>> Live, from Washington, DC it's theCUBE. Covering AWS Public Sector Summit 2018. Brought to you buy Amazon Web Services and it's ecosystem partners. >> Hey, welcome back everyone. We're live here in Washington, DC with theCUBE's exclusive coverage of Amazon Web Services Public Sector Summit. I'm John Furrier with Stu Miniman. It's a huge show, it's like the reinvent for public sector and it's really booming. Our theCUBE allumnis on Josh Stella, CEO of Fugue. And Peter O'Donoghue, Vice President of Service Application Services at Unisys. You guys are back for the third time. We first interviewed you guys last year here in that reinvent, as well. Good to you back, thanks for joining us again. >> Thanks for having us back on. >> Thanks yeah, great. >> I love to connect the dots. It's almost like the trajectory. And we were talking yesterday about Cloud and how Amazon and other Cloud players, and Stew brought up a term called having experience. And then we were talking about this economies scale. This is really where people who have done it over time, have got their requisite, experience, scar tissue, and learnings. Some jump to try to deliver everything at once. You guys have been together for a while working together. What's the update on the trajectory as you guys go Cloud first? What's the status, what's goin' on? >> You guys made an announcement this week right? >> Sure, yeah, yeah. So, yeah we at Unisys are super excited to announce our new Cloud offering called Cloud Forte. And your point about takin' the lessons from experience and really embedding those into a capability, that's really what Cloud Forte is about. I think, ya know, at a very high level Cloud Forte it's got two major kind of sets of capabilities. One is like subscription services, which is around management and governance of AWS. And actually we've designed it to solve like really tricky problems, that our public sector and frankly our commercial clients are really struggling with. And the second set of services are really professional services, that allow for any need to facilitate and catalyze adoption at scale. And actually they go head on addressing some of the trickiest problems in that space, as well. >> Well, take a minute and just explain, what does the product do? What's the value proposition of this new service? >> Okay. Well, at the management and governance tier, let me tell you what the problems that it solves. I can go into all the minutiae, but I think we could be here a while right? It solves some big problems. Problem one that it solves is, commercially, public sector, and actually federal wise organizations have a tough time managing the finances of AWS Cloud consumption. Actually having the transparency and visibility, and being able to comply with the Antideficiency Act, being able to manage funding, and also being able to tie it back to contracts and contract line owners sounds trivial enough, but it's really a thorn in the side of a lot of folks really trnna adopt Cloud. I would say the second element is what we're calling our command bundle. And the command bundle really kind of, it deliberately kind of solves the... It feels the gap of the shared responsibility model. I think we all here are deeply aware of what that means. But, that's really kind of the air gap, if you will, between while AWS it supports out of the box, and quite frankly what customers need to support. So, things like, classic things like service catalog management, patch management, back up and recovery, IT operations, incident management, asset management. All those things. We've built and we've constructed basically in a flexible framework. A light weight framework that allows folks to do, to go fast. But also has that enterprise level of governance that people people expect to see from the cloud. One of the key elements of our command bundle is what Josh's organization provides, is the Fugue policy engine. So, we find that in order to provide Cloud, it's really important to be able to have those guardrails. To provide basically a nanny like supervisor to make sure that what's deployed is compliant. And actually what's deployed and what's running in production, stays compliant with security policy. So, that's really what command is all about. >> Josh, how about what's under the hood? We've had a lot of conversation on policy and automation. It's third year in on our conversations. What's going on under the hood, what's happening with the things that you guys are doing with Unisys? >> Yeah, so when we last talked they hadn't announced this yet, so we couldn't quite explain what we're working on together. But, we're working with Unisys and other organizations to provide that full automation of the entire infrastructure layer. And it's just fire and forget infrastructure on Cloud. So, one of the things we're seeing consistently is people are really starting to struggle. The markets really maturing around the need to fully automate remediation of problems, detection and remediation. Where the old model of use a monitoring solution, throws a ticket over the wall, search for the pilot tickets. You might have hours, days, weeks, where you're exposed and your data leaks. And Fugue fixes that in under a minute. So, that's what we've been workin' on together and we love the partnership because Unisys has experience in the engagement on the federal side of the market. And Fugue is baked in to just provide all that goodness. >> What's the impact of that? Because you compared kind of the old way to the new way you guys are doing. Just kind of give some categorical or anecdotal color behind what the impact is from that. What does it do, save people's lives, saves time, money. What's the impact? >> Yeah, I'll tell ya the impact and I'll describe a use case. So, we're working with another customer and they came to us and said, in our hosted environments on AWS we have over 500 events a day, where configuration has drifted. And every one of those we have to investigate. We have to come up with a plan. Then we have to execute the plan. Then we have to write a report on how it will never happen again, 500 a day. So, with Fugue, every one of those just is automatically fixed and reported within about 30 seconds to a minute. So, the impact of this is a team of three completely overwhelmed folks, who were looking to hire 10 people to try to, as their Cloud presence group, they just had to staff a larger and larger Cloud services desk. Actually the three people that they have are now on to doing other work. Because it's just automated. >> So, Peter help connect the dots for us, for your customers on the federal side because we know there's been push back. Sometimes customer, oh automation sounds great, but ah wait, on the government side I've got regulations, I've got processes, I've got hurdles that we might need to do. So, how do we get beyond those? >> Well, I think that's a great question. I would say that, so as I was talking about the Cloud Forte offering that, there's a set of offerings in the professional services domain too. We actually have our accelerated bundle, right? And actually one of the things that we, we really believe as important as folks to adopt Cloud is, in order to leverage Cloud most effectively, you really need a mind shift. So, we have like two of the legs of our offerings went around the order of chain management. And kind of making that major transformation for human capital. And actually what really good looks like is folks who actually think Cloud natively, right? So, we find the most successful clients are folks who've kind of made that leap. The other kind of dimension is is around process and process change. And we see ITIL has been super affective and has been kind of a stone wall of enterprise IT for a long time. But, we see that as folks move to the Cloud one of the strong recommendations we make and we have process offerings, is how do we renew... My management in governance process is to actually embrace more DevOps thinking, embrace more of everything as code thinking, including policy. Because what we find is, as I think you're hinting at right, is as folks move to the Cloud you can kind of have like almost a goldilocks scenario. Where, like on one hand I've taken the really heavy weight processes and tools from my data center into my thinking, and I've got now kind of a Porsche 911, but I've put donut wheels on it and I can't move very quickly, and I'm kind of frustrated with it, right? On the other extreme, I've got like the SharePoint era of 2005, 2006 where it is the wild west. It's pandemonium, and God only knows what's goin' on right there. So, what we're trynna do is is really looking for effective enterprise and having transparent governance, making sure that the great lessons learned of before are there. But, we have like a light weight extensible frame work that we have the nanny guardrails on it, so we can understand where this policy drifts. >> And the beauty of this is ya know the APIs giveth and the APIs taketh away. The APIs are why we can go so fast, but it's also why it's really easy to hurt yourself. That's what Fugue is there for. We let you go just as fast, and when can show that all those processes, like in ITIL having a CMDB, that's a side affect of running Fugue. You can query Fugue and you've got your configuration data. >> How you made them go fast, I get that. But how do you protect from breaking, what's the other half? >> Yeah, sure, so the Fugue approach, and Unisys are doing some other things on top of this. But, the Fugue approach is you cannot deploy something unless it is both correct and meets policy and compliance. >> That's the guardrails you're talking about. >> That's the guardrails. And unlike anything else, Fugue tells you exactly how you got it wrong, why, and how to fix it. So, it's not just a big no, at the end of the process. It's hey, on 147 you're not allowed to have unencrypted volumes so change that. Then once the infrastructure is provision, so it must be correct up front, once it's provisioned Fugue will never let it drift again. Again, within 30 seconds to a minute we've seen it needs changed, and we've fixed it. And what that means is... >> Intelligence. >> It is. >> You bring intelligence do it, ya fix it, again this the, this is why I love the automation whole Cloud thing. The non believers don't understand the value of this. I call them the Cloud non believers because this is just game changing. You mentioned the point about the efficiency of people not having to bulk up manual labor to lock down and just open up so many security holes. Peter, I've got to ask you, I hate to put you on the spot here, what's it like now working with Fugue? You guys have done a lot of work together. What's the outcomes? Tell us about the experience. And what is it about their solution that really helps you out? >> Okay, sure. Well, I mean I think the most obvious ya know, response there is is the fact that we've baked it in, and it's part of the solution, it's one of the core tenants, and components within our command bundle. That in itself is a major part of our strategy. What we find in our customers, ya know we do find clients actually kind of range in where they are in terms of their Cloud adoption. And we're also finding with our Cloud Forte bundle folks actually will adopt different parts of it at different times. But, actually we do find clients are very interested... Actually, I think our best clients are folks who actually have been been playing with CI/CD and they've been playing with Cloud. But, they've actually kind of started to see that the sprawl affect is actually starting to happen. And they're looking to have speed, but also security at the same time. We find that the integration of Fugue, and that just, that kind of, that insane Cloud native thinking, and this kind of like ability to speak AWS natively as a native language is really important differentially, when we bring a joint solution to our client. >> How many of the scale pieces created? Josh I want to give you that final word on your, give us an update on your business. What's goin' on? What's the value possession look like now? Obviously, automation we're believers, we just talked about that. But, where's it go next? What's up with Fugue? >> Sure, so what's up for Fugue, all kinds of things over the next quarter or two that we'll be releasing. That I can't quite talk about yet, or my product lead will kill me. But, one of the things we've put a ton of work into is around pre-building libraries of policy for our customers. So, Nist 800-53 for federal we've implemented a lot as policy now. PCI, HIPPA, all kinds of standards, so that when they purchase Fugue they just get these out of the box. It's amazing to watch somebody who's been on Cloud for a little while bring up the Fugue compose or a visualization engine, go discover all their infrastructure, and then do import HIPPA, and find all the little red dots of where they're actually, have been running wrong, fix it all in less than an hour, and not worry about it again. So, we're doing a lot of business in federal. We're doing a lot of business with partners. And we're also doing a lot of business in commercial now, mostly on the larger enterprise side. The value prop is really around that controlling sprawl over time and automated remediation. There's lots of kinds of automation that are partial, unless the system like Fugue does can fix everything, if there are any gaps in that, you're back to manual world. So, it's a kind of binary scenario, so yeah. >> You kind of never give it up, unless you can fully let go of it. >> That's right, that's right. >> Awesome, well congratulations on the part, you want to... >> Can I pull string on that though, I mean I think this another great concrete example of why we like working with you guys. It's part of our business obviously, I would say one of the major blockers getting folks to the Cloud is what do we do with ATOs that folks already have? And how do I bring those security credidations into the Cloud? So, if you think of you know where I think the industry is going to go next, is automation frameworks that allow me to quickly figure out what I inherit, what controls or balance I need to address as I move to the Cloud. But, the fact that Fugue is looking at natively kind of having as a primary citizen of their policies, this idea of those Nist controls, that's going to help provide transparency and visibility. So, that's actually going to be key part of being able to shorten the time to get to an ATO. >> Well, that certainly accelerates the discovery piece. >> Absolutely. >> Then ya kind of understand what ya have first and then you attack it with automation. >> Exactly. >> And everything seems more efficient, that's the goal right? >> Yeah, so this is why you know the true believer there's concrete reality there. Which is I can demonstrate, but I can demonstrate in real time that I'm complying all the time. I mean we've never really had that before, right? >> Yes. I mean again, this wave is coming. And love the commentary again. Public sector is very interesting, it's just being disrupted heavily and at a highly accelerated rate. You guys are doing a great job. Good to see ya Josh, Peter great to see you. CUBE coverage here in Washington, DC. Bringing all the action expected from us, I'm John Furrier with Stu Miniman. Stay with us, we'll be right back with more after this short break. (upbeat music)