automated getting into a lot of conversations here under the covers, A lot of under the hood conversations here around >> security BC to one of the most popular service is you guys have obviously compute a big part of the mission Land, another of the feature VPC traffic flows, where mirroring was a big announcement. Like we talked about that a lot of talking about the E c two nitro. You gave a talk on that. Did you just unpacked it a little bit because this has been nuanced out there. It's out there people are interested in. What's that talk about inscription is, is in a popular conversation taking minutes? Explain your talk. Sure, So we've talked for now a year and 1/2 >> about how we've essentially rien. Imagine reinvented our virtual machine architecture, too. Go from a primarily soft defined system where you have a mainboard with memory and intel processor and all that kind of a coup treatments of a standard server. And then your virtual ization layer would run a full copy of an operating system, which we call a Dom zero privileged OS that would mediate access between the guest OS is in this and the outside world because it would maintain the device model like how do I talk to a network card? How I talked to a storage device. I talked through the hyper visor, but through also a dom zero Ah, copy of Lennox. A copy of Windows to do all that I owe. So what we just did over the past few years, we begin to take all the things we're running inside that privileged OS and move that into dedicated hardware software, harbor combination where we now have components we call nitro components their actual separate little computers that do dbs processing. They do vpc processing they do instance, storage. So at this point now, we've taken all of the components of that damn zero. We've moved it out into these You could call Cho processors. I almost think of them is like the Nitro controllers. The main processor and the Intel motherboard is a co processor where customer workloads run because the trust now is in these external all systems. And when you go to talk to the outside world from easy to now you're talking through these very trusted, very powerful co processors that do encryption. They do identity management for you. They do a lot of work that's off the main processor, but we can accelerate it. We could be more assured that it's trustworthy. It can it can protect itself from potential types of hacks that might have been exposed if that, say, an encryption key was in the and the main motherboard. Now it's not so it's a long story until one hour version and doing three minutes now. But overall we feel that we built a trustworthy system for virtual. What was the title of talk so people can find it online? So I was just called the night to architecture security implications of the night to architecture. So it's taking information that we had out there. But we're like highlighting the fact that if you're a security professional, you're gonna really like the fact that this system has it has no damn zero. It has no shell. You can't log into the system as a human being. It's impossible to log in. It's all software to find suffer driven, and all the encryption features air in these co processors so we can do like full line made encryption of 100 gigabits of network traffic. It's all encrypted like that's never been done before. Really, in the history of computing, what's the benefit of nitro architectural? Simply not shelter. More trust built into it a trusted root. That's not the main board encryption, off load and more isolation. Because even if I somehow we're toe managed to the impossible combination of facts to get sort of like ownership of that main board, I still don't have access to the outside world. From there, I have to go through a whole another layer of very secure software that mediates between the inner world of where customer were close run and the outside world where the actual cloud is. So it's just a bunch of layers that make things more secure, >> and I'm sure Outpost will have that as well. Can you waste on that? Seem to me to hear about that. Okay, Encryption, encrypt everything. Is it philosophy we heard in the keynote? You also talked about that as well. Um, encrypting traffic on the hour. I didn't talk about what that means. What was talked to you? What's the big conversation around? Encryption within a. W s just inside and outside. What's the main story there? >> There's a lot of pieces to the pie, but a big one that we were talking about this week is a pretty long term project we call Project lever. It was actually named after a ah female cryptographer. Eventually Park team that was help. You know, one of the major factors, including World War Two, are these mathematicians and cryptographers. So we we wanted to do a big scale encryption project. We had a very large scale network and we had, you know, all the features you normally have, but we wanted to make it so that we really encrypted everything when it was outside of our physical control. So we done that took a long time. Huge investment, really exciting now going forward, everything we build. So any time data that customers give to us or have traffic between regions between instances within the same region outside reaches, whenever that traffic leaves our physical control so kind of our building boundaries or gates and guards and going down the street on a fiber optic to another data center, maybe not far away or going inter continent intercontinental links are going sub oceanic links all those links. Now we encrypt all the traffic all the time. >> And what's the benefit of that? So the benefit of that is there. Still, you know, it's it's obscure, >> but there is a threat model where, you know, governments have special submarines that are known to exist that go in, sniff those transoceanic links. And potentially a bad guy could somehow get into one of those network junction points or whatever. Inspect traffic. It's not, I would say, a high risk, but it's possible now. That's a whole nother level of phishing attacks. Phishing attack, submarine You're highly motivated to sniff that line couldn't resist U. S. O. So that's now so people could feel comfortable that that protection exists and even things like here's a kind of a little bit of scare example. But we have customers that say, Look, I'm a European customer and I have a very strong sense of regional reality. I wanna be inside the European community with all my data, etcetera, and you know, what about Brexit? So now I've got all this traffic going through. A very large Internet peering point in London in London won't be part of Europe anymore according to kind of legal norms. So what are you doing in that case? Unless they Well, how about this? How about if yes, the packets are moving through London, but they're always encrypted all the time. Does that make you feel good? Yeah, that makes me feel good. I mean, I so my my notion of work as extra territorial extra additional congee modified to accept the fact that hey, if it's just cipher text, it's not quite the same as unscripted. >> People don't really like. The idea of encrypted traffic. I mean, just makes a lot of sense. Why would absolutely Why wouldn't you want to do that right now? Final question At this event, a lot of attendee high, high, high caliber people on the spectrum is from biz dab People building out the ecosystem Thio Hardcore check. He's looking under the hood to see SOS, who oversee the regime's within companies, either with the C i O or whatever had that was formed and every couple is different. But there's a lot of si SOS here to information security officers. You are in the office of the Chief Security Information officer. So what is the conversations they're having? Because we're hearing a lot of Dev ops like conversations in the security bat with a pretty backdrop about not just chest undead, but hack a phone's getting new stuff built and then moving into production operations. Little Deb's sec up So these kinds of things, we're all kind of coming together. What are you hearing from those customers inside Amazon? Because I know you guys a customer driven in the customers in the sea SOS as your customer. What are they saying? What are they asking for? So see, so's our first getting their own minds around >> this big technical transformations that are happening on dhe. They're thinking about risk management and compliance and things that they're responsible for. They've got a report to a board or a board committee say, Hey, we're doing things according to the norms of our industry or the regulated industries that we sit in. So they're building the knowledge base and the expertise and the teams that can translate from this sort of modern dev ops e thing to these more traditional frameworks like, Hey, I've got this oversight by the Securities Exchange Commission or by the banking regulators, or what have you and we have to be able to explain to them why our security posture not only is maintained, it in some ways improved in these in this new world. So they're they're challenge now is both developing their own understanding, which I think they're doing a good job at, but also kind of building this the muscle of the strength. The terminology translate between these new technologies, new worlds and more traditional frameworks that they sit within and people who give oversight over them. So you gotta risk. So there's risk committees on boards of these large publics organizations, and the risk committees don't know a lot about cloud computing. So s O they're part of what they do now is they do that translation function and they can say, Look, I've I've got assurance is based on my work that I do in the technology and my compliance frameworks that I could meet the risk profiles that we've traditionally met in other ways with this new technology. So it's it's a pretty interesting >> had translations with the C I A. Certainly in public sector, those security oriented companies, a cz well, as the other trend, they're gonna educate the boards and they're secure and not get hacked the obsolete. And then there's the innovation side of it. Yeah, we actually gotta build out. Yes. This is what we just talked about a big change for our C says. That we talk to and work with all the time is that hey, we're in engineering community now. We didn't used to write a lot of code, and now we do. We're getting strong in that way. Or else we're parting very closely with an engineering team who has dedicated teams that support our security requirements and build the tools. We need to know that things are going well from our perspective. So that's a really cool, I think, changing that. I think that is probably one >> of my favorite trends that I see because he really shows the criticality of security was pretty much all critically, only act. But having that code coding focus really shows that they're building in house use case that they care about and the fact that I can now get native network traffic. Yeah, and you guys are exposing new sets of service is with land and other things >> over the top. >> It just makes for a good environment to do these clouds. Security things. That seems to be the show >> in a nutshell. Yeah, I think that's one of the nice thing about this show. Is It's a very positive energy here. It's not like the fear and scary stuff sometimes hear it. Security conference is like a the sky's falling by my product kind of thing Here. It's much more of a collaborative like, Hey, we got some serious challenges. There's some bad guys out there. They're gonna come after us. But as a community using new tooling, new techniques, modern approaches, modernization generally like let's get rid of a lot of these crusty old systems we've never updated for 10 or 20 years. It's a positive energy, which is really exciting. Good Mark, get your insights out. So this is your wheelhouse Show. Congratulations. >> You got to ask you the question. Just take your see. So Amazon had off just as an industry participant riding this way, being involved in it. What is the most important story that needs to be told in the press? In the media that should be told what's as important. Either it's being told it, then should be amplified or not being told and be written out. What's the What's the top story? I don't think that even after all this time that you know when people >> hear public cloud computing. They still have this kind of instinctive reaction like, Oh, that sounds kind of scary or a little bit risky and, you know, way need to get to the point where those words don't elicit some sense of risk in people's minds, but rather elicit like, Oh, cool, that's gonna help me be secure instead of being a challenge. Now that's a journey, and people have to get there, and our customers who go deep, very consistently, say, And I'm sure you've had them say to you, Hey, I feel more confident in my cloud based security. Then I do my own premises security. But that's still not the kind of the initial reaction. And so were we still have a ways, a fear based mentality. Too much more >> of a >> Yeah. Modernization base like this is the modern way to get the results in the outcomes I want, and cloud is a part of that, and it doesn't not only doesn't scare me, I want to go there because it's gonna take a community as well. Yeah, Mark, thanks so much for coming back on the greatest. Be hearing great Mark Mark Riley, direct of the office of the chief information security at Amazon Web services here, sharing his inside, extracting the signal. But the top stories and most important things >> being being >> said and discussed and executed here, it reinforced on the Cube. Thanks for watching. We'll be right back with more after this short break.

>> live from Boston, Massachusetts. It's the Cube covering A W s reinforce 2019 brought to you by Amazon Web service is and its ecosystem partners. >> Okay, welcome back. Everyone keeps live coverage here in Boston. Messages of AWS reinforce That's Amazon. Webster's his first inaugural commerce around cloud security on John Kerry with David Lantz. One of the top stories here, the announced being announced here reinforced is the VPC traffic nearing and we wanted to bring in alumni and friend Mike Banner was the VP of marketing at a Vectra who specializes in networking. Welcome to the Q. We go way back. HP networking got a hot start up here so wanted to really bring you in to help unpack this VPC traffic mirroring product is probably medias announcement of everything on stage. That other stuff was general availability of security have which is great great product, Absolutely. And guard guard duty. Well, all this other stuff have it. But the VPC traffic nearing is a killer feature for a lot of reasons, absolutely. But it brings some challenges and some opportunities that might be downstream. I don't get the thoughts on what is your take on the BBC traffic nearing >> a tte. The highest level brings a lot of value because it allows you get visibility and something that's really opaque, which is the traffic within the cloud. And in the past, the way people were solving this was they had to put an agent on the workload, and nobody wants that one. It's hard to manage. You don't want dozens to hundreds or thousands of agents, and also it's going to slow things down. On third, it could be subverted. You get the advanced attacker in there. He knows how to get below that level and operated on in a way where he can hide his communication and and his behavior isn't seen. With traffic nearing that, we're getting a copy of the packet from below. The hyper visor cannot be subverted, and so we're seeing everything, and we're also not slowing down the traffic in the virtual private cloud. So it allows us to extract just the right data for a security application, which is our case, metadata and enrich it with information that's necessary for detecting threats and also of performing an investigation. >> Yeah, it was definitely the announcement that everybody has been talking about has the buzz. So from a from a partner perspective, how do you guys tie into that? What do you do? Was the value that you bring to the customer, >> So the value that we're bringing really stems from what you can do with our platform. There's two things everybody is looking to do with him at the highest level, which is detect threats and respond to threats. On the detection side, we could take the metadata that we've extracted and we've enriched. We're running through machine learning algorithms, and from there we not only get a detection, but we can correlated to the workers we're seeing it on. And so we could present much more of an incident report rather than just a security alert, saying, Hey, something bad happened over there. It's not just something bad happened, but these four bad things happen and they happen in this time sequence over this period of time, and it involved these other work looks. We can give you a sense of what the attack campaign looks like. So you get a sense of like with cancer, such as you have bad cells in your liver, but they've metastasized to these other places. Way also will keep that metadata in something we call cognito recall, which is in AWS. And it has pre built analytics and save searches so that once you get that early warning signal from cognito detect, you know exactly where to start looking for. You can peel back all the unrelated metadata, and you can look specifically at what's happened during the time of that incident. In order, perform your threat investigation and respond rapidly to that threat. >> So you guys do have a lot of machine intelligence. OK, ay, ay chops. How close are we to be able to use that guy to really identify? Detect, but begin to automate responses? We there yet eyes. It's something that people want don't want. >> We're getting close to being there. It's answer your first question, and people are sure that they want it yet. And here's some of the rationale behind it. You know, like we generally say that Aria is pretty smart, but security operations people are still the brains of the operation. There's so much human intelligence, so much contextual knowledge that a security operations person can apply to the threats that we detect. They can look at something and say, Oh, yeah, I see the user account. The service is being turned on from, you know, this particular workload. I know exactly what's happening with that. They add so much value. So we look at what we're doing is augmenting the security operations team. We're reducing their workload by taking all the mundane work and automating that and putting the right details at their fingertips so they could take action. Now there's some things that are highly repeatable that they do like to use playbooks for So we partner with companies like Phantom, which got bought by spunk, and to Mr which Palazzo Networks acquired. They've built some really good playbooks for some of those well defying situations. And there was a couple presentations on the floor that talked about those use >> cases. Fan of fan was pretty good. Solid product was built in the security hub. Suit helps nice product, but I'll get back to the VPC traffic, not smearing. It makes so much sense. It's about time. Yes, Finally they got it done. This make any sense? It wasn't done before, but I gotta ask first with the analytics, you and you said on the Q. Before network doesn't lie, >> the network is no line >> they were doesn't lie with subversion pieces of key piece. It's better be the lowest level possible. That's a great spot for the data. So totally agree. Where do you guys create Valley? Because now that everyone's got available BBC traffic mirroring How do you guys take advantage of that? What's next for you guys is that Where's the differentiation come from? Where's the value go next? >> Yeah, there's really three things that I tend to focus on. One is we enrich the metadata that we're extracting with a lot of important data that makes it. It really accelerates the threat investigation. So things like directionality, things like building a notion of what's the identity of the workload or when you're running us on prem. The device, because I P addresses changed. There's dynamic things in there, so having a sense of of consistency over a period of time is extremely valuable for performing a threat investigation so that information gets put in tow. Recall for the metadata store. If people have a data leak that they wanna have ascended to, whether it's elastic or spawn, Kafka then that is included in what we send to them and Zeke formatting use. Others eat tooling so they're not wasting any money there. And in the second piece is around the way that we build analytics. There's always, ah, a pairing of somebody from security research with the data scientist. This is the security researcher explains the tools, the tactics, the techniques of the attacker. So that way, the data scientist isn't being completely random about what features do they want to find in the network traffic. They're being really specific to what features are gonna actually pair to that tool, tactic and technique. So that way, the efficacy of the algorithm is better. We've been doing this for five plus years, and history speaks for something because some of the learning we've had is all right. In the beginning, there were maybe a couple different supervised techniques to apply. Well, now we're applying those supervised techniques with some deep learning techniques. So that way, the performance of the algorithm is actually 90% more effective than it was five years ago. >> Appreciating with software. Get the data extract the data, which the metadata, Yes, you're doing. Anyway. Now, It's more efficient, correct, low speed, No, no problems with informants in the agents you mentioned earlier. Now it's better data impact the customers. What's the What's the revelation here For the end of the day, your customer and Amazons customers through you? What do they get out of it? What's the benefit to them? >> So it's all about reducing the time to detect in the time to respond. Way had one of our fortune to 50 customers present last week at the Gardener Security Summit. Still on stage. Gentlemen from Parker Hannifin talked about how they had an incident that they got an urgent alert from from Cognito. It told him about an attack campaign. He was immediately alerted the 45 different machines that were sending data to the cloud. He automatically knew about what were the patterns of data, the volume of data. They immediately know exactly what the service is that were being used with in the cloud. They were able to respond to this and get it all under control. Listen 24 hours, but it's because they had the right data at their fingertips to make rapid decisions before there was any risk. You know what they ended up finding was it was actually a new application, but somebody had actually not followed the procedures of the organization that keeps them compliant with so many of their end users. In the end, it's saved tremendous time and money, and if that was a real breach, it would have actually prevented them from losing proprietary information. >> Well, historically, it would take 250 days to even find out that there was a breach, right? And then by then who knows what What's been exfiltrate ID? >> Yeah, we had a couple. We had a couple of firms that run Red team exercises for a living come by and they said, I said to them, Do you know who we are? And they said, Of course we know where you are. There's one tool out there, then finds us. It's victory. That's >> a That's a kind of historical on Prem. So what do you do for on Pramuk? This is all running any ws. Is it cloud only? >> It's actually both, so we know that there's a lot of companies that come here that have never owned a server, and everything's been in AWS from day one and for I t. Exactly. And for them waken run everything. We have the sensor attached to the VPC traffic nearing in AWS. We could have the brain of the cognitive platform in eight of us, you know. So for them they don't need anything on prime. There's a lot of people that are in the lift and shift mode. It can be on Prem and in eight of us, eh? So they can choose where they want the brain. And they could have sensors in both places. And we have people that are coming to this event that their hybrid cloud, they've got I t infrastructure in Azure. But they have production in eight of us and they have stuff that's on Prem. And we could meet that need to because we work with the V Top from Azure and so that we're not religious about that. It's all about giving the right data right place, reducing the time to detective respond, >> Mike, Thanks for coming and sharing the insights on the VP. Your perspective on the vpc traffic mirror appreciated. Give a quick plug for the company. What you guys working on? What's the key focus? You hiring. Just got some big funding news. Take a minute to get the plug in for electric. >> Yeah, So we've gone through several years of consecutive more than doubling in. Not in a recurring revenue. I've been really fortunate to have to be earning a lot of customer business from the largest enterprises in the world. Recently had funding $100,000,000 led by T C V out of Menlo Park. Total capitalization is over to 22 right now on the path to continue that doubling. But, you know, we've been really focusing on moving where the you know already being where the puck is going to by working with Amazon. Advance on the traffic nearing. And, you know, we know that today people are using containers in the V M environment. We know that you know where they want to go. Is more serverless on, you know, leveraging containers more. You know, we're already going in that direction. So >> great to see congratulates we've known each other for many, many years is our 10th anniversary of the Q. You were on year one. Great to know you. And congratulations. Successive victor and great announcement. Amazon gives you a tailwind. >> Thanks a lot. It's great to see your growth as well. Congratulations. >> Thanks, Mike. Mike Banning unpacking the relevance of the VPC traffic mirroring feature. >> This is kind >> of conversation we're having here. Deep conversation around stuff that matters around security and cloud security. Of course, the cubes bring any coverage from the inaugural event it reinforced for me. Ws will be right back after this short break.

>> live from Boston, Massachusetts. It's the Cube covering AWS Reinforce 2019. Brought to you by Amazon Web service is and its ecosystem partners. Welcome >> back, everyone. Day two of live coverage here in Boston, Massachusetts, for AWS Amazon Web services. Inaugural conference called Reinforce. This is a Cloud security conference, the first of its kind. It's the beginning of what we see as a new generation of shift in now new category called Cloud Security. Obviously, Cloud has been growing. Security equation is changing and evolving. I got a great guest here. Colby Alan, who's a platform architect at ZIP with based in Seattle. Great for joining us. Thanks for coming on. Thanks for having me. So we're chatting before we came on about your journey and your Dev ops chops you guys have built over there that I want to get into that just quickly explain what you guys do real quick. Set the context. >> Yes, it is on SMS text messaging provider way Specialize in toll free messaging. We also texting able landline phone numbers. Our business is kind of really split into two parts way. Have you know your traditional Sadd's application that ran runs like a sad That's where you can, you know, have the you I thio interface your landline phone number eight under number With that messaging, no, top that We run a carrier grade network. So we have direct binds into all the major carriers in the U. S. Bringing online some Canadian carriers. That's really where the power of our platform and we own the network on DSO way started Nicolo and over the last last year, which has spent nine months moving all that into Amazon and >> forget about that. So explain the architecture. You guys move yet polos with network you moved to Amazon with three people. Just classic devils. A lot of hard work, I'm sure take us through what happened. What was the old environment? And now what does it look like now? >> Yeah, so, you know, when I just started with, you know, they were interesting place. They were just starting a huge growth. And so at that point, they existed in a few data centers in the U. S. And running the empire workloads on or bare metal databases on. The problem was, there was just a scaling problem, right? I mean, we couldn't way We're looking at the type of scale we needed and trying to procure hardware. And we just couldn't physically get it fast enough with the right amount of budget. So I come from a previous place doing a job? Yes. I mean, that's kind of what I've done for a lot of years. So, you know, I convinced my boss stay here. Let's let's run the stats happen. Eight of us. So we built that ran it, launched our new version of arse as application in Amazon. And at that point, you know, our traffic skyrocketed. You know, I think last year we had somewhere to 180% growth, right? And, you know, our core infrastructure just wasn't surviving. Right is outages and problems. And so, you know, we took it and we we went to Amazon with it. And, you know, we rebuilt it all. And it was a really interesting thing, because Amazon was Luther releasing features and we were consuming them, right? Five. Siri's and Nitro came out, and we're like finally waken get performance of the networking interfaces. Then they released the D instances within ve Emmys, or like finally, our databases will survive and they can go fast enough, you know? And then we leveraging huge Aurore instances, real impact power, the back end of this thing. So you >> guys really tapped really? At the right time? You guys were growing. You saw the, you know, that scale potentially bursting. You saw the scale coming in growth coming in the company you could almost see. Okay, look, we got a plan. So you go to Amazon News Service is what's the impact on the staff has been any more people. What's been the impact on? >> Yeah, I think the big thing is the initial move. We did it for three of us. I mean, it was a lot of work. We spent a lot of time doing it. A lot of people, sleepless nights, a lot of long weekends. But now you know, we've got a really stable platform, and, you know, we were able to really continue processing our message. Growth is increased, and we know we haven't, you know, had to totally re architect things again, right? The architecture's work has grown and expanded. Stale ability has been fantastic for us. The performance, of course, is you know, some of >> the best walking commercial for eight of us, a question paper. But if you'll have that same experience, but what's interesting is you guys essentially are, in my opinion, representative of the trend that we're seeing, which is certainly in security as they catch up the devil. That's a big story here. Security now can level up with speed of the Dev ops kind of engineering philosophy and pointing, but it's it's the trend of building your own and a lot of companies. They're reinvesting in teams of people because they're close to the action and they can actually code if I quickly use cases that they know are bona fide, whether it's a low level platform service, primitive or right up into the app, using machine learning and data. So you know you have now that now you had security in there. This is where the action is and so cos I mean, I see the successful ones like you guys coming in saying You know what? Let's not boil the ocean over. Let's just solve one problem scale and then let's look at the service is that we can leverage to doom or take us through that philosophies. I think you guys were great example of that. >> So, I mean, if we touch on the security aspect, I think that that was a big thing is way. Don't run a dedicate security team. My team is the security team, right? And that was a big thing that both me and my director is. You know, we wanted the people building it to be doing the security. And, you know, the that was what was really, you know, easy with eight of us is, you know, we could turn on all these fancy features. It was just, you know, a flag and Terra formed all of a sudden way. Have encryption arrest. It's something we've never had before. So there's that. And then, you know, to the builder methodology be because we came from such a scrappy like way. Got to go fast, like we didn't have time to evaluate software bringing consultants, you know, it's so, you know, we kind of just kind of adopted that, you know, it's better for us a lot of times to kind of roll our own thing. Andan there, times where there's software that's a good fit for it. I mean, we do use some external vendors on things, and >> that's really more of a decision on the platform. But as you look at the platform engineer, you go. Okay, we gotta build here. Let's weigh No, he don't really is not me that be a core competency. Let's go look at some vendors for this, this and that. But ultimately, if you look at something that's really core, you can dig into it. And certainly with Kubernetes and with a lot of the service is coming out sas after taking eventually Cloud Native. >> Yeah, yeah, through you're you're so we're huge Criminality is 100% kubernetes everywhere, and I think that that's really been another big thing for us is you know, it's it's brought our application up a level to be able to integrate, be more reliable. I mean, you know where you used to have this external service discovery piece, and then you have your security peace. You know where kubernetes I can go deploy a container application. Describe it all at once, right? It's all in my coat config so I can audit it for our compliance sees. You know we can co to review for our compliance, sees but the same time I deploy the whole thing. I'm not. Here's this team to point the There's this other team then coming by trying to secure the app. It it's all together. >> The old way would have been kind of build it out, maybe use some software. Have all these silo teams. Yes, and that's kind of all kind of built in. >> Yeah, we kinda just opened it out, right? I mean, you know, from from arse, as teams leveraging a lot of, you know, the security features that are available to us to our core piece, which is a very different type of software, you know, is leveraging the same pieces and same type of monitoring principle. >> It's interesting, You know, the Kino. There's something people hemming and hard around, like the word Dev sec ops. I mean, I love Devon. We've been we've been part of that since day one. It's been fun to be part of it, but we saw the benefits of it. Clearly. You see, no doubt there's no debate. But when you start getting into some of the semantic definitions, go to security known feel that, by the way, is fragmented like crazy and now you get the growth of the cloud is starting to see cloud security become its own thing That's different than the on premises side. So what's your take on that? Because a lot of people are wanting their going to cloud anyway. So what's that they're saying on premise, security posturing and cloud security? In your opinion? >> Yeah, so I mean, it is drastically different. I think part of it's the tool set that's available, right? I mean, we ran data centers. I've automated data centers, but, you know, they're just not at the level of which I could do the automation in the auditing in the cloud. So I feel like I found actually, some respects makes it easier for me to do security on run security and audit security numbers. The data center. You know, I don't run a lot of tooling and a lot of things to get all the views. I need it, But there's a lot of really separate systems, you know, in the cloud you have, like this one. Nice, fundamental, a p I. That hi is a person who has to build the infrastructure can use, but it's the same a p I that I put my security had on that. Like I used to make security, right, security groups, things of that sort. It's all the same, right? I'm not having to learn five different applications has been really important for our team because, you know, my team comes from the vast majority of no true Dev ops Thio. You know, we've been upgraded from people in our knock, you know, and have them really just learned the one ecosystem >> is you don't want to fragment the team. Yeah, I don't wanna have five different skill sets, kind of >> their victims. We just We don't wanna have tools that only one person knew how to do right. We wanted people to take vacations right? And like, we don't want to have a tool that's like only only that person knows how to run it, nobody else does. And so >> that was the big thing for us. What you think about the show here, reinforce all say it's not an Amazon Webster's summit. They do the summits which assistance see a commercial version of reinventing regions. This is a branded show is obviously their cloud security going hard at it. What's your take. So far, >> I've really enjoyed it. I mean, so I've gone to some. It's I've been to reinvent for a few years spoken to reinvent once, you know? But, you know, those things were fun, but they're so big and there's so much going on, you know, it's it's refreshing to be in this reinforced conference and focus on the security side. Sitting talks were like, You have people getting into kms and like some of these really pivotal tools. Yeah, it's been really, really >> get down and dirty here. Yeah, And people talk to, you know, approachable >> without, like, having to deal with all of Amazon, right? I can focus on, like, this one little >> portion reinvent you kidding? Walked through the hallways just like >> yeah, I mean, Well, where one hotel Are you gonna >> be at that point now, right? Yeah. >> Okay. So I gotta ask you about the dev ops question. We've been commenting yesterday day Volonte, who is on his way in. He and I were talking with a lot of si sos and a lot of practitioners. And the conversation generally was security needs to catch up to Dev ops and to pay who you talk to. They may or may not believe that way. Think that to be true. We think security now has the level up with the speed of Dev ops from his agility things that are highlights. For example, you guys have What's your take on that when someone says, Hey, security's got to catch up the devil Is it really catching a prism or transformation? What's your view on this >> will be like when you say catching up like it takes a negative. You know, I don't want to be negative there on DSO. I feel like it's a transformation. That means the same thing of going from the data center as as just as an operational engineer to Amazon is, there wasn't catching up. It was you just changing everything you do and how you think. And I think you know that's That's the same thing that a lot of security people I've seen struggle with was their success. Life are the ones that have gone, and I understand that, like, >> what do you think is the most important story happening in this world security cloud security screen general that should be covered by media that should be covered by the industry that is covered him should be amplified Maur or isn't covered and should be talking about what's the what is the most important stories that should be told. >> Well, so again, you know, I'm a fundamental layer, so things to me that I are always over shouted or like, you know, just encryption, right? I mean, everybody's like train encryption on. But, you know, I feel that talks I've gone to today or deeper dives into that. I feel like, you know, the kms product of Amazon. I feel like is a very powerful product that isn't super talked about. It's been nice here because they talked about 100 like you go to reinvent you don't really see a lot of kms type things are crowded, just them. And, you know, I think it makes some of those very difficult products to run in a data center very easy. You know what you hear on the security side is unsecured, as three buckets are like. Security groups are in conflict. Configure it incorrectly. And you know, no one knows that commercial. Everyone knows that. You know Elasticsearch not turned into a new s three right compromises You choose your database of choice of public. But for me, I think it's like a part that I feel is missing with Amazon is the ease of use of like, clicking a button. And >> now I have >> full Aurora encryption by default >> and the service you can just turn on what's next for you guys. Give us a peek into some of the things they're working on. What excited about? >> So I mean, we're making Ah, big thing is, you know, so we spend a lot of building now we're kind of going back and really kind of wrapping are a lot of our compliance is so zip it is a hole has been working towards a lot of stock to type compliance, seize on things like that. So, you know, we've been working through governance and no deploying. You know, software that kind of is more actively watching our environment and alerting us or helping us make sure we're staying at C. I s type benchmark so that you know, when my boss comes to me and says, Show me that we're doing this, I can just say, Oh, here's dashboard. So we were really not like via more secure State is a big, big product that we're working with right now. We leverage cloud health and those kind of the two external vendors that we've really partnered with. And so, you know, this year's been adopting those into the system. That's when the eight of us side, you know, we still just run Cooper Nettie. So there's a lot going on in the Cuban aunties ecosystem that we're also working on. So, like, service, mash and things of that sort like, How can I take this idea of security groups in this least trust model infrastructural e up to kubernetes, which by default this kind of flattened open. And so, you know, we've been exploring envoy and sdo linker D or write our own, you know, you know, and looking through those things and and then again wrote, making more robust CCD pipeline. So container scanning vulnerability, protecting our edge way running cloudfront wife for a while. But, you know, a lot of this year's gonna be spent, you know, Evaluate Now you know, we deployed a lost about 10 and got it turned on right because it works. But diving more deeply into like some of the autumn mediations >> have a fun environment right now, is it? You can knock down some core business processes, scale them up, and then you got the toys to play with the open source front. You got kubernetes really a robust ecosystem. They're just It's a lot of fun. >> Yeah, Criminal has definitely been exciting to play with >> advice to fellow practitioners and platform engineers because, you know, you guys been successful with transmission A the best. You got your hands on a lot of cool things. You got a good view, the landscape on security side of the deaf, upside for the people out there who were like they want to jump in with a parachute open. Whatever makes you that nervous, Some people are aggressively going at it hard core. Some have cultural change issues. What's your invite? General advice to your >> fellow appears My advice is just jump in and do it right. I mean, you know, don't be afraid. I mean, we had a really fast transformation, and we failed a lot very fast, and we weren't afraid of it. I mean, you know, if we weren't failing, we weren't doing it right. You know, in my opinion, right. We had to fail a few times a year. I was gonna work. And so I think, you know, don't be scared to jump in and just build, you know, right the automation. See what it does. Run some tests against it. >> You know, it's almost like knowing what not to do is the answer. Get some testing out there, get his hands dirty. >> What's gonna work for you? What's gonna work for your business? And the only way you're going to do that is to actually do it. >> Showed up in specialized Colby. Thanks for coming and sharing the great insight. Kobe Alan, platform engineer for Zip Whip Great company here. The Cube. Bring all the action. Extracting the signal from the noise. Great insights. And here, coming from reinforced here in Boston, eight dresses. First conference around. Cloud security will be right back after this short break

>> live from Boston, Massachusetts. It's the Cube covering A W s reinforce 2019. Brought to you by Amazon Web service is and its ecosystem partners. >> Welcome back. Everyone were accused Live coverage here in Boston, Massachusetts, for AWS reinforce. First inaugural conference runs security. I'm Jeffrey. David Lot there. Next guest is Dan Hubbard, CEO of lacework. I've started at a Mountain View, California. Great to have you on. Thanks for joining us. >> Thanks. Thanks for having me. >> So, you know, reinvent was developers Reinforces. Kind of like, si SOS coding security cloud and intersecting with security. This is a new kind of show. What's your take on? >> Super impressed so far? I mean, there's about 1000 people here, you know, way have literally hundreds of demos lined up in the booth s oh, really impressed so far. First impressions. >> It's a good move for Amazon. Do. Ah, security conference. Don't you think I mean >> really smart, Really smart. It's a lot more about defending than a lot of security conference about offense and vulnerabilities and how to find kind of holes and weak cracks. This is really about how do we defend you know, our security in the cloud >> Talk about your company. Your mission? You guys air started going after a hot space. Si SOS or CEO spending Talk to They want a new breed of supplier service provider. Certainly cloud a p. I is gonna be critical in all of this. So you start to see really smart platform thinking systems, thinking around companies around the security challenge and opportunity. What? What do you guys do? Explain what you guys? >> Yes, we really believed you know, this new wave of cloud I s and pass really needs a new architecture. It's a whole new architecture from a 90 perspective. So we need a new architect from a security perspective. And the great thing about the operating model is you could do a wide set of things and then go deep in the areas that are really important. So at least work does we allow you to secure? I asked. Past service is with compliance configuration host and container security. There's one platform that kind of wraps across all of those >> different targeting developers, right? So they don't have to think about security all the time. Is that the poor thing? >> Yeah, definitely. Eso in almost every case. Security is unlocking the budget. However, Dev Ops is involved, Dev Ops is involved from an influence. But, you know, it used to be that developers would ask security for permission. Now security's going back to developers and asking for permission to security >> infrastructure. He said that with the architecture is gonna be different because the the the I t. Is changing. So cloud security needs a new architecture. One of the fundamentals of that architecture and how is it different from security on prim? >> So I think it has to be SAS. So it's gotta be delivered multi cloud from the cloud. You know, we're gonna secure the cloud. It really should be from the cloud, their business models, that should be different. It's almost always a subscription is not perpetual models. You know you're annually re occurring your revenue. You're always keeping your customers happy and you're always innovating. The pace of innovation has to be really quick because the pace of the cloud is moving at such a dramatic speed. >> So that the those kind of business oriented you know, that's kind of a different definition of architecture. Technically, is it a fundamental do over Or is it fundamentally similar? >> Wolf. You know, there's some of the tenants which are the same, you know, we need to get visibility. That's very similar. You know, we have controls needed have auditing. We need to find threats. However, the way you do it is very different. So you don't own the hardware, you don't own the racks, you don't own the network. You gotta get used to that. You gotta live above the responsibility line. You have to fit within their infrastructure. So what that means is you need to be very happy. I friendly because we're sucking a lot of data on Amazon were pulling in configuration cloudtrail data, and you'll have to be able to deploy inside their infrastructures. We support things like kubernetes things like docker or we also interoperate things like bare metal and you know, in the AM eyes themselves, what >> problem you guys solve. Every startup has that cultural doctor, and they sometimes you weave into a market and also you get visibility into into a key value proper. What's the key problem that you saw? What's the benefit >> so that the key value we solve is if you are in the cloud or migraine in the cloud. We give you compliance configuration and threat protection across all your clowns. So, irrespective of which cloud you live in or operate in, we give you one central threat detection engine and that which gives you visibility but also gives you compliance and controls into that. >> So Amazon has this, you know she had responsibility model. They're they're protecting the compute, the storage, the database and customers are responsible for the end points. The operating system, the data, etcetera, etcetera. And Amazon certainly has tools. Help them. What is fuzzy to me sometimes is you know where eight of us leaves off. Where ecosystem partners like you guys come in. You obvious have to keep moving fast to your point. Absolute. Can you help us sort of squint through that maze? >> Sure. Yeah. I mean, the easiest way that I can explain it is if you could configure it, you have to secure everything. Below is the providers responsibility. That said, there are different areas where things are kind of peeking through the responsibility lines. So what I see is a world where there's not 50 security vendors that you've bought like in premise or traditional data center, but your Inter operating with a provider. So you know, the big three providers open source and then a solution like ours. So it's more about how do we interoperate there together? But what we do is we sit actually right within your container on the host themselves with an agent, and then we suck in there a p I. So technically, it's a little bit different. >> So the threat of containers is an interesting topic, right? You're spinning him up. It makes V M v ems look like child's play. Yeah, So are you using specific techniques, toe? So the fake out the bad guys make it. You're raising the bar on them and their cost using sort of algorithms to do that spin up, spin him down. You know, like the shell game of asking you. >> What we do is we get baked right into your infrastructure every single time you deploy and run through C I c d. A new container or a new app were baked in there and what we're doing, we're looking all your applications, processes the network traffic and then we look for that no one bad and the unknown bad based off of that. >> So it's native security in the container at the point of creation. Not a not an afterthought. Correct. Yep, >> What? Your take on kubernetes landscape? Obviously, pretty much everyone's kind of consolidate around that from a de facto standard. That's good news, wouldn't it? Koen ETS does is all kinds of stateless state full applications that becomes, like service mess conversation. You got all kinds of services that could land out there, automating all these things these sources were being turned on turned off in real time. >> It's >> a log it >> all. It's incredible. I think Cos. Is the fastest growing enterprise open source project ever. You know where every customer we talked to is either in the midst of migrating migrate or just thinking about it. That said, the world is looking to go multi cloud. But most customers today have, ah, a combination of in premise bare metal am eyes kubernetes containers. What we're doing is we give you visibility into your coup Bernays infrastructure. So we talk pods, nodes, clusters, name spaces and we allow you to secure the management plane. Any communication between those So it's really critical when you're deploying those from a security perspective that you know what's happening. The ephemeral nature of it is very different from regular security to you need to answer questions like what happened for 10 minutes during this time from six months ago, and that's really hard with traditional >> tools, really are. And that's really gonna with automation plays in Talk about the journey of where your customers are going out because we're seeing a progression kind of categorically three kind of levels. I really wanted to go to the cloud. I really want to convince you that cloud every aspiration. Yeah, not realistic, but it's on their plans. Then you've got people who go out and do it gets stuck in the mud. The wheels are spinning culturally, whatever's going on and then full on cloud native hard core Dev ops, eaten glass, spit nails, just kicking ass and taking names right? So you get the leaders. People are kind of in the middle, and then people jumping in. Where do you guys see your benefit? What are some of the challenges? How do you guys >> think it's a super dynamic marketplace? Because what's happening is every big company that may not be fully cloud native, is buying companies that are cloud native. So then they become the sexy new way to deploy, and then they start figure out how to deploy their there. So one of the trains were seeing is core centralized. Security is becoming governance and tooling, and then they're distributing the security function within the AP teams themselves. And that model seems to work really well because you've got security practitioners baked within the Dev Ops team. But then you've got a governing roll with tooling, centralized tooling from there. That said, depending on the customer or the prospect, it's all over the place. You know, many sisters, you're scratching their heads saying, No, you know, I don't know what's going over the cloud guys. They've got a different group that's running it. They're trying to figure out how do I just get visibility? I know my name's you know, I'm the one they're gonna come after if there's a problem. So it's really all over the place >> for your service. So you're baking it in creatively into the container. >> Yep, it doesn't matter. >> You're aware, if you will. >> It is a matter of urine premise or not. Containers or not, we worked across all of them. >> Was that the hook for your sort of original idea? Your business plan? Your investors you've raised, I think 32,000,000. You got 70 employees. What was that hook? What attracted the investment Community >> Theory journal? Idea was, if you're deployed in the cloud and you have a breach, how do you know you had a breach? Things that happen to come and go very quickly. All the data's encrypted on the network. I don't have full visibility on the network itself. So that was the original idea. How would I go back in time kind of time machine to find out what happened then? Way originally supported eight of us and it was really about visibility within 80 bus infrastructure. Then kubernetes happened. Now the big hook really is amazing containers. Am I using kubernetes? And then how do I make sure I'm compliant and then following best practices and then that breach that breach scenario still definitely happens. Everybody tries the service before they buy it. They're almost always finding out problems along the way. >> What did kubernetes do for you guys? That made a consensus step, function, change or what you guys were doing? Was it because they had the dynamic nature of the service's was orchestration? What specifically was the benefit? >> I think the orchestration, the single management plane from a security perspective, is one of the big things. You get access to that one brain, if you will. You have access to everything. Obviously, the ephemeral workload is big that it was enforcement kubernetes with service messes. Things like pot security policies allows us to hook a P eyes in a way that you can actually write enforcement versus a firewall or some of these old school ways of killing packets. >> Yes, you got a cloud native approach. Kubernetes comes along. It's aligns with your sort of philosophy and >> architectural, and we run today's ourselves. So our entire infrastructure is based off of kubernetes. We were kubernetes user very early on, so, you know, we just take the things that we learn to our customers. >> So here's a quote from a seesaw. I won't say his or her name, but I want to get your reaction to it when talking about dealing with suppliers, looking for the new generation of like what you guys are doing you got, I would put you in the new classification of emerging suppliers. This is the message to all the suppliers in the room. I happen to be in there having a P I and don't have its suck because you eyes shifting to a p a u ie Focus is shifting to FBI focus. So we are evaluating every supplier on their eight b. I's your reaction to that? >> I absolutely agree. So there's two levels of AP eyes. One is you have to interrupt it with the guys from the providers in order to get the data properly. Right. That's a big, big component. Others, you have to have a P eyes for your consumers. You can't automate without a P I. So that's really critical. That said, I will disagree a little bit on the u X and Y aspect. If you are triaging data, it's really important that you have the right data at the right time and visualizing that data in a ways. It's pretty important. >> How real is multi cloud, in your opinion, I mean, everybody's talking about multi cloud Ah la times we've said multi cloud. It's none of us a symptom of multi vendor. But increasingly it could be a strategy in terms of your thinking about your total available market, your market opportunity. How real is it when you're conversations with Coast? >> It's very really. We were really surprised. We first started supporting eight of us, and then we had a G, C, P and Azure together. Now we have a core principle that everything we build has to be parody across all the clouds. And we had a huge uptick across G, C, P and as your very early. So we were really surprised. What we were surprised about was, it's not portable workloads. So it's not about taking one application distributed across multi cloud. That's kind of fiction. That doesn't happen very often. It's either you bought a company that's in another cloud or use a past service in another cloud, or you have just two totally disparate applications in a large company. They just happen to be in different clouds in the data's in different places. They don't need to interoperate, so it's so it's just a little different, but we're seeing kind >> of horses for courses as well, right? Some clouds may be better for data oriented. >> Here's your point early, and we've heard this in some of the sea. So conversations em and becomes a big factor because they get new teams in new culture and they might have different cloud approaches. But I totally agree with you on that. I would say I would even go more further and saying It's absolute fiction between multi Cloud because it's just got a latent seizes on the connections, whether they're direct connections are not welcome on the factor. So I've always said, and I kind of believe in I'd love to get your thoughts on. It is the workload should dictate to the infrastructure which clouded should you know, and go with one cloud for that. If it makes sense on, then use multi cloud across workloads and low can handle a better cloud. Cloud Cloud selection. Be joined by the workload. >> Yeah, it's certainly from an out >> the other way around. >> Yeah, it's certainly from application perspective. You want a silo? It, you know, probably there. I think what's interesting about a lot of the work each provider is doing in security a lot people ask. Well, you know, why don't I just use all my provider security tools. And the answer is they got some great tools. You should use those for sure, but there is a bunch of technology above that you can use. And then you got a span across multiple clouds. What you don't want is three different AP eyes for security across every single cloud. That's gonna be a major pain or >> have to stitch. And that's where you guys come in. Absolutely. >> What's your take on this show? Reinforce against inaugural show. Love to go. The knuckle shows they don't have a 2nd 1 because they were there. Yeah, reinvent you made a calm before we came on. Reinvents started out. We were there early on as well. There's developers. Yeah, it wasn't a lot of fanfare. In fact, you could wander around Andy Jazz. It wasn't crowded. It all great, great time. That was younger. Now Amazons gotten much stronger. Bigger? What's the vibe here? Is that developers for security? Is it si SOS? Is it? What's your read on the makeup and the focus of the attendees? >> So I think it's it's a little bit of a mix of both, which I think is good you know, I've met a number of developers or what I would call kind of new breed security engineers. These are engineers that arm or interested in? How does the cloud work an inter operate? And how do you secure that versus, like reverse engineering malware with assembler, which you know a lot of the other places there really about the threats? And what of the threats and how specific or those This is really a little bit more about? How do we up our game from from a security perspective in this New World order, which is really >> get plowed. Very agile, very fast, yet horizontally scalable, elastic, all the goodness of cloud Final question developers Bottom line is developers continue to code and do the things, whether it's a devil's culture of having a hack a phone and testing new things, that which is how things roll now, getting into productions hard. What's the developers impact to security? Is the trend coming out of the show that security baked in enough to think about it like how configuration management took that track and Dev Ops took that away? You mentioned that earlier you figure you can secure it yet. So similar track for security going the way of automation. What's your? >> It's a lot of automation is gonna be critical for sure. And then it's gonna be a combination of Security and Dev ops together, you know, Call it DEP SEC Ops, code security engineer. Whatever you want to call it, it's definitely a combination of both. Security people are going away, that's for sure. You know, we're still gonna need security experts. And focus is just a critical aspect about this. >> Dan, Thanks for the insight coming on here. Reinforced. Take a quick second. Give a plug for your company. What you guys looking to do? Your hiring? What's going on? The company? >> Sure lacework. We're gonna help you protect all your workloads, Your configuration. Compliance in the cloud regardless of which cloud way are hiring websites lacework dot com and way love Thio culture Their cultures great, Very fast moving very fast paced, very modern way live and breathe by the success of our customers It's a subscription business. So now we have to continue innovating and renewing. Our customers >> got smart probably to get dealing combination containers. Thanks for coming on. Your coverage here live in Boston. General David, Want to stay tuned for more live coverage after this short break