value in jobs is probably the most rewarding >>things I've ever been involved >>in And I bring that energy to the queue because the cube is where all the ideas are and where the experts are, where the people are And I think what's most exciting about the cube is that we get to talk to people who are making things happen, entrepreneurs ceo of companies, venture capitalists, people who are really on a day in and day out basis, building great companies and the technology business is just not a lot of real time live tv coverage and and the cube is a non linear tv operation. We do everything that the T. V guys on cable don't do. We do longer interviews. We asked tougher questions. We >>ask sometimes some light questions. We talked about the person and what >>they feel about it's not prompted and scripted. It's a conversation authentic and for shows that have the cube coverage and makes the show buzz that creates excitement. More importantly, it creates great content, great digital assets that can be shared instantaneously to the world. Over 31 million people have viewed the cube and that is the result of great content, great conversations and I'm so proud to be part of a Q with great team. Hi, I'm john barrier, Thanks for watching the cube boy. >>Okay, welcome back everyone cube coverage of AWS amazon web services public sector summit in person here in Washington D. C. I'm john Kerry host of the cube with Sandy carter and Lynn martin Vm ware Vice president of government education and healthcare. Great to see you both cube alumni's although she's been on since 2014 your first time in 2018 18 2018. Great to see you. Great to see you. Thanks for coming on. Yeah, thanks for having us. So VM ware and 80 of us have a huge partnership. We've covered that announcement when Andy and Pat nelson was the Ceo. Then a lots happened, a lot of growth. A lot of success. Congratulations. Thank you. What's the big news with AWS this year in >>public sector. So we just received our authorization to operate for Fed ramp high. Um and we actually have a lot of joint roadmap planning. You are kicking off our job today with the Department of Defense and I. L five for the defense customers is also in process. So um a lot of fruits of a long time of labor. So very excited, >>awesome. So explain what does the Fed ramp authority to operate mean? What is >>that all about? So I would say in a nutshell, it's really putting a commercial offering through the security protocols to support the federal government needs. Um and there's different layers of that depending on the end user customers. So Fed ramp i across this, across all the civilian and non classified workloads in the federal government. Um probably applicability for state, local government as well with the new state Gramp focus. Um Fed ramp. I will meet or exceed that. So it will be applicable across the other parts of the government as well and all operated, you know, in a controlled environment jointly. So you get the VM ware software stack on top of the platform from A W. S and all the services that is more VM >>ware, faster deployed usage, faster acceleration. >>Yeah, so I would say um today the government operates on VM ware across all of the government, state, local and federal, um some workloads are still on prem many and this will really accelerate that transformation journey to the cloud and be able to move workloads quicker onto the BMC on AWS platform without free architect in your >>application, without giving away any kind of VM World Secret because that's next week. What is the value proposition of VM ware cloud, on AWS? What is the, what is the, what is the main value proposition you guys see in the public >>sector? So I see three and then Sandy chime in their two, I would say, you know, the costs in general to operate In the Cloud vs on prem or significant savings, we've seen savings over 300% on some customers. Um the speed on the application movement I think is a >>huge >>unique benefit on BMC on AWS. So traditionally to move to native cloud, you have to really do a lot of application were to be able to move those workloads where on BMC on AWS to move them pretty fast. And it also leverages the investments that the government agencies have already made in their operational tools and things of that nature. So it's not like a full reinvestment for something new but really leveraging both the skill sets in the data center in the I. T. Shops and the tools and investments you've bought over the past. And then the third area I would say is really getting the agility and flexibility and speed of a cloud experience. >>What's your, what's your reaction to the partnership? >>You know, we were just talking uh in a survey to our customers and 67% of them said that the velocity of the migration really matters to them. And one of the things that we do really well together is migrate very quickly, so we have workloads that we've migrated that have taken you know weeks months uh as opposed to years as they go over, which is really powerful. And then also tomorrow VM ware is with us in a session on data led migration. We were talking about data earlier and VM ware cloud on Aws also helps to migrate over like sequel server, database oracle databases so that we can also leverage that data now on the cloud to make better decisions and >>real time decisions as >>well. It's been really interesting to watch the partnership and watching VM ware transform as well, not only the migrations are in play with the public sector, there's a lot of them, believe me, healthcare, you name every area. It's all, all those old systems are out there. You know, I'm talking about out there. But now with microservices and containers, you've got tansy and you got the whole cloud, native VM ware stack emerging that's going to allow customers to re factor This is a dynamic that is kind of under reported >>Migration is one thing. But I think, I think that the whole Tan Xue portfolio is one of the most interesting things going on in VM ware. And we also have some integration going on on D. M. C on AWS with tan to we don't have that pentagram. Yeah. For the government market, but it's on the road mapping plans and we have other customers And I would say, you know, some of my non federal government customers were able to move workloads in hours, not even days or weeks. There you go, literally back and forth. And very impressive on the BMC on AWS platform. So, um, as we expand things in with the Tan Xue platform is, you know, Sandy talked about this yesterday and our partners summit, Everyone's talking about containers and things like that. VM ware is doing a lot of investment around the cooper Netease plus the application migration work and things of that nature. >>I'd love to get you guys reaction to this comment because I've seen a lot of change. Obviously we're all seeing it. I've actually interviewed a bunch of aWS and VM ware customers and I would call um some of the categories skeptics the old school cloud holding the line. And then when the pandemic hit those skeptics flip over because they see the value. In fact I actually interviewed a skeptic who became an award winner who went on the record and said I love hey w I love the cloud. I was a skeptic because you saw the value the time to value. This is really a key dynamic. I know it's kind of thrown out a lot of digital transformation or I. T. Modernization but the agility and that kind of speed. It becomes the number one thing. What's your reaction to the skeptics converting? And then what happens >>next? Um So I think there's still a lot of folks in I. T. That our tree huggers or I call him several huggers uh um pick your term. And I think that um there is some concern about what their role will be. So I think one of the differences delivering cloud services to your internal constituents is really understand the business value of the applications and what that delivers from a mission perspective back to your client. And that's a shift for data center owners to really start thinking more from the customer mission perspective than or my servers running you know, do you have enough storage capacity blah blah blah. So I think that creates that skepticism and part of that's around what's my role going to be. So in the cloud transformation of a customer, there's all this old people part that becomes really the catalyst and I think the customers that have been very sad and really leverage that and then retool the business value back to the end users around the mission have done the best job. >>I mean we talk about this all the time, it's really hard to get the best debris partners together and then make it all work cloud, it becomes easier than doing it very bespoke or waterfall way >>Yeah, I have to say with the announcement yesterday, we're going to have a lot more partner with partners. So you and I have talked about this a few times where we bring partners together to work with each other. In fact, Lynn is going to go meet with one of those partners right after the interview um that want to really focus in on a couple of particular areas to really drive this and I think, you know, part of the, you know, as your re factoring or migrating VMro over the other big benefit is skills, people have really strong, these fear skills, the sand skills, >>operation >>operation tools Yeah. And so they want to preserve those, I think that's part of the beauty of doing VM ware cloud on Aws is you get to take those skills with you into the new world as well, >>you know, I was going to just ask the next question ai ops or day two operations, a big buzzword Yeah and that is essentially operation mindset, that devoPS DEVOps two is coming. Emily Freeman gave a keynote with our last event we had with with amazon public showcase revolution and devops devoPS 2.0 is coming which is now faster, security is built in the front end, so all these things are happening so now it's coming into the public sector with the GovCloud. So I have to ask you Lynn what are some of the big successes you've had with on the gulf cloudy, just Govcloud. >>So I would say we've had a lot of customers across the state local side especially um that weren't waiting for fed ramp and those customers were able to move like I mentioned this earlier and you guys just touched on it. So I think the benefit and the benefit, one of our best customers is Emmett Right? Absolutely mitt, God bless them. They've been on every cloud journey with VM ware since 2014 we moved in my three years now and talk about a skeptic. So although Mark is very revolutionary and tries new things, he was like oh who knows and literally when we moved those workloads it was minutes and the I. T shop day one there was no transformation work for them, it was literally using all the tools and things in that environment. So the progress of that and the growth of the applications that have been able to move their things. That took 2 to 3 years before we're all done within six months and really being able to expand those business values back out for the services that he delivers to the customers. So I think you'll see quite a bit across state, local federal government. You know, we have U. S. Marshals, thank them very much. They were our sponsor that we've been working with the last few years. We have a defense customer working with us around aisle five. >>Um you know, if we could also thank Coal Fire because Cold Fire is one of our joint partners talking about partner partners and they were played a critical role in helping BM We're cloud on AWS and get the fed ramp high certifications. >>They were R three p. O. We hired them for their exercise expertise with AWS as well as helping the BMR. >>Well the partnership with the war has been a really big success. Remember the naysayers when that was announced? Um it really has worked out well for you guys. Um I do want to ask you one more thing and we don't mind. Um One of the biggest challenges that you see the blockers or challenges from agencies moving to the cloud cover cloud because you know, people are always trying to get those blockers out of the way but it's an organizational culture is a process technology. What's your what's your take on that land. Um >>I think a lot does have to do with the people and the organizational history. I think somewhere you need a leader and a champion that really wants to change for good. I call Pat, used to call a tech for good. I love that. Right to really, you know, get things moving for the customers. I mean one of the things I'm most proud about supporting the government business in general though is really the focus on the mission is unparalleled, you know, in the sectors we support, you say, education or government or healthcare. Right? All three of those sectors, there's never any doubt on what that focuses. So I think the positives of it are like, how do you get into that change around that? And that could be systems, there's less what's VMC ON AWS as we mentioned, because the tools already in the environment so they know how to use it. But I do think there's a transformation on the data center teams and really becoming moving from technology to the business aspects a little bit more around the missions and things of that. >>What's interesting is that it's so, I mean, I actually love this environment even though it's kind of hard on everyone. Education and health care have been disrupted unprecedented ways and it's never gonna change back? Remember healthcare, hip data silos, silos, education don't spend on it. >>That education was the most remarkable part. Unbelievable. I started working in february before school started with one of the large cities everyone can guess and just the way they were able to pivot so fast was amazing and I don't think anybody, I think we did like five years of transformation in six months and it's never going to go back. >>I completely a great yes education. We just did a piece of work with CTS around the world and education is one of the most disrupted as you said health care and then the third one is government and all three of those are public sector. So the three most disruptive sectors or mission areas are in public sector which has created a lot of opportunity for us and our partnership to add value. I mean that's what we're all about right customer obsession working backwards from the customer and making sure that our partnership continues to add value to those customers >>while we love the tech action on the cube. Obviously we'd like to document and pontificate and talk about it. Digital revolution. Every application now is in play globally. Not just for I. T. But for society, public sector more than ever is the hottest area on the planet. >>Absolutely. And I would say that now our customers are looking at E. S. G. Environmental, they want to know what you're doing on sustainability. They want to know what you're doing for society. We just had a bid that came in and they wanted to understand our diversity plan and then open governance. They're looking for that openness. They're not just artificial intelligence but looking at explainable AI as well. So I think that we have a chance to impact environment societies and governance >>and you mentioned space earlier. Another way I talked with closure. I mean I'm an interview today too, but what's happening with space and what you can monitor disasters, understand how to deploy resources to areas that might have challenges, earthquakes or fires or other things. All new things are happening. >>Absolutely. And all that data people like to say, why are you spending money on space? There's so many problems here, but that data that comes from space is going to impact us here on earth. And so all the things that we're doing, all that data could be used with VM ware cloud on AWS as well. >>Well, you watch closely we got some space coverage coming. I got a big scoop. I'm gonna release soon about something behind the dark side of the moon on in terms of space sovereignty coming a lot of action, cybersecurity in space. That's really heavy right now. But >>aren't you glad that VMC cloud on AWS isn't hidden on the dark side of the moon. It's >>right on the congratulations. Thanks for coming on. You guys are doing great. Thanks for >>thanks for sharing. Congratulations. >>Okay, cube coverage here continues. AWS public sector summit in Washington D. C live for two days of coverage be right back. Thank you. Mhm. Mhm mm mm hmm.

>> live from Boston, Massachusetts. It's the Cube covering A W s reinforce 2019 brought to you by Amazon Web service is and its ecosystem partners. >> Hey, welcome back, everyone to Cubes. Live coverage here in Boston, Massachusetts for eight of us reinforced Amazon Web service is inaugural event around Cloud Security. I'm Jeffrey Day Volante. Two days of coverage. We're winding down Day two. We're excited to have a year in The Cube Special guest, part of Big and that one of the big announcements. Well, I think it's big. Nerdy Announcement is the automated reasoning. Byron Cook, director of the Automated Reasoning Group within AWS. Again, this is part of the team that's gonna help figure out security use automation to augment humans. Great to have you on big part of show here. Thanks very much to explain the automated reasoning group. Verner Vogel had a great block post on All things distributed applies formal verification techniques in an innovative way to cloud security and compliance for our customers. For our own there's developers. What does that mean? Your math? >> Yeah, let me try. I'll give you one explanation, and if I puzzle, you all try to explain a different way. 300 So do you know the Pythagorean Theorem? Yeah, sure, Yeah. So? So that the path I agree in theory is about all triangles that was proved in approximately B. C. It's the proof is a finite description in logic as to why it's true and holds for all possible triangles. So we're basically using This same approach is to prove properties of policies of networks of programs, for example, crypto virtualization, the storage, et cetera. So we write software. This finds proofs in mathematics and this the proofs are the same as what you could found for thuggery and should apply into >> solve problems that become these mundane tasks of checking config files, making sure things are that worries kind of that's I'll give you an example. So so that's two in which is the T. L s implementation used, for example, in history. But the large majority >> of AWS has approximately 12,000 state holding elements, so that with if you include the stack of the heat usage, so the number >> of possible >> states it could reach us to to the 12,000. And if you wanted to show that the T. L s handshake Implementation is correct or the H Mac implementation is correct. Deterministic random bit generator implementation is correct, which is what we do using conventional methods like trying to run tests on it. So you would need, if you have, like, 1,000,000 has, well, microprocessors and you would need many more lifetimes in the sun is gonna admit light at 3.4 $4,000,000,000 a year to test to exhaustively test the system. So what we do is we rather than just running a bunch of inputs on the code, we we represent that as the mathematical system and then we use proof techniques, auto automatically search for a proof and with our tools, we in about 10 minutes or able to prove all those properties of s two in the way of your intimidates. And then we apply that to pieces of s three pieces of easy to virtual ization infrastructure on. Then, uh, what we've done is we've realized that customers had a lot of questions about their networks and their policies. So, for example, they have a complicated network worldwide different different availability zones, different regions on. They want to ask. Hey, does there exist away for this machine to connect to this other machine. Oh, are you know, to do all this all SS H traffic coming in that eventually gets to my Web server, go through a bastion host, which is the best, best practice. And then we can answer that question again, using logic. So we take the representation that semantics of easy to networking the policy, the network from the customer, and then the question we're asking, expressing logic. And we throw a big through their call ifthere improver, get the answer back. And then same for policy. >> So you're analyzing policies, >> policies, networks, programs, >> networks, connections. Yeah, right. And it to the tooling is sell cova. Eso >> eso eso basically way come with We come with an approach and then we have many tools that implement the approach on different, different problems. That's how you apply Volkova all underneath. It's all uses of a kind of tool called SMT inside. So there's a south's over, uh, proves theorems about formula and proposition. A logic and SMT is sat modular theories. Those tools can prove properties of problems expressed in first order logic. And so what we do is we take the, for example, if you have a question about your policies answering, answering semantic level questions about policies is actually a piece space problem. So that's harder than NP complete. We express the question in logic and then call the silvery and they get their answer back on Marshall it back. And that's what Volkova does. So that's calling a tool called CVC four, which is which is an open source. Prove er and we wenzel Koval. We take the policy three question encoded to logic. Call a Silver and Marshall answer back. >> What's the What's the root of this? I mean, presumably there's some academic research that was done. You guys were applying it for your specific use case, But can you share with this kind of He's the origination of this. >> So the first Impey complete problem was discovered by a cook and not not me. Another cook the early seventies on. So he proved that the proposition a ll satisfy ability problem is impeccably and meanwhile, there's been a lot of research from the sixties. So Davis and Putnam, for example, I think a paper from the mid sixties where they were, we're trying to answer the question of can we efficiently solved this NP complete problem proposition will satisfy ability on that. Researchers continue. There have been a bunch of breakthroughs, and so now we're really starting to see very from. There's a big breakthrough in 2001 on, then some and then some further breakthroughs in the 5 4008 range. So what we're seeing is that the solvers air getting better and better. So there's an international competition of Let's Save, usually about 30 silvers. And there's a study recently where they took all of the winners from this competition each year 2001 5 4008 30 2002 to 2011 and compared them on the same bench marks and hardware, and the 2002 silver is able to solve 1/4 of the benchmarks in the 2011 solved practically all of them and then the the 2019 silvers, or even better. Nowadays they can take problems and logic that have many tens of millions of variables and solve them very efficiently. So we're really using the power of those underlying solvers and marshaling the questions to those to those overs, codifying thinking math. And that's the math. The hour is you gave a talk in one sessions around provable security. Kind of the title proves provable. >> What's what is that? What is that? Intel. Can you just explain that concept and sure, in the top surfaces. So, uh, uh, >> so mathematical logic. You know, it's 2000 years old, right? So and has refined Sobule, for example, made logic less of a philosophical thing and more of a mathematical thing. Uh, and and then automated reasoning was sort of developed in the sixties, where you take algorithms and apply algorithms to find proofs and mathematical logic. And then provable security is the application of automated reasoning to questions and security and compliance. So we you wanna prove absence of memory, corruption errors and C code You won't approve termination of of event handling routines that are supposed to handle security events. All of those questions, their properties of your program. And you can use these tools to automatically or uh oh, our find proofs and then check The proofs have been found manually. That's what that's >> where approvable security fix. What was the makeup of the attendee list where people dropping this where people excited was all bunch of math geeks. You have a cross section of great security people here, and they're deep dive conversations Not like reinvent this show. This is really deep security. What was some of the feedback and makeup of the attendees? >> Give you two answers because I actually gave to talks. And the and the answers are a little bit different because the subject of the talk So there was one unprovable security, which was a basically the foundation of logic And how we how Cheers since Volkova and our program, because we also prove correctness of crypto and so on. So those tools and so that was largely a, uh uh, folks who had heard about it. And we're wanting to know more, and we're and we're going to know how we're using it and trying to learn there was a second talk, which was about the application of it to compliance. So that was with Tomic, Andrew, who is the CEO of Coal Fire, one of the third party auditors that AWS uses in a lot of customers used and also Chad Wolf, who's vice president of security, focused on compliance. And so the three of us spoke about how we're using it internally within eight of us to automate, >> uh, >> certification compliance, sort of a commission on. So that crowd was really interesting mixture of people interested in automated reasoning and people interested in compliance, which are two communities you wouldn't think normally hang together. But that's sort of like chocolate and peanut butter. It turns out to be a really great application, >> and they need to work together to, because it is the world. The action is they don't get stuck in the compliance and auditing fools engineering teams emerging with old school compliance nerds. So there's a really interesting, uh, sort of dynamic to proof that has a like the perfect use casing compliance. So the problem of like proving termination of programs is undecided ble proving problems and proposition a logic is np complete as all that sounds very hard, difficult and you use dearest six to solve this problem. But the thing is that once you've found a proof replaying, the proof is linear and size of the proof, so actually you could do extremely efficiently, and that has application and compliance. So one could imagine that you have, for example, PC I hip fed ramp. You have certain controls that you want to prove that the property like, for example, within a W s. We have a control that all data dressed must be encrypted. So we are using program verification tools, too. Show that of the code base. But now, once we've run that tool that constructs a proof like Euclid founded the sectarian serum that you can package up in a file hand to an auditor. And then a very simple, easy to understand third party open source tool could replay that proof. And so that becomes audit evidence. It's a scale of total examples >> wth e engineering problem. You're solving a security at scale. The business problem. You're solving it. Yeah. His customers are struggling. Just implementing There just >> aren't enough security professionals to hire right? So the old day is, the talk explains. It's out there all on YouTube's. The people watching the show can go check it out. But I am by the way I should I should make a plug for if you Google a W s provable security. There's a Web page on eight of us that has papers and videos and lots of information, so you might wanna check that out. I can't remember what I was answering now, but >> it's got links to the academic as >> well. Oh, yes. Oh, yes. That was the point that Tommy Kendra is pointing out, as in the old days, you would do an audit would come in to be a couple minutes box that we win this box. You check a few things to be a little network. Great. But now you have machines across the world, extremely complex networks, interaction between policies, networks, crypto, etcetera. And so there's There's no way a human or even a team of human could come in and have any reasonable chance of actually deeply understanding the system. So they just sort of check some stuff and then they call it success. And these tools really allow you to actually understand the entire system buyer and you guys doing some cutting edge work, >> folks watching and want to know how math translates into the real world with all your high school kids out their parents. This is stuff you learn in school like you could be played great work. I think I think this is cutting edge. I think math and the confidence of math intersects with groups. The compliance example audited example shows that world's gonna come together with math. I think this is a big mega trend. It's gonna not eliminate the human element. It's going augment that so great stuff, its final question just randomly. And while you're here, since your math guru we're always interested, we always covering our favorite topic of Blockchain, huh? We believe that a security conference is gonna soon have a Blockchain component because because of the mutability of it, there's a lot of math behind it. So as that starts to mature certainly Facebook entering him at their own currency. Whole nother conversation you don't want to have here is bring a lot of attention. So we see the intersection of security being a supply chain problem in the future. Your thoughts on that just generally. So So the problem of proving programs is undecided, and that means that you can't build a general solution. What you're gonna have to do is look >> for niche areas like device drivers, networks, policies, AP, I used to dream crypto et cetera, and then make the tools work for that area, and you will have to be comfortable with the idea that occasionally the tools aren't gonna be able to find an answer. And so the Amazon culture of being customer obsessed and working as closely as possible with the customer has been really helpful to my community of of logic, uh, full methods, practitioners, because they were really forced to work with a customer, understand the problem. So what I've been doing is listening to the customer on finding out what the problems with concerns. They are focusing my attention on that. And I haven't yet heard of, uh, of customers asking for mathematical proof on crypto currency Blockchain sorts of stuff. But I'm I I await further and you're intrigued. Yeah, I'm s I always like mathematics, but where we have been hearing customers asked for help is for Temple. We're working on free Our toss s o i o T applications Understand the networks that are connecting up the coyote to the cloud, understanding the correctness of machine learning. So why, why So I reused. I've done some machine learning. I've constructed a model. How do I know what it does? And is it compliant? Does it respect hip fed ramp PC, i et cetera, and some other issues like that. >> There's a lot of talk in the industry about quantum computing and creating nightmares for guys like you. How much thought given that you have any thing that you can share with us? >> Yes. Oh, there's there's work in the AWS crypto team preparing for the post quantum world. So imagine Adversary has quantum computer. And so there are proposals on eight of us has a number of proposals, and we've and those proposals have been implemented. So their standards and we've our team has been doing proof on the correctness of those. So, actually, in the one of my talks, I think the talk not with Chad and Tom. I show a demo of our work to prove the correctness of someplace quantum code. >> So, Byron, thank you for coming on the inside. Congratulations on the automated reason. Good to see it put in the practice and appreciate the commentary. Thank you very much. Thank you. Here for the first inaugural security cloud security event reinforced AWS is putting on cube coverage. I'm John Fairy with Day Volonte. Thanks for watching