(upbeat music) >> Hello, everyone, from Palo Alto, Lisa Martin here. This is The Cube's coverage of CloudNativeSecurityCon, the inaugural event. I'm here with John Furrier in studio. In Boston, Dave Vellante joins us, and our guest, Liz Rice, one of our alumni, is joining us from Seattle. Great to have everyone here. Liz is the Chief Open Source officer at Isovalent. She's also the Emeritus Chair Technical Oversight Committee at CNCF, and a co-chair of this new event. Everyone, welcome Liz. Great to have you back on theCUBE. Thanks so much for joining us today. >> Thanks so much for having me, pleasure. >> So CloudNativeSecurityCon. This is the inaugural event, Liz, this used to be part of KubeCon, it's now its own event in its first year. Talk to us about the importance of having it as its own event from a security perspective, what's going on? Give us your opinions there. >> Yeah, I think security was becoming so- at such an important part of the conversation at KubeCon, CloudNativeCon, and the TAG security, who were organizing the co-located Cloud Native Security Day which then turned into a two day event. They were doing this amazing job, and there was so much content and so much activity and so much interest that it made sense to say "Actually this could stand alone as a dedicated event and really dedicate, you know, all the time and resources of running a full conference, just thinking about cloud native security." And I think that's proven to be true. There's plenty of really interesting talks that we're going to see. Things like a capture the flag. There's all sorts of really good things going on this week. >> Liz, great to see you, and Dave, great to see you in Boston Lisa, great intro. Liz, you've been a CUBE alumni. You've been a great contributor to our program, and being part of our team, kind of extracting that signal from the CNCF cloud native world KubeCon. This event really kind of to me is a watershed moment, because it highlights not only security as a standalone discussion event, but it's also synergistic with KubeCon. And, as co-chair, take us through the thought process on the sessions, the experts, it's got a practitioner vibe there. So we heard from Priyanka early on, bottoms up, developer first. You know KubeCon's shift left was big momentum. This seems to be a breakout of very focused security. Can you share the rationale and the thoughts behind how this is emerging, and how you see this developing? I know it's kind of a small event, kind of testing the waters it seems, but this is really a directional shift. Can you share your thoughts? >> Yeah I'm just, there's just so many different angles that you can consider security. You know, we are seeing a lot of conversations about supply chain security, but there's also runtime security. I'm really excited about eBPF tooling. There's also this opportunity to talk about how do we educate people about security, and how do security practitioners get involved in cloud native, and how do cloud native folks learn about the security concepts that they need to keep their deployments secure. So there's lots of different groups of people who I think maybe at a KubeCon, KubeCon is so wide, it's such a diverse range of topics. If you really just want to focus in, drill down on what do I need to do to run Kubernetes and cloud native applications securely, let's have a really focused event, and just drill down into all the different aspects of that. And I think that's great. It brings the right people together, the practitioners, the experts, the vendors to, you know, everyone can be here, and we can find each other at a smaller event. We are not spread out amongst the thousands of people that would attend a KubeCon. >> It's interesting, Dave, you know, when we were talking, you know, we're going to bring you in real quick, because AWS, which I think is the bellweather for, you know, cloud computing, has now two main shows, AWS re:Invent and re:Inforce. Security, again, broken out there. you see the classic security events, RSA, Black Hat, you know, those are the, kind of, the industry kind of mainstream security, very wide. But you're starting to see the cloud native developer first with both security and cloud native, kind of, really growing so fast. This is a major trend for a lot of the ecosystem >> You know, and you hear, when you mention those other conferences, John you hear a lot about, you know, shift left. There's a little bit of lip service there, and you, we heard today way more than lip service. I mean deep practitioner level conversations, and of course the runtime as well. Liz, you spent a lot of time obviously in your keynote on eBPF, and I wonder if you could share with the audience, you know, why you're so excited about that. What makes it a more effective tool compared to other traditional methods? I mean, it sounds like it simplifies things. You talked about instrumenting nodes versus workloads. Can you explain that a little bit more detail? >> Yeah, so with eBPF programs, we can load programs dynamically into the kernel, and we can attach them to all kinds of different events that could be happening anywhere on that virtual machine. And if you have the right knowledge about where to hook into, you can observe network events, you can observe file access events, you can observe pretty much anything that's interesting from a security perspective. And because eBPF programs are living in the kernel, there's only one kernel shared amongst all of the applications that are running on that particular machine. So you don't- you no longer have to instrument each individual application, or each individual pod. There's no more need to inject sidecars. We can apply eBPF based tooling on a per node basis, which just makes things operationally more straightforward, but it's also extremely performant. We can hook these programs into events that typically very lightweight, small programs, kind of, emitting an event, making a decision about whether to drop a packet, making a decision about whether to allow file access, things of that nature. There's super fast, there's no need to transition between kernel space and user space, which is usually quite a costly operation from performance perspective. So eBPF makes it really, you know, it's taking the security tooling, and other forms of tooling, networking and observability. We can take these tools into the kernel, and it's really efficient there. >> So Liz- >> So, if I may, one, just one quick follow up. You gave kind of a space age example (laughs) in your keynote. When, do you think a year from now we'll be able to see, sort of, real world examples in in action? How far away are we? >> Well, some of that is already pretty widely deployed. I mean, in my keynote I was talking about Cilium. Cilium is adopted by hundreds of really big scale deployments. You know, the users file is full of household names who've been using cilium. And as part of that they will be using network policies. And I showed some visualizations this morning of network policy, but again, network policy has been around, pretty much since the early days of Kubernetes. It can be quite fiddly to get it right, but there are plenty of people who are using it at scale today. And then we were also looking at some runtime security detections, seeing things like, in my example, exfiltrating the plans to the Death Star, you know, looking for suspicious executables. And again, that's a little bit, it's a bit newer, but we do have people running that in production today, proving that it really does work, and that eBPF is a scalable technology. It's, I've been fascinated by eBPF for years, and it's really amazing to see it being used in the real world now. >> So Liz, you're a maintainer on the Cilium project. Talk about the use of eBPF in the Cilium project. How is it contributing to cloud native security, and really helping to change the dials on that from an efficiency, from a performance perspective, as well as a, what's in it for me as a business perspective? >> So Cilium is probably best known as a networking plugin for Kubernetes. It, when you are running Kubernetes, you have to make a decision about some networking plugin that you're going to use. And Cilium is, it's an incubating project in the CNCF. It's the most mature of the different CNIs that's in the CNCF at the moment. As I say, very widely deployed. And right from day one, it was based on eBPF. And in fact some of the people who contribute to the eBPF platform within the kernel, are also working on the Cilium project. They've been kind of developed hand in hand for the last six, seven years. So really being able to bring some of that networking capability, it required changes in the kernel that have been put in place several years ago, so that now we can build these amazing tools for Kubernetes operators. So we are using eBPF to make the networking stack for Kubernetes and cloud native really efficient. We can bypass some of the parts of the network stack that aren't necessarily required in a cloud native deployment. We can use it to make these incredibly fast decisions about network policy. And we also have a sub-project called Tetragon, which is a newer part of the Cilium family which uses eBPF to observe these runtime events. The things like people opening a file, or changing the permissions on a file, or making a socket connection. All of these things that as a security engineer you are interested in. Who is running executables who is making network connections, who's accessing files, all of these operations are things that we can observe with Cilium Tetragon. >> I mean it's exciting. We've chatted in the past about that eBPF extended Berkeley Packet Filter, which is about the Linux kernel. And I bring that up Liz, because I think this is the trend I'm trying to understand with this event. It's, I hear bottoms up developer, developer first. It feels like it's an under the hood, infrastructure, security geek fest for practitioners, because Brian, in his keynote, mentioned BIND in reference the late Dan Kaminsky, who was, obviously found that error in BIND at the, in DNS. He mentioned DNS. There's a lot of things that's evolving at the silicone, kernel, kind of root levels of our infrastructure. This seems to be a major shift in focus and rightfully so. Is that something that you guys talk about, or is that coincidence, or am I just overthinking this point in terms of how nerdy it's getting in terms of the importance of, you know, getting down to the low level aspects of protecting everything. And as we heard also the quote was no software secure. (Liz chuckles) So that's up and down the stack of the, kind of the old model. What's your thoughts and reaction to that? >> Yeah, I mean I think a lot of folks who get into security really are interested in these kind of details. You know, you see write-ups of exploits and they, you know, they're quite often really involved, and really require understanding these very deep detailed technical levels. So a lot of us can really geek out about the details of that. The flip side of that is that as an application developer, you know, as- if you are working for a bank, working for a media company, you're writing applications, you shouldn't have to be worried about what's happening at the kernel level. This might be kind of geeky interesting stuff, but really, operationally, it should be taken care of for you. You've got your work cut out building business value in applications. So I think there's this interesting, kind of dual track going on almost, if you like, of the people who really want to get involved in those nitty gritty details, and understand how the underlying, you know, kernel level exploits maybe working. But then how do we make that really easy for people who are running clusters to, I mean like you said, nothing is ever secure, but trying to make things as secure as they can be easily, and make things visual, make things accessible, make things, make it easy to check whether or not you are compliant with whatever regulations you need to be compliant with. That kind of focus on making things usable for the platform team, for the application developers who deliver apps on the platform, that's the important (indistinct)- >> I noticed that the word expert was mentioned, I mentioned earlier with Priyanka. Was there a rationale on the 72 sessions, was there thinking around it or was it kind of like, these are urgent areas, they're obvious low hanging fruit. Was there, take us through the selection process of, or was it just, let's get 72 sessions going to get this (Liz laughs) thing moving? >> No, we did think quite carefully about how we wanted to, what the different focus areas we wanted to include. So we wanted to make sure that we were including things like governance and compliance, and that we talk about not just supply chain, which is clearly a very hot topic at the moment, but also to talk about, you know, threat detection, runtime security. And also really importantly, we wanted to have space to talk about education, to talk about how people can get involved. Because maybe when we talk about all these details, and we get really technical, maybe that's, you know, a bit scary for people who are new into the cloud native security space. We want to make sure that there are tracks and content that are accessible for newcomers to get involved. 'Cause, you know, given time they'll be just as excited about diving into those kind of kernel level details. But everybody needs a place to start, and we wanted to make sure there were conversations about how to get started in security, how to educate other members of your team in your organization about security. So hopefully there's something for everyone. >> That education piece- >> Liz, what's the- >> Oh sorry, Dave. >> What the buzz on on AI? We heard Dan talk about, you know, chatGPT, using it to automate spear phishing. There's always been this tension between security and speed to market, but CISOs are saying, "Hey we're going to a zero trust architecture and that's helping us move faster." Will, in your, is the talk on the floor, AI is going to slow us down a little bit until we figure it out? Or is it actually going to be used as an offensive defensive tool if I can use that angle? >> Yeah, I think all of the above. I actually had an interesting chat this morning. I was talking with Andy Martin from Control Plane, and we were talking about the risk of AI generated code that attempts to replicate what open source libraries already do. So rather than using an existing open source package, an organization might think, "Well, I'll just have my own version, and I'll have an AI write it for me." And I don't, you know, I'm not a lawyer so I dunno what the intellectual property implications of this will be, but imagine companies are just going, "Well you know, write me an SSL library." And that seems terrifying from a security perspective, 'cause there could be all sorts of very slightly different AI generated libraries that pick up the same vulnerabilities that exist in open source code. So, I think we're going to go through a pretty interesting period of vulnerabilities being found in AI generated code that look familiar, and we'll be thinking "Haven't we seen these vulnerabilities before? Yeah, we did, but they were previously in handcrafted code and now we'll see the same things being generated by AI." I mean, in the same way that if you look at an AI generated picture and it's got I don't know, extra fingers, or, you know, extra ears or something that, (Dave laughs) AI does make mistakes. >> So Liz, you talked about the education, the enablement, the 72 sessions, the importance of CloudNativeSecurityCon being its own event this year. What are your hopes and dreams for the practitioners to be able to learn from this event? How do you see the event as really supporting the growth, the development of the cloud native security community as a whole? >> Yeah, I think it's really important that we think of it as a Cloud Native Security community. You know, there are lots of interesting sort of hacker community security related community. Cloud native has been very community focused for a long time, and we really saw, particularly through the tag, the security tag, that there was this growing group of people who were, really wanted to work at that intersection between security and cloud native. And yeah, I think things are going really well this week so far, So I hope this is, you know, the first of many additions of this conference. I think it will also be interesting to see how the balance between a smaller, more focused event, compared to the giant KubeCon and cloud native cons. I, you know, I think there's space for both things, but whether or not there will be other smaller focus areas that want to stand alone and justify being able to stand alone as their own separate conferences, it speaks to the growth of cloud native in general that this is worthwhile doing. >> Yeah. >> It is, and what also speaks to, it reminds me of our tagline here at theCUBE, being able to extract the signal from the noise. Having this event as a standalone, being able to extract the value in it from a security perspective, that those practitioners and the community at large is going to be able to glean from these conversations is something that will be important, that we'll be keeping our eyes on. >> Absolutely. Makes sense for me, yes. >> Yeah, and I think, you know, one of the things, Lisa, that I want to get in, and if you don't mind asking Dave his thoughts, because he just did a breaking analysis on the security landscape. And Dave, you know, as Liz talking about some of these root level things, we talk about silicon advances, powering machine learning, we've been covering a lot of that. You've been covering the general security industry. We got RSA coming up reinforced with AWS, and as you see the cloud native developer first, really driving the standards of the super cloud, the multicloud, you're starting to see a lot more application focus around latency and kind of controlling that, These abstraction layer's starting to see a lot more growth. What's your take, Dave, on what Liz and- is talking about because, you know, you're analyzing the horses on the track, and there's sometimes the old guard security folks, and you got open source continuing to kick butt. And even on the ML side, we've been covering some of these foundation models, you're seeing a real technical growth in open source at all levels and, you know, you still got some proprietary machine learning stuff going on, but security's integrating all that. What's your take and your- what's your breaking analysis on the security piece here? >> I mean, to me the two biggest problems in cyber are just the lack of talent. I mean, it's just really hard to find super, you know, deep expertise and get it quickly. And I think the second is it's just, it's so many tools to deal with. And so the architecture of security is just this mosaic and a mess. That's why I'm excited about initiatives like eBPF because it does simplify things, and developers are being asked to do a lot. And I think one of the other things that's emerging is when you- when we talk about Industry 4.0, and IIoT, you- I'm seeing a lot of tools that are dedicated just to that, you know, slice of the world. And I don't think that's the right approach. I think that there needs to be a more comprehensive view. We're seeing, you know, zero trust architectures come together, and it's going to take some time, but I think that you're going to definitely see, you know, some rethinking of how to architect security. It's a game of whack-a-mole, but I think the industry is just- the technology industry is doing a really really good job of, you know, working hard to solve these problems. And I think the answer is not just another bespoke tool, it's a broader thinking around architectures and consolidating some of those tools, you know, with an end game of really addressing the problem in a more comprehensive fashion. >> Liz, in the last minute or so we have your thoughts on how automation and scale are driving some of these forcing functions around, you know, taking away the toil and the muck around developers, who just want stuff to be code, right? So infrastructure as code. Is that the dynamic here? Is this kind of like new, or is it kind of the same game, different kind of thing? (chuckles) 'Cause you're seeing a lot more machine learning, a lot more automation going on. What's, is that having an impact? What's your thoughts? >> Automation is one of the kind of fundamental underpinnings of cloud native. You know, we're expecting infrastructure to be written as code, We're expecting the platform to be defined in yaml essentially. You know, we are expecting the Kubernetes and surrounding tools to self-heal and to automatically scale and to do things like automated security. If we think about supply chain, you know, automated dependency scanning, think about runtime. Network policy is automated firewalling, if you like, for a cloud native era. So, I think it's all about making that platform predictable. Automation gives us some level of predictability, even if the underlying hardware changes or the scale changes, so that the application developers have something consistent and standardized that they can write to. And you know, at the end of the day, it's all about the business applications that run on top of this infrastructure >> Business applications and the business outcomes. Liz, we so appreciate your time talking to us about this inaugural event, CloudNativeSecurityCon 23. The value in it for those practitioners, all of the content that's going to be discussed and learned, and the growth of the community. Thank you so much, Liz, for sharing your insights with us today. >> Thanks for having me. >> For Liz Rice, John Furrier and Dave Vellante, I'm Lisa Martin. You're watching the Cube's coverage of CloudNativeSecurityCon 23. (electronic music)

(upbeat music) >> Hello, welcome everyone to "theCUBE" presentation of the AWS Startup Showcase, this is Season Two, Episode Four of the ongoing series covering exciting startups from the AWS ecosystem. Here to talk about Cyber Security. I'm your host John Furrier here joined by two great "CUBE" alumnus, Liz Rice who's the chief open source officer at Isovalent, and Mark Nunnikhoven who's the distinguished cloud strategist at Lacework. Folks, thanks for joining me today. >> Hi. Pleasure. >> You're in the U.K. Mark, welcome back to the U.S, I know you were overseas as well. Thanks for joining in this panel to talk about set the table for the Cybersecurity Showcase. You guys are experts out in the field. Liz we've had many conversations with the rise of open source, and all the innovations coming from out in the open source community. Mark, we've been going and covering the events, looking at all the announcements we're kind of on this next generation security conversation. It's kind of a do over in progress, happening every time we talk security in the cloud, is what people are are talking about. Amazon Web Services had reinforced, which was more of a positive vibe of, Hey, we're all on it together. Let's participate, share information. And they talk about incidents, not breaches. And then, you got Black Hat just happened, and they're like, everyone's getting hacked. It's really interesting as we report that. So, this is a new market that we're in. People are starting to think differently, but still have to solve the same problems. How do you guys see the security in the cloud era unfolding? >> Well, I guess it's always going to be an arms race. Isn't it? Everything that we do to defend cloud workloads, it becomes a new target for the bad guys, so this is never going to end. We're never going to reach a point where everything is completely safe. But I think there's been a lot of really interesting innovations in the last year or two. There's been a ton of work looking into the security of the supply chain. There's been a ton of new tooling that takes advantage of technology that I'm really involved with and very excited about called eBPF. There's been a continuation of this new generation of tooling that can help us observe when security issues are happening, and also prevent malicious activities. >> And it's on to of open source activity. Mark, scale is a big factor now, it's becoming a competitive advantage on one hand. APIs have made the cloud great. Now, you've got APIs being hacked. So, all the goodness of cloud has been great, but now we've got next level scale, it's hard to keep up with everything. And so, you start to see new ways of doing things. What's your take? >> Yeah, it is. And everything that's old is new again. And so, as you start to see data and business workloads move into new areas, you're going to see a cyber crime and security activity move with them. And I love, Liz calling out eBPF and open source efforts because what we've really seen to contrast that sort of positive and negative attitude, is that as more people come to the security table, as more developers, as more executives are aware, and the accessibility of these great open source tools, we're seeing that shift in approach of like, Hey, we know we need to find a balance, so let's figure out where we can have a nice security outcome and still meet our business needs, as opposed to the more, let's say to be polite, traditional security view that you see at some other events where it's like, it's this way or no way. And so, I love to see that positivity and that collaboration happening. >> You know, Liz, this brings up a good point. We were talking at our Super Cloud Event we had here when we were discussing the future of how cloud's emerging. One of the conversations that Adrian Cockcroft brought up, who's now retired from AWS, former with Netflix. Adrian being open source fan as well. He was pointing out that every CIO or CISO will buy an abstraction layer. They love the dream. And vendors sell the dream, so to speak. But the reality it's not a lot of uptake because it's complex, And there's a lot of non-standard things per vendor. Now, we're in an era where people are looking for some standardization, some clean, safe ways to deploy. So, what's the message to CSOs, and CIOs, and CXOs out there around eBPF, things like that, that are emerging? Because it's almost top down, was the old way, now as bottoms up with open source, you're seeing the shift. I mean, it's complete flipping the script of how companies are buying? >> Yeah. I mean, we've seen with the whole cloud native movement, how people are rather than having like ETF standards, we have more of a defacto collaborative, kind of standardization process going on. So, that things like Kubernetes become the defacto standard that we're all using. And then, that's helping enterprises be able to run their workloads in different clouds, potentially in their own data centers as well. We see things like EKS anywhere, which is allowing people to run their workloads in their data center in exactly the same way as they're running it in AWS. That sort of leveling of the playing field, if you like, can help enterprises apply the same tooling, and that's going to always help with security if you can have a consistent approach wherever you are running your workload. >> Well, Liz's take a minute to explain eBPF. The Berkeley packet filtering technology, people know from Trace Dumps and whatnot. It's kind of been around for a while, but what is it specifically? Can you take a minute to explain eBPF, and what does that mean for the customer? >> Yeah. So, you mentioned the packet filtering acronym. And honestly, these days, I tell people to just forget that, because it means so much more for. What eBPF allows you to do now, is to run custom programs inside the kernel. So, we can use that to change the way that the kernel behaves. And because the kernel has visibility over every process that's running across a machine, a virtual machine or a bare metal machine, having security tooling and observability tooling that's written using eBPF and sitting inside the kernel. It has this great perspective and ability to observe and secure what's happening across that entire machine. This is like a step change in the capabilities really of security tooling. And it means we don't have to rely on things like kernel modules, which traditionally people have been quite worried about with good reason. eBPF is- >> From a vulnerability standpoint, you mean, right? From a reliability. >> From a vulnerability standpoint, but even just from the point of view that kernel modules, if they have bugs in them, a bug in the kernel will bring the machine to a halt. And one of the things that's different with eBPF, is eBPF programs go through a verification process that ensures that they're safe to run that, but happens dynamically and ensures that the program cannot crash, will definitely run to completion. All the memory access is safe. It gives us this very sort of reassuring platform to use for building these kernel-based tools. >> And what's the bottom line for the customer and the benefit to the organization? >> I think the bottom line is this new generation of really powerful tools that are very high performance. That have this perspective across the whole set of workloads on a machine. That don't need to rely on things like a CCAR model, which can add to a lot of complexity that was perfectly rational choice for a lot of security tools and observability tools. But if you can use an abstraction that lives in the kernel, things are much more efficient and much easier to deploy. So, I think that's really what that enterprise is gaining, simpler to deploy, easier to manage, lower overhead set of tools. >> That's the dream they want. That's what they want. Mark, this is whether the trade offs that comes up. We were talking about the supercloud, and all kinds. Even at AWS, you're going to have supercloud, but you got super hackers as well. As innovation happens on one side, the hackers are innovating on the other. And you start to see a lot of advances in the lower level, AWS with their Silicon and strategies are continuing to happen and be stronger, faster, cheaper, better down the lower levels at the network lay. All these things are innovating, but this is where the hackers are going too, right? So, it's a double edge sword? >> Yeah, and it always will be. And that's the challenge of technology, is sort of the advancement for one, is an advancement for all. But I think, while Liz hit the technical aspects of the eBPF spot on, what I'm seeing with enterprises, and in general with the market movement, is all of those technical advantages are increasing the confidence in some of this security tooling. So, the long sort of anecdote or warning in security has always been things like intrusion prevention systems where they will look at network traffic and drop things they think bad. Well, for decades, people have always deployed them in detect-only mode. And that's always a horrible conversation to have with the board saying, "Well, I had this tool in place that could have stopped the attack, but I wasn't really confident that it was stable enough to turn on. So, it just warned me that it had happened after the fact." And with the stability and the performance that we're seeing out of things based on technologies like eBPF, we're seeing that confidence increase. So, people are not only deploying this new level of tooling, but they're confident that it's actually providing the security it promised. And that's giving, not necessarily a leg up, but at least that level of parody with that push forward that we're seeing, similar on the attack side. Because attackers are always advancing as well. And I think that confidence and that reliability on the tooling, can't be underestimated because that's really what's pushing things forward for security outcomes. >> Well, one of the things I want get your both perspective on real quick. And you kind of segue into this next set of conversations, is with DevOps success, Dev and Ops, it's kind of done, right? We're all happy. We're seeing DevOps being so now DevSecOps. So, CSOs were like kind of old school. Buy a bunch of tools, we have a vendor. And with cloud native, Liz, you mentioned this earlier, accelerating the developers are even driving the standards more and more. So, shifting left is a security paradigm. So, tooling, Mark, you're on top of this too, it's tooling versus how do I organize my team? What are the processes? How do I keep the CICD pipeline going, higher velocity? How can I keep my app developers programming faster? And as Adrian Cockcroft said, they don't really care about locking, they want to go faster. It's the ops teams that have to deal with everything. So, and now security teams have to deal with the speed and velocity. So, you're seeing a new kind of step function, ratchet game where ops and security teams who are living DevOps, are still having to serve the devs, and the devs need more help here. So, how do you guys see that dynamic in security? Because this is clearly the shift left's, cloud native trend impacting the companies. 'Cause now it's not just shifting left for developers, it has a ripple effect into the organization and the security posture. >> We see a lot of organizations who now have what they would call a platform team. Which is something similar to maybe what would've been an ops team and a security team, where really their role is to provide that platform that developers can use. So, they can concentrate on the business function that they don't have to really think about the underlying infrastructure. Ideally, they're using whatever common definition for their applications. And then, they just roll it out to a cloud somewhere, and they don't have to think about where that's operating. And then, that platform team may have remit that covers, not just the compute, but also the networking, the common set of tooling that allows people to debug their applications, as well as securing them. >> Mark, this is a big discussion because one, I love the team, process collaboration. But where's the team? We've got a skills gap going on too, right? So, in all this, there's a lot of action happening. What's your take on this dynamic of tooling versus process collaboration for security success? >> Yeah, it's tough. And I think what we're starting to see, and you called it out spot on, is that the developers are all about dynamic change and rapid change, and operations, and security tend to like stability, and considered change in advance. And the business needs that needle to be threaded. And what we're seeing is sort of, with these new technologies, and with the ideas of finally moving past multicloud, into, as you guys call supercloud, which I absolutely love is a term. Let's get the advantage of all these things. What we're seeing, is people have a higher demand for the outputs from their tooling, and to find that balance of the process. I think it's acknowledged now that you're not going to have complete security. We've gotten past that, it's not a yes or no binary thing. It's, let's find that balance in risk. So, if we are deploying tooling, whether that's open source, or commercial, or something we built ourselves, what is the output? And who is best to take action on that output? And sometimes that's going to be the developers, because maybe they can just fix their architecture so that it doesn't have a particular issue. Sometimes that's going to be those platform teams saying like, "Hey, this is what we're going to apply for everybody, so that's a baseline standard." But the good news, is that those discussions are happening. And I think people are realizing that it's not a one size-fits-all. 10 years ago was sort of like, "Hey, we've got a blueprint and everyone does this." That doesn't work. And I think that being out in the open, really helps deliver these better outcomes. And because it isn't simple, it's always going to be an ongoing discussion. 'Cause what we decide today, isn't going to be the same thing in a week from now when we're sprint ahead, and we've made a whole bunch of changes on the platform and in our code. >> I think the cultural change is real. And I think this is hard for security because you got so much current action happening that's really important to the business. That's hard to just kind of do a reset without having any collateral damage. So, you kind of got to mitigate and manage all the current situation, and then try to build a blueprint for the future and transform into a kind of the next level. And it kind of reminds me of, I'm dating myself. But back in the days, you had open source was new. And the common enemy was proprietary, non-innovative old guard, kind of mainframe mini computer kind of proprietary analysis, proprietary everything. Here, there is no enemy. The clouds are doing great, right? They're leaning in open source is at all time high and not stopping, it's it's now standard. So, open is not a rebel. It's not the rebel anymore, it's the standard. So, you have the innovation happening in open source, Liz, and now you have large scale cloud. And this is a cultural shift, right? How people are buying, evaluating product, and implementing solutions. And I when I say new, I mean like new within the decades or a couple decades. And it's not like open source is not been around. But like we're seeing new things emerge that are pretty super cool in the sense that you have projects defining standards, new things are emerging. So, the CIO decision making process on how to structure teams and how to tackle security is changing. Why IT department? I mean, just have a security department and a Dev team. >> I think the fact that we are using so much more open source software is a big part of this cultural shift where there are still a huge ecosystem of vendors involved in security tools and observability tools. And Mark and I both represent vendors in those spaces. But the rise of open source tools, means that you can start with something pretty powerful that you can grow with. As you are experimenting with the security tooling that works for you, you don't have to pay a giant sum to get a sort of black box. You can actually understand the open source elements of the tooling that you are going to use. And then build on that and get the enterprise features when you need those. And I think that cultural change makes it much easier for people to work security in from the get go, and really, do that shift left that we've been talking about for the last few years. >> And I think one of the things to your point, and not only can you figure out what's in the open source code, and then build on top of it, you can also leave it too. You can go to something better, faster. So, the switching costs are a lot lower than a lock in from a vendor, where you do all the big POCs and the pilots. And, Mark, this is changing the game. I mean, I would just be bold enough to say, IT is going to be irrelevant in the sense of, if you got DevOps and it works, and you got security teams, do you really need IT 'cause the DevOps is the IT? So, if everyone goes to the cloud operations, what does IT even mean? >> Yeah, and it's a very valid point. And I think what we're seeing, is where IT is still being successful, especially in large companies, is sort of the economy of scale. If you have enough of the small teams doing the same thing, it makes sense to maybe take one tool and scale it up because you've got 20 teams that are using it. So, instead of having 20 teams run it, you get one team to run it. On the economic side, you can negotiate one contract if it's a purchase tool. There is still a place for it, but I think what we're seeing and in a very positive way, is that smaller works better when it comes to this. Because really what the cloud has done and what open source continues to do, is reduce the barrier to entry. So, a team of 10 people can build something that it took a 1000 people, a decade ago. And that's wonderful. And that opens up all these new possibilities. We can work faster. But we do need to rethink it at reinforce from AWS. They had a great track about how they're approaching it from people side of things with their security champion's idea. And it's exactly about this, is embedding high end security talent in the teams who are building it. So, that changes the central role, and the central people get called in for big things like an incident response, right? Or a massive auditor reviews. But the day-to-day work is being done in context. And I think that's the real key, is they've got the context to make smarter security decisions, just like the developers and the operational work is better done by the people who are actually working on the thing, as opposed to somebody else. Because that centralized thing, it's just communication overhead most of the time. >> Yeah. I love chatting with you guys because here's are so much experts on the field. To put my positive hat on around IT, remember the old argument of, "Oh, automation's, technology's going to kill the bank teller." There's actually more tellers now than ever before. So, the ATM machine didn't kill that. So, I think IT will probably reform from a human resource perspective. And I think this is kind of where the CSO conversation comes full circle, Liz and Mark, because, okay, let's assume that this continues the trajectory to open source, DevOps, cloud scale, hybrid. It's a refactoring of personnel. So, you're going to have DevOps driving everything. So, now the IT team becomes a team. So, most CSOs we talk to are CXOs, is how do I deploy my teams? How do I structure things, my investment in people, and machines and software in a way that I get my return? At the end of the day, that's what they live for, and do it securely. So, this is the CISO's kind of thought process. How do you guys react to that? What's the message to CISOs? 'Cause they have a lot of companies to look at here. And in the marketplace, they got to spend some money, they got to get a return, they got to reconfigure. What's your advice? Liz, what's your take? Then we'll go to Mark. >> That's a really great question. I think cloud skills, cloud engineering skills, cloud security skills have never been more highly valued. And I think investing in training people to understand cloud that there are tons of really great resources out there to help ramp people up on these skills. The CNCF, AWS, there's tons of organizations who have really great courses and exams, and things that people can do to really level up their skills, which is fantastic right from a grassroots level, through to the most widely deployed global enterprise. I think we're seeing a lot of people are very excited, develop these skills. >> Mark, what's your take for the CSO, the CXO out there? They're scratching their head, they're going, "Okay, I need to invest. DevOps is happening. I see the open source, I'm now got to change over. Yeah, I lift and shift some stuff, now I got to refactor my business or I'm dead." What's your advice? >> I think the key is longer term thinking. So, I think where people fell down previously, was, okay, I've got money, I can buy tools, roll 'em out. Every tool you roll out, has not just an economic cost, but a people cost. As Liz said, those people with those skills are in high demand. And so, you want to make sure that you're getting the most value out of your people, but your tooling. So, as you're investing in your people, you will need to roll out tools. But they're not the answer. The answer is the people to get the value out of the tools. So, hold your tools to a higher standard, whether that's commercial, open source, or something from the CSP, to make sure that you're getting actionable insights and value out of them that your people can actually use to move forward. And it's that balance between the two. But I love the fact that we're finally rotating back to focus more on the people. Because really, at the end of the day, that's what's going to make it all work. >> Yeah. The hybrid work, people processes. The key, the supercloud brings up the conversation of where we're starting to see maturation into OPEX models where CapEx is a gift from the clouds. But it's not the end of bilk. Companies are still responsible for their own security. At the end of the day, you can't lean on AWS or Azure. They have infrastructure and software, but at the end of the day, every company has to maintain their own. Certainly, with hybrid and edge coming, it's here. So, this whole concept of IT, CXO, CIO, CSO, CSO, I mean, this is hotter than ever in terms of like real change. What's your reaction to that? >> I was just reading this morning that the cost of ensuring against data breaches is getting dramatically more expensive. So, organizations are going to have to take steps to implement security. You can't just sort of throw money at the problem, you're going to actually have to throw people and technology at the problem, and take security really seriously. There is this whole ecosystem of companies and folks who are really excited about security and here to help. There's a lot of people interested in having that conversation to help those CSOs secure their deployments. >> Mark, your reaction? >> Yeah. I think, anything that causes us to question what we're doing is always a positive thing. And I think everything you brought up really comes down to remembering that no matter what, and no matter where, your data is always your data. And so, you have some level of responsibility, and that just changes depending on what system you're using. And I think that's really shifting, especially in the CSO or the CSO mindset, to go back to the basics where it used to be information security and not just cyber security. So, whether that information and that data is sitting on my desk physically, in a system in our data center, or in the cloud somewhere. Looking holistically, and that's why we could keep coming back to people. That's what it's all about. And when you step back there, you start to realize there's a lot more trade offs. There's a lot more levers that you can work on, to deliver the outcome you want, to find that balance that works for you. 'Cause at the end of the day, security is just all about making sure that whatever you built and the systems you're working with, do what you want them to do, and only what you want them to do. >> Well, Liz and Mark, thank you so much for your expert perspective. You're in the trenches, and really appreciate your time and contributing with "theCUBE," and being part of our Showcase. For the last couple of minutes, let's dig into some of the things you're working on. I know network policies around Kubernetes, Liz, EKS anywhere has been fabulous with Lambda and Serverless, you seeing some cool things go on there. Mark, you're at Lacework, very successful company. And looking at a large scale observability, signaling and management, all kinds of cool things around native cloud services and microservices. Liz, give us an update. What's going on over there at Isovalent? >> Yeah. So, Isovalent is the company behind Cilium Networking Project. Its best known as a Kubernetes networking plugin. But we've seen huge amount of adoption of cilium, it's really skyrocketed since we became an incubating project in the CNCF. And now, we are extending to using eBPF to not just do networking, but incredibly in depth observability and security observability have a new sub project called Tetragon, that gives you this amazing ability to see out of policy behavior. And again, because it's using eBPF, we've got the perspective of everything that's happening across the whole machine. So, I'm really excited about the innovations that are happening here. >> Well, they're lucky to have you. You've been a great contributor to the community. We've been following your career for very, very long time. And thanks for everything that you do, really appreciate it. Thanks. >> Thank you. >> Mark, Lacework, we we've following you guys. What are you up to these days? You know, we see you're on Twitter, you're very prolific. You're also live tweeting all the events, and with us as well. What's going on over there at Lacework? And what's going on in your world? >> Yeah. Lacework, we're still focusing on the customer, helping deliver good outcomes across cloud when it comes to security. Really looking at their environments and helping them understand, from their data that they're generating off their systems, and from the cloud usage as to what's actually happening. And that pairs directly into the work that I'm doing, the community looking at just security as a practice. So, a lot of that pulling people out of the technology, and looking at the process and saying, "Hey, we have this tech for a reason." So, that people understand what they need in place from a skill set, to take advantage of the great work that folks like Liz and the community are doing. 'Cause we've got these great tools, they're outputting all this great insights. You need to be able to take actions on top of that. So, it's always exciting. More people come into security with a security mindset, love it. >> Well, thanks so much for this great conversation. Every board should watch this video, every CSO, CIO, CSO. Great conversation, thanks for unpacking and making something very difficult, clear to understand. Thanks for your time. >> Pleasure. >> Thank you. >> Okay, this is the AWS Startup Showcase, Season Two, Episode Four of the ongoing series covering the exciting startups from the AWS ecosystem. We're talking about cybersecurity, this segment. Every quarter episode, we do a segment around a category and we go deep, we feature some companies, and talk to the best people in the industry to help you understand that. I'm John Furrier your host. Thanks for watching. (upbeat music)

>> Narrator: From around the globe, it's theCUBE. With digital coverage of AWS Reinvent Executive Summit 2020. Sponsored by Accenture and AWS. >> Welcome everyone to theCUBE virtual coverage of the Accenture Executive Summit part of AWS Re-invent 2020. I'm your host, Rebecca Knight. We are talking today about reinventing the energy data platform. We have two guests joining us. First, we have Johan Krebbers. He is the GM Digital Emerging Technologies and VP of IT Innovation at Shell. Thank you so much for coming on the show, Johan. >> You're welcome. >> Rebecca: And next we have Liz Dennett. She is the Lead Solution Architect for OSDU on AWS. Thank you so much Liz. >> Happy to be here. >> So I want to start our conversation by talking about OSDU. Like so many great innovations, it started with a problem. Johann, what was the problem you were trying to solve at Shell? >> Yeah, let's go back a couple of the years. We started summer 2017, where we had a meeting with the guys from exploration in Shell. And the main problem they had of course they got lots and lots of data, but aren't unable to find the right data they need to work from. Well the data was scattered and is scattered, it was scattered it's all over the place. And so the real problem trying to solve is how that person working in exploration could find their proper data, not just the data also the data really needed. That's what we probably talked about in summer 2017. And we said, "Okay, the only way we see this moving forward is to start pulling that data into a single data platform." And that was at the time that we called it OSDU, the Open Subsurface Data Universe, and that was what the Shell name was. So, in January 2018, we start a project with Amazon to start creating and confronting the building that OSDU environment, that subservient the universe. So that single data platform to put all your exploration and wealth data into a single environment that was the intent. And then we said, already in March of that same year, we said, 'Well, from a Shell point of view, we would be far better off if we could make this an industry solution and not just a Shell solution." Because Shell will be, if you can make this an industry solution, but people start developing applications for it also, it's far better than for Shell to say, we have it Shell special solution. Because we don't make money out of how we store the data we can make money out of we have access to the data, we can exploit the data. So storing the data, we should do as efficiently possibly can. So in March we reached out to about eight or nine other large oil and gas operators, like the ECONOS, like the Totals, like the Chevrons of this world they said, "Hey, we in Shell are doing this, do you want to join this effort?" And to our surprise, they all said yes. And then in September 2018 we had our kick-off meeting with the open group, where we said, "Okay, if you want to work together with lots of other companies, we also need to look a bit at how we organize that." Because if you start working with lots of large companies you need to have some legal framework around it. So that's why, we went to the open group and said," Okay, let's form the OSDU forum." As we call it at the time. So in September, 2018 where I had a Galleria in Houston we had a kick off meeting for the OSDU forum with about 10 members at the time. So there's, just over two years ago, we started to exercise formally we called it OSDU, we kicked it off. And so that's really where we coming from and how we got there also. >> The origin story. >> Yes. >> What, so what, digging a little deeper there, what were some of the things you were trying to achieve with the OSDU? >> Well, a couple of things we've tried to achieve with OSDU. First is really separating data from applications. But what is the biggest problem we have in the subsurface space that the data and applications are all interlinked. They are all tied together and if you have then a new company coming along and say, "I have this new application, and needs access to the data." That is not possible because the data often interlinked with the application. The first thing we did is, really breaking the link between the application and the data. So that was the first thing we did. Secondly, put all the data to a single data platform, take the silos out because what was happening in the subsurface space I mean, they got all the data in what we call silos, in small little islands out there. So we try to do is, first, break the link. Two, create, put the data in a single data platform. And then third part, put a standard layer on top of that the same API layer on top of the created platform so we could create an ecosystem out of companies to start developing software applications on top of that data platform. Because you might have a data platform, but you aren't successful if you have a rich ecosystem of people start developing applications on top of that. And then you can exploit the data like small companies, large companies, universities, you name it. But you have to create an ecosystem out of there. So the three things was, first break the link between the application data, just break it and put data at the center. And also make sure that data, this data structure would not be managed by one company. But it would be managed the data structures, by the OSDU forum. Secondly then, put the data, single data platform. Thirdly then, have an API layer on top and then create an ecosystem, really go for people, say, "Please start developing applications." Because now you have access to the data, because the data is no longer linked to somebody's application was all freely available for an API layer. That was all September, 2018, more or less. >> Liz I want to bring you, in here a little bit. >> Yeah. >> Can you talk a little bit some of the imperatives from the AWS standpoint in terms of what you were trying to achieve with this? >> Yeah, absolutely. And this whole thing is Johan said, started with a challenge that was really brought out at Shell. The challenges that geoscientists spend up to 70% of their time looking for data. I'm a geologist I've spent more than 70% of my time trying to find data in these silos. And from there, instead of just figuring out, how we could address that one problem, we worked together to really understand the root cause of these challenges. And working backwards from that use case, OSDU and OSDU on AWS has really enabled customers to create solutions that span not just this in particular problem. But can really scale to be inclusive of the entire energy value chain and deliver value from these used cases to the energy industry and beyond. >> Thank you. Johan, so talk a little bit about Accenture's Cloud First approach and how it has helped Shell work faster and better with speed. >> Well, of course Accenture Cloud First approach, really works together with Amazon environment, AWS environment. So we really look at Accenture and Amazon together, helping Shell in this space. Now the combination of the two is what we're really looking at where access of course can bring business knowledge to that environment, operate support knowledge to an environment and of course Amazon will be bring that to this environment, that underpinning services, et cetera. So we would expect of that combination, a lot of goods when we started rolling out in production, the other two or three environment. And probably our aim is, when a release fee comes to the market, in Q1 next year of OSDU have already started going out in production inside Shell. But as the first OSDU release which is ready for prime time production across an enterprise. Well we have released our one just before Christmas, last year, released two in May of this year. But release three is the first release we want to use for full scale production and deployment inside Shell and also all the operators around the world. And there is what Amazon, sorry and there when Accenture can play a role in the ongoing, in the deployment building up, but also support environment. >> So one of the other things that we talk a lot about here on theCUBE is sustainability and this is a big imperative at so many organizations around the world in particular energy companies. How does this move to OSDU, help organizations become how is this a greener solution for companies? >> Well, first we make, it's a great solution because you start making a much more efficient use of your resources, which is a really important one. The second thing we're doing is also we started with OSDU in very much in the oil and gas space, within the export development space. We've grown OSDU but in our strategy, we've grown OSDU now also to an alternative energy source. So obviously we'll all start supporting next year things like solar farms, wind farms, the geothermal environment, hydrogen. So it becomes an open energy data platform not just for the oil and gas industry, but for any type of industry, any type of energy industry. So our focus is to create, bring the data of all those various energy data sources together into a single data platform. You're going to use AI and other technology on top of that, to exploit the data to be together into a single data platform. >> Liz, I want to ask you about security, because security is such a big concern when it comes to data. How secure is the data on OSDU? >> Actually, can I talk, can I do a follow-up on the sustainability talking? >> Absolutely by all means. >> I mean, I want to interject, though security is absolutely our top priority I don't mean to move away from that but with sustainability, in addition to the benefits of the OSDU data platform. When a company moves from on-prem to the cloud they're also able to leverage the benefits of scale. Now, AWS is committed to running our business in the most environmentally friendly way possible. And our scale allows us to achieve higher resource utilization and energy efficiency than a typical on-prem data center. Now, a recent study by 451 research found that, AWS's infrastructure, is 3.6 times more energy efficient than the median of surveyed enterprise data centers. Two thirds of that advantage is due to a higher server utilization and a more energy efficient server population. But when you factor in the carbon intensity of consumed electricity and renewable energy purchases 451 found that, AWS performs the same task with an 88% lower carbon footprint. Now that's just another way that AWS and OSDU are working to support our customers as they seek to better understand their workflows and make their legacy businesses less carbon intensive. >> That's, those statistics are incredible. Do you want to talk a little bit now about security? >> Absolutely yeah. Security will always be AWS's top priority. In fact, AWS has been architected to be the most flexible and secure cloud computing environment available today. Our core infrastructure is built to satisfy the security requirements for the military, global banks and other high sensitivity organizations. And in fact, AWS uses the same secure hardware and software to build and operate each of our regions. So that customers benefit from the only commercial cloud that's had hit service offerings and associated supply chain vetted and deemed secure enough for top secret workloads. That's backed by a deep set of cloud security tools with more than 200 security compliance and governmental service and key features. As well as an ecosystem of partners like Accenture, that can really help our customers to make sure that their environments for their data meet and or exceed their security requirements. >> Johann, I want you to talk a little bit about how OSDU you can be used today. Does it only handle subsurface data? >> Today is 100 subsets of wells data we go to add that to that production around the middle of next year. That means that the whole upstream business we got included every piece goes from exploration all the way to production, you bring it together into a single data platform. So production will be added around Q3 of next year. Then in principle, we have a typical elder data, a single environment and we're going to extend them to other data sources or energy sources like solar farms, wind farms, hydrogen, hydro, et cetera. So we're going to add a whole list of other day energy source to that and bring all the data together into a single data platform. So we move from an oil and gas data platform to an energy data platform. That's really what our objective is because the whole industry if you look at our companies all moving in that same direction of course are very strong in oil and gas but also increasingly go into other energy sources like solar, like wind, like hydrogen et cetera. So we move exactly with the same method, that the whole OSDU, can really support that whole energy spectrum of energy sources, of course. >> And Liz and Johan, I want you to close us out here by just giving us a look into your crystal balls and talking about the five and 10 year plan for OSDU. We'll start with you, Liz. What do you see as the future holding for this platform? >> Honestly, the incredibly cool thing about working at AWS is you never know where the innovation and the journey is going to take you. I personally am looking forward to work with our customers wherever their OSDU journeys, take them whether it's enabling new energy solutions or continuing to expand, to support use cases throughout the energy value chain and beyond but really looking forward to continuing to partner as we innovate to slay tomorrow's challenges. >> Johan. >> Yeah, first nobody can look that far ahead anymore nowadays, especially 10 years. I mean, who knows what happens in 10 years? But if you look what our objective is that really in the next five years, OSDU will become the key backbone for energy companies for storing your data, new artificial intelligence and optimize the whole supply, the energy supply chain in this world out here. >> Johan Krebbers, Liz Dennett thank you so much for coming on theCUBE virtual. >> Thank you. >> Thank you. >> I'm Rebecca Knight stay tuned for more of our coverage of the Accenture Executive Summit. (tranquil music).

>>from around the globe. It's the Cube with coverage of Coop Con and Cloud, Native Con Europe 2020 Virtual brought to You by Red Hat, The Cloud Native Computing Foundation and its ecosystem Partners. Hi, I'm stupid, man. And this is the Cube's coverage of Cube con Cloud Native Con Europe event, which, of course, this year has gone virtual, really lets us be able to talk to those guests where they are around the globe. Really happy to welcome back to the program. Liz Rice. First of all, she is the vice president of Open Source Engineering at Aqua Security. She's also the chair of the Technical Oversight Committee has part of Ah CN cf. Liz, it is great to see you. Unfortunately, it's remote, but ah, great to catch up with you. Thanks for joining. >>Yeah, Thanks for having me. Nice to see you if you know across the ocean. >>So, uh, you know, one of the one of the big things? Of course, for the Cube Con show. It's the rallying point for the community. There are so many people participating. One of the things we always love to highlight its not only the the vendor ecosystem. But there is a very robust, engaged community of end users that participate in it. And as I mentioned, you're the chair of that technology oversight committee. So maybe just give our audience a little bit of, you know, in case they're not familiar with the TOC does. And let's talk about the latest pieces there. >>Yes, say the TOC is really hit. C can qualify the different projects that want to join the CNC F. So we're assessing whether or not they're cloud native. We're assessing whether they could joined at sandbox or incubation or graduation levels. Which of the different maturity levels that we have for for project within the CN CF yeah, we're really there, Teoh also provide it steering around the What does cloud native mean and what does it mean to be a project inside the CN CF community? We're also a voice for all of the projects. We're not the only voice, but, you know, part >>of our role >>really is to make sure the projects are getting what they need in order to be successful. So it's it's really around the technology and the projects that we call cloud native >>Yeah, and and obliges Cloud Native because when people first heard of the show, of course, Kubernetes and Cube Con was the big discussion point. But as you said, Cloud native, there's a lot of projects there. I just glanced at the sandbox page and I think there's over 30 in the sandbox category on and you know they move along their process until they're, you know, fully mature and reach that, you know, 1.0 state, which is the stamp of approval that, you know, this could be used in production. I understand there's been some updates for the sandbox process, so help us understand you know where that is and what's the new piece of that? >>Yeah. So it's really been because of the growth off cloud native in general, the popularity off the CN CF and so much innovation happening in our space. So there's been so many projects who want Teoh become hard off the CNC f family on and we used to have a sponsorship model where members of the TOC would essentially back projects that they wanted to see joining at the sandbox level. But we ran into a number of issues with that process on and also dealing with the scale, the number of applications that have come in. So we've revamped the process. We made it much easier for projects to apply as much simpler form where really not making so much judgment we're really saying is it's a cloud native project and we have some requirements in terms off some governance features that we need from a project. And it's worth mentioning that when a project joins the CN CF, they are donating the intellectual property and the trademark off that project into the foundation. So it's not something that people should take lightly. But we have tried to make it easier and therefore much smoother. We're able Teoh assess the applications much more quickly, which I think everyone, the community, the projects, those of us on the TOC We're all pretty happy that we can make that a much faster process. >>Yeah, I actually, it brings up An interesting point is so you know, I've got a little bit of background in standards committees. A swell as I've been involved in open source for a couple of decades now some people don't understand. You know, when you talk about bringing a project under a foundation. You talked about things like trademarks and the like. There are more than one foundation out there for CN CF Falls under the Linux Foundation. Google, of course, brought Kubernetes in fully to be supported. There's been some rumblings I've heard for the last couple of years about SDO and K Native and I know about a month before the show there was some changes along SDO and what Google was doing there may be without trying to pass too many judgments in getting into some of the political arguments, help us understand. You know what Google did and you know where that kind of comparison the projects that sit in the CN cf themselves. >>Yeah, So I e I guess two years ago around two years ago, Stu was very much the new kid in the cloud native block. So much excitement about the project. And it was actually when I was a program co chair that we had a lot of talks about sdo at Cube Con cloud native bomb, particularly in Copenhagen, I'm recalling. And, uh, I think everyone I just saw a natural fit between that project on the CN, CF and There was an assumption from a lot of people across the community that it would eventually become part of the CNC f. That was it's natural home. And one of the things that we saw in recent weeks was a very clear statement from IBM, who were one off the Uh huh, yeah, big contributing companies towards that project that that was also their expectation. They were very much under the impression that Stu would be donated to the CN CF at an appropriate point of maturity, and unfortunately, that didn't happen. From my point of view, I think that has sown a lot of confusion amongst the community because we've seen so much. It's very much a project of fits. Service mesh designed to work with kubernetes is it really does. You're fit naturally in with the other CN CF projects. So it's created confusion for end users who, many of whom assume that it was called the CN CF, and that it has the neutral governance that the other projects. It's part of the requirements that we have on those projects. They have to have an open governance that they're not controlled by a single vendor, Uh, and we've seen that you know that confusion, Andi. Frustration around that confusion being expressed by more and more end users as well as other people across the community. And yeah, the door is still open, you know, we would still love to see SDO join the community. Clearly there are different opinions within the SD wan maintainers. I will have to see what happens. >>Yeah, lets you bring up some really good points. You know, absolutely some of some of that confusion out there. Absolutely. I've heard from customers that if they're making a decision point, they might say, Hey, maybe I'm not going to go down that maybe choose something else because I'm concerned about that. Um, you know, I sdo front and center k native, another project currently under Google that has, you know, a number of other big vendors in the community that aiding in that So hopefully we will see some progress on that, you know, going forward. But, you know, back to you talked about, You know, the TOC doesn't make judgements as to you know which project and how they are. One of the really nice things out there in the CN CF, it's like the landscape just for you to help, understand? Okay, here's all of these projects. Here's the different categories they fit in. Here is where they are along that maturity. There's another tool that I read. Cheryl Hung blogged about the technology radar. I believe for continuous delivery is the first technology radar. Help us understand how that is, you know, not telling customers what to do but giving them a little guidance that you know where some of these projects projects fit. In a certain segment, >>Yeah, the technology radar is a really great initiative. I'm really excited about it because we have increasing numbers or end users who are using these different projects it both inside the CN CF and projects that are outside of the CNC F family. Your end users are building stacks. They're solving real problems in the real world and with the technology radar. What Cheryl's been able to facilitate is having the end you to the end user community share with us. What tools? They're actually using what they actually believe are the right hammers for specific nails. And, you know, it's it's one thing for us as it's more on the developer or vendor side Teoh look at different projects and say what we think are the better solutions for solving different problems. Actually hearing from the horse's mouth from the end users who are doing it in the real world is super valuable. And I think that is a really useful input to help us understand. What are the problems that the end user is still a challenge by what are the gaps that we still need to fail more input we can get from the end user community, the more will be solving real problems and no necessarily academic problems that we haven't sorry discovered in >>the real world. Alright, well is, you know, teeing up a discussion about challenges that users still have in the world. If we go to your primary jobs, Main hat is you live in the security world and you know, we know security is still something, you know, front and center. It is something that has never done lots of discussion about the shared responsibility model and how cloud native in security fit together and all that. So maybe I know there's some new projects there, but love to just give me a snap shot as where we are in the security space. As I said, Overall, it's been, you know, super important topic for years. This year, with a global pandemic going on, security seems to be raised even more. We've seen a couple of acquisitions in the space, of course. Aqua Security helping customers along their security journey. So what do you seeing out there in the marketplace today and hear from your custom? >>Yeah, I Every business this year has, you know, look at what's going on and you know, it's been crazy time for everyone, but we've been pleasantly surprised at how, you know, in relative terms, our business has been able to. It's been strong, you know. And I think you know what you're touching on the fact that people are working remotely. People are doing so many things online. Security is evermore online. Cloud security's evermore part off what people need to pay attention to. We're doing more and more business online. So, actually, for those of us in the security business, it has bean, you know that there have been some silver linings to this this pandemic cloud? Um, yes. So many times in technology. The open source projects and in particularly defaults in kubernetes. Things are improving its long Bina thing that I've you know, I wished for and talked about that. You know, some of the default settings has always been the most secure they could be. We've seen a lot of improvements over the last 23 years we're seeing continuing to see innovation in the open source world as well as you know, on the commercial side and products that vendors like Akwa, you know, we continue to innovate, continue to write you ways for customers to validate that the application workloads that they're going to run are going to run securely in the cloud. >>Alright and lives. There's a new project that I know. Ah, you know, you Aqua are participating in Tell us a little bit about Starbird. You know what's what's the problem? It's helping solve and you know where that budget >>Yes, So stockholders, one of our open source initiatives coming out of my team are equal on, and the idea is to take security reporting information and turn it into a kubernetes native, uh, resources custom resources. And then that means the security information, your current security status could be queried over the kubernetes AP I, as you're querying the status or the deployment, say you can also be clearing to see whether it's passing configuration audits or it's passing vulnerability scans for the application containers inside that deployment. So that information is available through the same AP eyes through the queue control interface through dashboards like Octane, which is a nice dashboard viewer for kubernetes. And starboard brings security information not just from acquittals but from other vendor tools as well front and center into that kubernetes experience. So I'm really excited about Star Border. It's gonna be a great way of getting security visibility, Teoh more kubernetes use it >>all right. And we were talking earlier about just the maturity of projects and how they get into the sandbox. Is is this still pretty sandbox for >>this? OK, we're still very much in the early phases and you know it. I think in the open source world, we have the ability to share what we're doing early so that we can get feedback. We can see how it resonates with with real users. We've had some great feedback from partners that we've worked with and some actual customers who actually collaborated with When we're going through the initial design, some great feedback. There's still lots of work to do. But, yeah, the initial feedback has been really positive. >>Yeah, is usually the event is one of those places where you can help try toe, recruit some other people that might have tools as well as educate customers about what's going on. So is that part of the call to action on this is, you know, what are you looking for for kind of the rest of 2020 when it when it comes to this project? >>Yeah, absolutely. So internally, we're working on an operator which will automate some of the work that's double does in the background in terms off getting more collaboration. We would love to see integrations from or security tooling. We're talking with some people across the community about the resource definition, so we've come up with some custom resource definitions, but we'd love them to be applicable it to a variety of different tools. So we want to get feedback on on those definitions of people are interested in collaborating on that absolutely do come and talk to me and my team are reluctant. >>Great. Listen, and I'll give you the final word. Obviously, we're getting the community together while we're part So you know any other you know, engagement opportunities, you get togethers. Things that you want people to know about the European show this year. >>Well, it's gonna be really you know, I'm on tenterhooks to see whether or not we can recreate the same atmosphere as we would have in Q con. I mean, it won't be exactly the same, but I really hope that people will engage online. Do come and, you know, ask questions of the speakers. Come and talk to the vendors, get into slack channels with the community. You know, this is an opportunity to pretend we're in the same room. Let's let's let's do what we can Teoh recreate as close as we can. That community experience that you keep corn is famous for >>Yeah, absolutely. That whole way track is something that is super challenging to recreate. And there's no way that I am getting the Indonesian food that I was so looking forward to in Amsterdam just such a great culinary and cultural city. So hopefully sometime in the future will be able to be back there. Liz Rice. Always pleasure catching up with you. Thanks so much for all the work you're doing on the TOC. And always a pleasure talking to you. >>Thanks for having me. >>All right, Lots more coverage from Cube Con Cloud, Native con the European 2020 show, Of course. Virtual I'm stew minimum. And thank you for watching the Cube. Yeah, yeah, yeah, yeah.

>> Live from Barcelona, Spain it's theCUBE. Covering KubeCon + CloudNativeCon Europe 2019. Brought to you by Red Hat, the Cloud Native Computing Foundation and ecosystem partners. >> Welcome back to theCUBE here in Barcelona, Spain at the Fira, it's KubeCon + CloudNativeCon 2019. I'm Stu Miniman and my co-hosts for two days of live wall-to-wall coverage is Corey Quinn. Joining us back, we have two CUBE alums, Liz Rice, right to my right here who is a Technology Evangelist with Aqua security. Liz, thank you so much welcome back. >> Pleasure to be here. >> And Jeff Brewer, Vice President and Chief Architect, Small Business & Self-Employed Group, of Intuit. A CUBE alum since a few hours ago this morning. >> Yes, yes, thank you. >> Jeff, welcome back. >> Thank you. >> So, we've got you back with a different hat. Everybody in our industry can definitely recognize we wear lots of different hats we have lots of jobs thrown at us. Both of you are in the Technical Oversight Committee and Liz is not only a member but also the Chairperson, President. (people laughing) >> President is definitely a promotion. But, yeah, I'm Chair of the committee. >> Maybe, as it's known, the TOC. Liz, before we get there, your shirt says +1 binding. You have to explain for us and did not get a preview before the interview, so we'll see where this goes. >> It's one of the perks of being on the TOC. When we have something that comes to a vote we want to get input from the community so we ask anyone in the community to vote. But unless you're a member of the TOC your vote is non-binding. As a member of the committee, we have binding votes. And the traditional thing you write on the voting email is +1 binding. So, it's a nice surprise to get a t-shirt when I joined the TOC. >> Very nice. Can you just give us, our audience, that might not be familiar with the TOC, give us some of the key things about it. >> It's the Technical Oversight Committee for the CNCF. We are, really, the technical curation of the projects that come in to the CNCF. Which projects will get support and at what level because we have the sandbox experimentation stage then incubation and then finally graduation for the really established and kind of, de-risked projects. So, we're really evaluating the projects and kind of making a decision collaboratively on which ones we want the CNCF to support. >> All right. So Jeff, we had a great conversation with you about Intuit's cloud journey. Tell us how you got involved in the TOC. We always love the end users, not just using but participating in and helping to give some governance over what the community is doing. >> Yeah, so, about a year and a half ago we made a decision to acquire a small company called Applatix. Who was, actually, already in the end user community. And also contributors as well. Through that acquisition, I was part of that acquisition, I led that acquisition from the Intuit side and really got excited about the Kubernetes and the KubeCon story overall. Through the Kubernetes experts, I met them at a KubeCon and they introduced me to a whole lot more of the community. Just through some overall partnerships with AWS and also spending a lot of time with end-users that's how I really got to know the community a little bit. And then, was voted onto the CNCF as an end user representative in January. >> Wonderful. As far as you're concerned, as you go through this, do you find it challenging at times to separate your roles professionally from working for a large company, to whom many things matter incredibly. Again, as mentioned earlier, I am one of your customers. I care very much about technical excellence, coming out of Intuit, versus your involvement with the larger project. >> Yeah, so like most people in technology companies I'm extremely busy and I would love to spend, I would love to clone myself and spend more (laughing) more time. >> Everybody wants to submit a client project to the TOC we will prioritize that one. >> Exactly, exactly. >> The way I really balance it is that I make an explicit time carve out for those two activities. And most importantly, I attend the meetings. The TOC meetings that we have, those are extremely important. We get a lot of project reviews in those meetings. Liz chairs those meetings. That's where I always make sure that my schedule is cleared for that. >> Taking it, I guess, one step further. Do you find it challenging at all to separate out, in fact, when you're making decisions and making votes, for example, that are presumably binding, +1 binding as we've learned now, is the terminology. Do you find that you are often pulled between trying to advocate for your company and advocating for the community or are they invariably aligned in your mind? >> I mean, my job's the easiest because I come from an end user. So what I use and what I consume is likely what the community at large. There might be some niches and stuff like that. But I usually don't have that conflict. I don't know, as more of a vendor, you might have more of a conflict. >> It's something that I have be conscious of. I just try to mentally separate. I have a role with a company that pays my salary but when I'm doing open-source things if I feel conflicted about. This hasn't really come up yet, but if I do feel that there's some kind of conflict of interest I will always recuse myself. Actually, in my previous role, as the Co-Chair for the Program Committee for the KubeCon and CloudNativeCon Conference, on a couple of occasions we had competitors submit, and I would always just step back from those. Because it's the right thing to do. >> All right. So Liz, there's quite a few projects now, under the umbrella of CNCF. If I've go it right, it was like, 38 different ones. When Brian went on the stage this morning, 16 in the sandbox, 16 incubating and six have graduated now. How do you manage that? You know, there's some in the community they're like, oh my gosh, reminds us of like, big tent, from some initiatives. Some other things here, how much is too much? How do you balance that and what's the input of the TOC? >> Yeah, so one of the things that we're doing with the TOC is we've just established a thing called the SIGs, the special interest groups. Very much following the same model of Kubernetes SIGs. But the idea here is that we can, kind of formalize getting experts in the community to help us with particular kind of areas. So, we've already got a storage and security SIG set up. We expect there will be probably four to six more coming on board during the year. And that helps us with things like the project reviews and the due diligence to just be able to say, we would really appreciate some help. Those groups are also really enthusiastic about kind of sharing knowledge in the form of things like white papers. I think it will be really important for end-users to be able to navigate their way around these projects. Quite often there is more than one solution for a particular thing. And being able to, in a non-vendor way, in a neutral way, express why project X is good in one circumstance and project Y would be better in a different environment. There's work to be done there and I'm hoping to see that come out. >> This is one of my passions as the end user representative, is that trail map or that road map. That's one of the reasons why we really have invested at Intuit, in the Kubernetes technology and the Cloud Native technology. We didn't just roll them out as is. We actually curate them and create, really, a paved road for our developers to navigate that space. >> Yeah, and as we heard from your story it's not always, well, if there's some overlap you use SDO and Hellman. >> Yeah. >> That there's a fit for both of those in your environment, right. >> Yeah. >> From a, I guess, an end user perspective is there a waiting difference between someone like Intuit and someone like Twitter for pets, where there's a slight revenue scale, a slight revenue difference, like scale difference, like everything difference. >> Yes. >> Certainly, there is. I think that, but that's one of the beautiful things about the Cloud Native technologies. You can consume what you need and what you want, right. It's not one size fits all. A lot of people talk about, oh, there's a paradox of choice, there's so many projects, right. Actually, that's a benefit. Really, all you need is that road map to navigate your way through that, rather than just adopting a paved road that might not work for everybody. >> It almost feels, to some extent, almost like the AWS Service Catalog. Whenever you wind up looking at all the things they offer. It feels like going out to eat at the Cheesecake Factory. Where there is 80 pages of menu to flip through with some advertisements, great. And reminding yourself, at time, that they are not Pokemon, you do not need to catch them all. It's, sometimes, a necessary step, as you start to contextualize this. >> That's one of the great things about having over 80 members in the end user is. You can find a buddy, you can find a company like you. Talk to them, get connected with them and figure out what they're doing and learn from them. The community is broad enough to be able to do that. >> All right, so Liz, let's talk about security. >> Okay. (people laughing) >> You said there's a SIG that started up. Where are we, how are things going and you can you share about where we're going in the near future? >> The SIG came together from a group of people who really wanted to make it easier for end-users to roll out their Cloud Native stacks in a secure fashion. We don't always, as a community, speak the same language about security, we don't always have the most secure settings by default. They really came together around this common interest of just making it easier for people to secure. I think a big part of that will be looking at how the different projects, are they applying best practices from a security perspective? Is there more they should do to document how to operate their particular project more securely? I think that whole initiative and that group of people who've come together for SIG security, I'm so impressed and so pleased that they have come together with that enthusiasm to help on that front. >> Any commentary on what you're seeing in this space? >> Yeah, so as an almost, a fintech company, with a lot of fintech and, you know, we're not quite a bank, but we have a lot of the same security and compliance things. That SIG is so, so important to us. And having a roadmap. I found a education is really, really a big part of it of the security experts, right. Because this is somewhat newer technology. Even though it's been in use at Google for a long time the regulator's, the compliance people, don't totally understand it, right. So you have to have a way to explain to them what's going on. So things like, open policy agent, something that we've adopted, helps us explain what's going on in our system. Once they get it, they're like, this is awesome and our end users can now, really, our end users, meaning the people that use QuickBooks and TurboTax can really trust that we have those guardrails in place. >> At Aqua, it's a huge concern from a lot of our customers. Many of whom, coming from that kind of finance industry. That they're coming to us and saying, well, how can I be PCI compliant or GDPR. How do I manage these requirements with my container based stack, with my Cloud Native stack. That's why there is this huge ecosystem quite a lot of effort around security, compliance, policy. >> It feels very much like it's two problems rolled into one. First, how do you make sure that data is secure in these things? Secondly, how do you effectively and responsibly communicate that to a regulator, who expects to be taken on a tour of a data center when they show up on site? (people laughing) I checked, they won't let you. >> There are definitely two sets of security people in my experience. There are a set of people who care about how will I get attacked. How will breaches happen. And there are other people who go, I have a checklist and I need to check the boxes in the checklist, tell me how. Sometimes those two things overlap, but not always. >> All right, Liz, lot of updates, as always. Jeff, I really appreciate your commentary there. Well, there's the paradox of choice but we have a lot of customers out there and therefore we do. (people chuckling) Any highlights you want to share with our audience? >> I think one thing that happens every year is we see more. Well, we saw Kubernetes graduate, I think, early last year, end of the previous year. Now we've got six projects into graduation. From my perspective, that says something about how mature this whole set of projects, this whole platform is becoming. Because graduation is a pretty high bar. Not least in terms of the number of end users that have to be using it in production. This is solid technology. >> Yeah, any highlights from you? >> I think, like we might have touched on a little bit this morning. But I think that usually the technologies that where you're facing the big problems is pretty obvious which one to use, right. Like serverless, you're going to go look at something like Knative or whatnot. Functions as a service. There's some open fast projects, whatnot, like that. SDO services mesh is another one where it's getting mature and it's getting to the point where you can have these ubiquitous service meshes throughout it. So, those are the areas that we're most looking at right now. >> Great, all right. Well, Liz and Jeff, thank you so much for joining us. Thanks for all the work you do on the Oversight Committee and appreciate you sharing the updates with our community. >> Thank you for having us. >> Thank you. >> For Cory Quinn, I'm Stu Miniman. We'll be back more, with theCUBE here at KubeCon + CloudNativeCon 2019. Thanks for watching. (upbeat music)

>> Live from Barcelona, Spain. It's the queue covering Sisqo, Live Europe. Brought to you by Cisco and its ecosystem partners. >> Welcome back, Everyone Live here in Barcelona, Spain's two Cubes Coverage of Sisqo Live Europe. Twenty nineteen. I'm John Foreal echoes David Lock. Our next guest is Liz Santoni, senior vice president general manager of the Eye Okay Group at Cisco, formerly is part of the engineering team Cube Alumni. Great to see you again. Thanks for coming >> on. Great to be here, >> so you're >> just good to see you guys. >> You're in the centre. A lot of news. I ot of the network redefining networking on stage. We heard that talk about your role in the organization of Sisko and the product that you now have and what's going on here. >> So run R I O T business group similar to what we do with the end data center off that it has the engineering team product management team. We build products solutions that includes hardware, software, silicon. Take him out to market. Really an eye. OT It's about, you know, the technology conversation comes second. It's like, What can you deliver in terms of use, case and business outcomes that comes first, and it's more about what technology can enable that. So the conversations we have with customers are around. How can he really solve my kind of real problems? Everything from one a girl, my top line? I want to get closer to my customers because the closer I get to my customers, I know them better. So obviously can turn around and grow my top line. And I want to optimize everything from internal process to external process because just improves my bottom line at the end >> of the day. So you a lot of news happening here around your team. But first talk about redefining networking in context to your part, because edge of the network has always been what is, you know the edge of the network. Now it's extending further. I. O. T. Is one of those things that people are looking at a digit digitization standpoint, turning on Mohr intelligence with the factory floor or other areas. How how are how is I ot changing and what is it today? >> So you gave an example of, you know, digitizing something like a factory floor, right? So let's talk about that. So what customers in the factory floor want to do. They've already automated a number of this factory floors, but what they want to do is get more efficient. They want better eo. They want better quality. They want to bring security all the way down to the plant floor because the more and more you connect things, the more you just expanded your threat surface out pretty significantly so they want to bring security down to the plant floor. Because the's are environments that are not brand new, they have brown feel equipment there, green field equipment. They want to be able to have control of where what device gets in the network. With things like device profiling, they want to be able to do things like create zones so that they could do that with things like network segmentation. So when and if an attack does happen, they can contain the attack as much as possible. All right now what you need in terms ofthe a factory floor, automation, security, to be able to scale tohave that flexibility That's no different than what you have in the Enterprise already. I mean, we've been working with our idea and enterprise customers for years, and, you know, they it's about automation and security. It's about simplicity. Why not extend that out? The talent that it has, the capability that has it really is a connective tissue, that you're extending your network from that carpeted space, or you're clean space into outside of the office or into the non carpeted space. So it's perfect in terms of saying it's about extending the network into the nontraditional space that probably it doesn't go into today. >> Well, right. And it's a new constituency, right? So how are you sort of forging new relationships, new partnerships? What is described, what that's like with operations technology? >> I mean, that Cisco. We have great partnerships with the Tea organisation. I mean, we've got more than eight hundred forty thousand customers and our sales teams are product. Teams do a good job in terms of listening to customers. We're talking more and more to the line of business. We're talking more and more to the operational teams >> because of the end of >> the day. I want to be candid. You know, going to a manufacturing floor. I've never run a plan. Floor right? There are not very many people in the team who conceived in a plant manager before they know they're processes. They're concerned about twenty four seven operation. Hey, I want to be in compliance with the fire marshal, physical safety of my workers. We come in with that. I p knowledge that security knowledge that they need it's a partnership. I mean, people talk about, you know, t convergence. Usually convergence means that somebody's going to lose their job. This is Maura Night, an OT partnership, and most of these digitization efforts usually come in for the CEO level. Laura Chief Digitization Officer. We've got good relationships there already. Second part is Sister has been in this. We're quite some time. Our team's already have relationships at the plant level at the grid level operator level. You know, in the in the oil and gas area what we need to build more and more of that because building more and more that is really understanding. What business problems are they looking to solve? Then we can bring the technology to it. >> Liz, what's that in the Enable Menu? Mission Partnership? That's a good point. People, you know, someone wins, someone loses. The partnership is you're enabling your bringing new capability into the physical world, from wind wind farms to whatever What is the enablement look like? What are some of the things that happen when you guys come into these environments that are being redefined and reimagined? Or for the first time, >> Yeah, I would say, you know, I use what our customers said this morning and what he said was, it has the skills that I >> need, all right. >> They have the eyepiece skills. They have a security seals. These are all the things that I need. I want my guys to focus on kind of business processes around things that they know best. And so we're working with a CZ part of what we're putting this extended enterprise extending in ten based networking to the i o T edge means ight. Hee already knows our tools are capabilities. We're now saying we can extend that Let's go out, figure out what those use cases are together. This is why we're working with the not just the working with our channel partners as well. Who can enable these implementations on i o t implementations work? Well, >> part of >> this is also a constant, you know learning from each other. We learned from the operational teams is that hey, you can start a proof of concept really well, but he can really take it to deployment unless you address things around the complexity, the scale and the security. That's where we can come in and help. >> And you can't just throw your switches and routers over the fence. And so okay, here you go. You have to develop specific solutions for this world, right? And when you talk about that a little bit, absolutely. So >> if you look at the networking industrial networking portfolio that we have, it's built on the same catalysts, itis our wireless, a peace, our firewall. But they're more customized for this non carpeted space, right? You've got to take into consideration that these air not sitting in a controlled environment, so we test them for temperature, for shock, for vibration. But it's also built on the same software. So we're talking about the same software platform. You get the same automation features you get, the same analytics features. It's managed by DNA center. So even though we're customizing the hardware for this environment, the software platform that you get is pretty much the same, so it can come in and manage both those environments. But it also needs an understanding of what, What's the operational team looking to solve for? >> Because I want to ask you about the psychology of the buyer in this market because OT there run stuff that's just turn it on. But in the light ball, make it work. Well, I got to deploy something, so they're kind of expectations might be different. Can you share what the expectations are for the kind of experience that they wanna have with Tech? >> I used a utility is a great example and our customer from energy. I think, explain this really well, this is thing that we learned from our customers, right? I haven't been in a substation. I've been in a data center multiple times, but I haven't been in a substation. So when they're talking about automating substation, we work with customers. We've been doing this over the last ten years. We've been working with that energy team for the last two years. They taught us, really, how they secure and managing these environments. You're not going to find a CC in this environment, So when you want to send somebody out to like sixty thousand substations and you want to check on Hey, do do I still have VPN connectivity? They're not going to be able to troubleshoot it. What we did is based on the customer's ask, put a green light on there and led that shines green. All the technician does is look at it and says it's okay. If not, they called back in terms of trouble shooting it. It was just a simple example of where it's. It's different in terms of how they secure and manage on the talent that they have is different than what's in the space. So you've got to make sure that your products also cover what the operational teams need because you're not dealing with the C. C A. Or the I P experts, >> a classic market fit product market fit for what they're expecting correct led to kick around with green light. I mean, >> you know, everybody goes that such an easy thing inside was >> not that perceptive to us. >> What's the biggest thing you've learned as you move from Cisco Engineering out to the new frontier on the edge here? What? What are the learnings that you've seen actually growing mark early. It's only going to get larger, more complicated, more automation. Morey, I'm or things. What's your learning? What have you seen so far? That's the takeaway. >> So I'll see, you know, be I'm still an Cisco Engineering. The reason we're in Coyote is that a secure and reliable network that it's the foundation of any eye. Ot deployment, right? You can go out and best buy the best sensor by the best application by the best middle where. But if you don't have that foundation that's secure and reliable, those, Iet projects are not going to take off. So it's pretty simple. Everyone's network is thie enabler of their business outcome, and that's why we're in it. So this is really about extending that network out, but at the same time, understanding. What are we looking to solve for, right? So in many cases we worked with third party party hers because some of them know these domains much better than we do. But we know the AIP wear the eye patch and the security experts, and we bring that to the table better than anybody else. >> And over the top, definite showing here for the second year that we've covered it here in definite zone, that when you have that secure network that's programmable really cool things and develop on top of it. That's what great opportunity >> this is. I'm super excited that we now have an i o. T. Definite in. You know, it's part of our entire Cisco. Definite half a million developers. You know, Suzy, we and team done a fabulous job. There's more and more developers going to be starting to develop at the I o. T edge at the edge of the network. Right. So when you look at that is our platforms today with dioxin saw on top of it. Make this a software platform that developers Khun can actually build applications to. It's really about, you know, that we're ready. Highest fees and developers unleashing those applications at the i o. T edge. And with Susie making that, you know, available in terms of the tools, the resource is the sand box that you can get. It's like we expect to see more and more developers building those applications at the >> edge. We gotta talk about your announcements, right? Oh, >> yeah. Exciting set >> of hard news. >> So we launch for things today as part of Extending Ibn or in ten based networking to the I. O. T. S. The first one is we've got three new Cisco validated design. So think of a validated design as enabling our customers to actually accelerate their deployments. So our engineering teams try to mimic a CZ muchas possible a customer's environment. And they do this pre integration, pre testing of our products, third party products and we actually put him out by industry. So we have three new ones out there for manufacturing, for utilities and for mode and mobile assets. That's one. The second one is we're launching two new hardware platforms on next generation catalysts Industrial Ethernet switch. It's got modularity of interfaces, and it's got nine expansion packs. The idea is making as flexible as possible for a customer's deployment, because these boxes might sit in an environment not just for three years, like in a campus, they could sit there for five for seven for ten years. So, as you know, they are adding on giving them that flexibility that concave a bit based system and just change the expansion modules. We also launch on next generation industrial router. Actually, is the industries probably first and only full six capable industrial router, and it's got again flexibility of interfaces. We have lt. We have fiber. We have copper. You want deal? Lt. You can actually slap an expansion pack right on top of it. When five G comes in, you just take the Lt Munch a lot. You put five G, so it's five G ready >> engines on there >> and it's based on Io Exit us sexy. It's managed by DNA center and its edge enabled. So they run dialects. You, Khun, build your applications and load him on so >> you can >> build them. Third >> parties have peace here. >> The definite pieces. That third one is where we now have, you know, and I OT developer center in the definite zone. So with all the tools that are available, it enables developers and IAS peas, too. Actually, we build on top of Io Axe today. In fact, we actually have more than a couple of three examples that are already doing that. And the fourth thing is we depend on a large ecosystem of channel partners, So we've launched an Io ti specialization training program to enable them to actually help our customers implementation go faster. So those are the four things that we brought together. The key thing for us was designing these for scale flexibility and security >> capabilities available today. Is that right? >> Absolutely. In fact, if you go in worshipping in two weeks and you can see them at the innovation showcase, it's actually very cool. >> I was going to mention you brought ecosystem. Glad you brought that. I was gonna ask about how that's developing. I could only imagine new sets of names coming out of the industry in terms of building on these coyotes since his demand for Io ti. It's an emerging market in terms of newness, with a lot of head room. So what's ecosystem look like? Missouri patterns and Aya's vsv ours as they take the shape of the classic ecosystem? Or is it a new set of characters? Or what's the makeup of the >> island's ecosystem, >> I would say is in many ways, if you've been in the eye ot world for sometime, you'll say, You know, it's not like there's a whole new set of characters. Yes, you have more cloud players in there, you You probably have more s eyes in there. But it's been like the distributor's Arvin there. The machine builders thie ot platforms. These folks have been doing this for a long time. It's more around. How do you partner and where do you monetize? We know where you know the value we bring in we rely on. We work very closely with this OT partners machine builders s eyes the cloud partners to go to market and deliver this. You're right. The market's going to evolve because the whole new conversation is around. Data. What do I collect? What do I computer the edge? Where do I go around it to? Should I take it to my own premises? Data centers. Should I take it to the cloud who gets control over the data? How do I make sure that I have control over the data as a customer and I have control over who gets to see it? So I think this will be a revolving conversation. This is something we're enabling with one of our Connecticut platforms, which are not launch. It's already launched in terms of enabling customers to have control over the data and managed to bring >> all the portfolio of Cisco Security Analytics management to the table that puts anything in the world that has power and connectivity to be a device to connect into its system. This is the way it's just I mean, how obvious going Beat commits a huge >> I'm grateful that it's great that you think it's obvious. That's exactly what we're trying to tell our customers. >> How to do is >> about extending >> the way >> we do. It's the playbook, right? Each business has its own unique. There's no general purpose. Coyote is their correct pretty much custom because, um, well, thanks for coming on this. Appreciate it when I ask you one final question. You know, I was really impressed with Karen. Had a great session on wall kind of session yesterday. Impact with women. We interviewed you a Grace offered twenty fifteen. Cisco's doing amazing work. You take a minute to talk about some of the things that Cisco's doing around women in computing. Women in stem. Just great momentum, great success story, great leadership. >> I would say Look at her leadership at Chuck's level, and I think that's a great example in terms of He brings people on, depending on what they can, what they bring to the table, right? They just happened to be a lot of women out there. And the reality is I work for a company that believes in inclusion, whether it's gender race, different experiences, different a different thoughts, different perspective because that's what truly in terms of you can bring in the culture that drives that innovation. I've been sponsoring our women in science and engineering, for I can't remember the last for five years. It's a community that continues to grow, and and the reality is we don't sit in there and talk about, you know, what was me and all the things they're happening. What we talk about is, What are the cool new technologies that are out there? How do I get my hands on him? And yeah, there we talk about some things where women are little reticent and shy to do so. What we learn from other people's experiences, many time the guy's air very interested. So what? You sit them there and talking to said, Trust me, it's not like a whining and moaning section. It's more in terms of where we learned from each other >> years talking and sharing ideas, >> absolute >> innovation and building things. >> And we've got, you know, you look we look around that's a great set of women leaders throughout the company. At every single level at every function. It's ah, it's It's great to be there. We continue to sponsor Grace offer. We have some of the biggest presence at Grace Offer. We do so many other things like connected women within the company. It's just a I would say fabulous place to be. >> You guys do a lot of great things for society. Great company, great leadership. Thank you for doing all that's phenomenal. We love covering it, too. So we'll be affect cloud now today in Silicon Valley. Women in data science at Stanford and among them the >> greatest passion of our things. Straight here. >> Thanks for coming on this. The Cube live coverage here in Barcelona. Francisco Live twenty eighteen back with more. After the short break, I'm jump area with evil Aunt. Be right back

>> Live, from Barcelona, Spain, it's theCUBE! Covering Cisco Live! Europe brought to you by Cisco and its ecosystem partners. >> Welcome back everyone, live here, in Barcelona, Spain, it's theCUBE's coverage of Cisco Live! Europe 2019, I'm John Furrier my co-host Dave Vellante, our next guest is Liz Centoni, Senior Vice President, General Manager of the IoT group at Cisco, formerly as part of the engineering team, Cube alumni, great to see you again, thanks for coming on! >> Great to be here, always good to see you guys. >> So you're in the center of a lot of news, IOT, edge of the network, redefining networking on stage, we heard that, talk about your role in the organization of Cisco and the products that you now have and what's goin' on here. >> So I run our IoT Business group. Similar to what we do with EN, data center, all of that, it has the engineering team, product management team, we build products, solutions, that includes hardware, software, silicon, take 'em out to market, really in IoT it's about you know, the technology conversation comes second. It's like, what can you deliver in terms of use case, and business outcomes that comes first. And it's more about what technology can enable that, so the conversations we have with customers are around, how can you really solve my kind of real problems. Everything from, I want to grow my top line, I want to get closer to my customers, because the closer I get to my customers, I know them better, so obviously, I can turn around and grow my top line. And I want to optimize everything from internal process to external process, because just improves my bottom line at the end of the day. >> So a lot of news happening here around your team, but first, talk about redefining networking in context to your part because, edge of the network has always been, what is, you know, edge of the network, now it's extending further, IoT is one of those things that people are looking at from a digitization standpoint, turning on more intelligence, with a factory floor or other areas, how is IoT changing and what is it today? >> So you gave an example of you know, digitizing something like a factory floor. Right, so let's talk about that. So what do customers on the factory floor want to do? They've already automated a number of this factory floors, but what they want to do is get more efficient. They want better EL, they want better quality. They want to bring security all the way down to the plant floor, 'cause the more and more you connect things, the more you've just expanded your threat surface out pretty significantly. So they want to bring security down to the plant floor because these are environments that are not brand new they had brown field equipment they had green field equipment. They want to be able to have control over what device gets on the network with things like device profiling. They want to be able to do things like, create zones so that they can do that with things like network segmentation so when and if an attack does happen, they can contain the attack as much as possible alright? Now, what you need in terms of a factory floor, automation, security, to be able to scale, to have that flexibility, that's no different than what you have in the enterprise already. I mean we've been working with our IT and enterprise customers for years, and you know, they, it's about automation and security, it's about simplicity. Why not extend that out, the talent that IT has, the capability that it has, it really is a connective tissue that you're extending your network from that carpeted space, or your clean space into outside of the office, or into the non-carpeted space so it's perfect in terms of saying, it's about extending the network into the non-traditional space that probably IT doesn't go into today. >> Well right and it's a new constituency, right? So, how are you sort of forging new relationships, new partnerships, what is, describe what that's like, with the operations technology folks. >> I mean at Cisco, we have great partnerships with the IT organization, right? I mean we've got more than 840,000 customers and our sales teams, our product teams do a good job in terms of listening to customers. We're talking more and more to the line of business, we're talking more and more to the operational teams. Because at the end of the day, I want to be candid. You know, going to a manufacturing floor, I've never run a plant floor, right? There are not very many people in the team who can say, I've been a plant manager before. They know their processes, they're concerned about 24/7 operation, hey I want to be in compliance with the fire marshal. Physical safety of my workers. We come in with that IP knowledge, that security knowledge that they need. It's a partnership, I mean people talk about IT and OT convergence, usually, convergence means that, mm, somebody's going to lose their job, this is more and IT and OT partnership. And most of these digitization efforts, usually come in for the CIO level or a chief digitization officer, we've got good relationships there already. The second part is, Cisco's been in this for quite some time our teams already have relationships at the plant level at the grid level, operator level, you know, in the oil and gas area, but we need to build more and more of that. Because building more and more of that is really understanding what business problems are they looking to solve? Then we can bring the technology to it. >> Liz, what's that in the enablement, you mentioned partnership, 'cause that's a good point, 'cause people think, oh, someone wins, someone loses, the partnership is you're enabling, you're bringing new capability into the physical world, you know, from wind farms to whatever. What does the enablement look like, what are some of the things that happen when you guys come into these environments that are being redefined and re-imagined or for the first time? >> Yeah I would say, you know, I'd use what our customer said this morning. And what he said was, IT has the skills that I need alright? They have the IP skills, they have the security skills. These are all the things that I need. I want my guys to focus on kind of business processes. Around things that they know best. And so, we're working with IT as part of what we're putting this extended enterprise, extending Intent-Based Networking to the IoT edge means, IT already knows our tools, our capabilities, we're now saying, we can extend that, let's go out, figure out what those use cases are together, this is why we're working with, not just the IT, we're working with our channel partners as well, who can enable these implementations on IoT implementations work well. Part of this is also a constant, you know, learning from each other. We learned from the operational teams is that, hey you can start a proof of concept really well, but you can't really take it to deployment unless you address things around the complexity, the scale and the security, that's where we can come in and help. >> And you can't just come in and throw your switches and routers over the fence and say, okay, here you go. You have to develop specific solutions for this world right? And can you talk about that a little bit? And tell us what you're doing here? >> Absolutely, so, if you look at the networking, industrial networking portfolio that we have, it's built on the same catalyst, ISR, wireless APs or firewall, but they're more customized for this non-carpeted space, right? You've got to take into consideration that these are not sitting in a controlled environment. So, we test them for temperature, for shock, for vibration, but it's also built on the same software, so we're talking about the same software platform, you get the same automation features, you get the same analytics features, it's managed by DNA center, so, even though we're customizing the hardware for this environment, the software platform that you get, is pretty much the same, so IT can come in and manage both those environments, but IT also needs an understanding of what's the operational team looking to solve for? >> Liz, I want to ask you about the psychology of the buyer in this market. Because OT, they're running stuff that's just turnin' on, put in the lightbulb, make it work, what I got to deploy something? So their kind of expectations might be different, can you share what the expectations are, for the kind of experience that they want to have with that? >> I use utility as a great example. And our customer from Ennogie, I think explained this really well. This is thing that we learned from our customers right? I haven't been in a sub station, I've been in a data center multiple times, but I haven't been in a sub station, so when they're talking about automating sub station, we work with customers, we've been doing this over the last 10 years, we've been working with that Ennogie team for the last two years, they taught us really, how they secure and manage in these environments. You're not going to find a CCIE in this environment. So when you want to send somebody out to like 60,000 sub stations, and you want to check on, hey do I still have VPN connectivity? They're not going to be able to troubleshoot it. What we did is based on the customer's ask, put a green light on their LED that shines green, all the technician does is look at it and says, it's okay. If not, they call back in terms of troubleshooting it. It was just a simple example of where, it's different in terms of how they secure and manage and the talent that they have is different than what's in the IT space, so you've got to make sure that your products also cover what the operational teams need, because you're not dealing with the CCIE or the IP expert. >> So it's the classic market fit, product market fit for what they're expecting. >> Correct. >> LEDs, you can't go wrong with a green light, I mean. (laughter) >> You know, everybody goes, that's such an easy thing, it's like well, it was not that perceptive to us. >> What's the biggest thing you've learned as you've moved from Cisco engineering out to the new frontier on the edge here, what are the learnings that you've seen, obviously growing mark early, it's only going to get large and more complicated, more automation, more AI, more things, what's your learnings, what have you seen so far that's a takeaway? >> So I'll say, I'm still in Cisco engineering. The reason we're in IoT is that, a secure and reliable network, that's the foundation of any IoT deployment alright? You can go out and buy the best sensor, buy the best application buy the best middleware, but if you don't have that foundation, that's secure and reliable, those IoT projects are not going to take off, so it's pretty simple, everyone's network is the enabler of their business outcome, and that's why we're in it. So this is really about extending that network out, but at the same time, understanding what are we looking to solve for, right? So in many cases, we work with third party partners, 'cause some of them know these domains much better than we do, but we know the IP, we are the IP and the security experts, and we bring that to the table better than anybody else. >> And over the top, DevNet showing here for the second year that we've covered it, here in DevNet zone, that when you have that secure network that's programmable, really cool things can develop on top of it, that's a great opportunity. >> Yeah, this is, I'm super excited that we now have an IoT DevNet. You know, as part of our entire Cisco DevNet. Half a million dev-opers you know, Susie Wee and team done a fabulous job. There's more and more dev-opers going to be starting to develop at the IoT edge, at the edge of the network, right? So when you look at that as, our platforms today with IRX on top of it, make this a software platform that dev-opers can actually build applications to, it's really about, you know, we're ready, ISVs and dev-opers unleashing those applications at the IoT edge. And with Susie making that, you know, available in terms of the tools, the resources, the sandbox that you can get, it's like, we expect to see more and more dev-opers building those applications at the edge. >> We got to talk about your announcements, right, so. >> Oh yeah, exciting set of announcements. >> What's the hard news? >> So we launched four things today as part of extending IBN, or Intent-Based Networking to the IoT edge, the first one is, we've got three new Cisco-validated designs. So think of a validated design as enabling our customers to actually accelerate their deployments, so our engineering teams try to mimic, as much as possible, a customer's environment. And they do this pre-integration, pre-testing of our products, third party products. And we actually put 'em out by industry. So we have three new ones out there for manufacturing, for utilities, and for remote and mobile assets, that's one. The second one is we're launching two new hardware platforms, a next-generation catalyst industrial ethernet switch, it's for modularity of interfaces, and it's got nine expansion packs. The idea is, make it as flexible as possible for a customer's deployment. Because these boxes might sit in an environment not just for three years like in a campus, they could sit there for five, for seven, for 10 years. So as you know, they, adding on, giving them that flexibility, they can be a base system and just change the expansion modules, we also launched our next-generation industrial router. It actually is the industry's probably first and only full IPV Six-capable industrial router. And it's got, again flexibility of interfaces, we have LTE, we have fiber, we have copper, you want dual LTE you can actually slap an expansion pack right on top of it. When 5G comes in, you just take the LTE module out, you put 5G, so it's 5G ready. >> Expansions on there. >> And it's based on IOSXC, it's managed by DNA Center, and it's edge-enabled, so they run IOX, you can build your applications, and load 'em on. So we can build 'em, third parties can build 'em. >> And the DevNet piece here as well. >> And the DevNet piece is the third one where we now have, you know, an IoT dev-oper center in the DevNet zone, so with all the tools that are available, it enables dev-opers and ISVs to actually build on top of IOX today. In fact, we actually have more than a couple of three examples that are already doing that. And the fourth thing is, we depend on a large ecosystem of channel partners, so we've launched an IoT specialization training program to enable them to actually help our customers' implementation go faster. >> Mhm. >> So those are the four things that we brought together. The key thing for us was, designing these for scale, flexibility, and security. >> And are these capabilities available today is that right? >> Absolutely, in fact, if you go in, we're shipping in two weeks! And you can see them at the innovation showcase, it's actually very cool. >> I was going to mention, you brought up the ecosystem, glad you brought that up, I was going to ask about how that's developing, I could only imagine new sets of names coming out of the industry in terms of building on these IOTs since this demand for IOT, it's an emerging market in terms of newness, with a lot of head room, so what's the ecosystem look like, is there a pattern, is it ISVs, VARs, does it take the shape of the classic ecosystem or is it a new set of characters or, what's the makeup of the ecosystem? >> Yeah, it's I would say it's, in many ways, if you've been in the IoT world for some time, you'll say, you know, it's not like there's a whole new set of characters. Yes, you have more cloud players in there, you probably have more SIs in there, but it's been like, the distributors are in there, the machine-builders, the OT platforms, these are folks who've been doing this for a long time. It's more around, how do you partner, and where do you monetize? We know where you know, the value we bring in, we rely on, we work very closely with those OT partners, machine-builders, SIs, the cloud partners, to go to market and deliver this. You're right, the market's going to evolve, because the whole new conversation is around data. What do I collect, what I compute at the edge? Where do I route it to, should I take it to my on-premise's data centers, should I take it to the cloud? Who gets control over that data, how do I make sure that I have control over the data as the customer, and I have control over who gets to see it. So I think this will be a evolving conversation. This is something we're enabling with one of our Kinetic platforms, which are not launched, it's already launched in terms of enabling customers to have control over the data and manage the data as well. >> And bringing all the portfolio of Cisco security analytics, management to the table, that puts anything in the world that has power and connectivity to be a device to connect into a system, this is the, I mean how obvious can it be? It's going to be huge! >> It's great that you think it's obvious, that's exactly what we're tryin' to tell our customers-- >> How to do it-- >> Well this is about extending this out. >> Yeah, how do we do it's the playbook right? So, each business has its own unique, there's no general purpose IoT is there? >> Correct. >> It's pretty much on a custom custom-- well thanks for coming on Liz, appreciate it. Want to ask you one final question. You know, I was really impressed with Karen had a great session, Karen Walker had a great session yesterday, impact with women, we interviewed you at Grave Hopper in 2015. Cisco's doing amazing work, can you take a minute to talk about some of the things that Cisco's doing around women in computing, women in STEM, just great momentum, great success story and great leadership. >> I would say look at our leadership at Chuck's level, and I think that's a great example in terms of, he brings people on depending on what they can, what they bring to the table, right? They just happen to be a lot of women out there, and the reality is, I work for a company that believes in inclusion, whether it's gender, race, different experiences, different thoughts, different perspectives because, that's where truly, in terms of, you can bring in the culture that drives that innovation. I've been sponsoring our Women in Science and Engineering for I can't remember, the last four or five years. It's a community that continues to grow. And, the reality is, we don't sit in there and talk about, you know, woe is me, and all the things that are happening, what we talk about is, hey what are the cool new technologies that are out there, how do I get my hands on 'em? And yeah, there are, we talk about some things where women are a little reticent and shy to do, so what we learn from other peoples' experiences, many time the guys are very interesting, so what do you sit down there and talk, and I said trust me it's not like, a whining and moaning session, it's more in terms of where we learn from each other. >> Peers talking and sharing ideas-- >> Absolutely. >> Of innovation and building things. >> Yep, and we've got, you know, we look around and we've got a great set of woman leaders throughout the company at every single level in every function. It's great to be there, we continue to sponsor our Grace Hopper, we have some of the biggest presence at Grace Hopper, we do so many other things like connected women within the company. It's just a, I would say, fabulous place to be. >> You guys do a lot of great things for society, great company, great leadership, thank you for doing all of that, it's phenomenal, we love covering it too, so, we'll be at the cloud now today in Silicon Valley, Women in Data Science at Stanford, and among other great things. >> It's definitely a passion of ours. >> Yeah. (talking over each other) >> Awesome, that's great to hear. >> Thanks for coming on, this is theCUBE, live coverage here in Barcelona for Cisco Live! 2018, back with more after this short break, I'm John Furrier with Dave Vellante, be right back. (upbeat music)

>> Live from Seattle, Washington it's theCUBE covering KubeCon and CloudNativeCom North America 2018. Brought to you by Red Hat the cloud-native computing foundation and its ecosystem partner. >> Welcome back everyone, it's theCUBE's live coverage here in Seattle of KubeCon and CloudNativeCon 2018. I'm John Furrier, with Stu Miniman, host of theCUBE. Three days of live coverage. Wall to wall, 8000 people here. Doubled from the previous event in North America, expanding globally, we are here with Liz Rice, technology analyst, evangelist at Aqua Security and program co-chair here at KubeCon, CloudNativeCon. Liz, thanks for joining us. >> Thank you for having me. >> I know you had a busy day, keynotes and all. A lot of activity, a lot of hand shaking, walking around, very crowded. >> It is, we're packed. We're absolutely at capacity here and the event sold out and it's busy. >> A lot of energy, real quick, I know you guys did a lot of work, you guys always do a great job, exceptional performance again. >> Thank you. >> CNCF does a great job on the content programming. It's about the open source communities. That's fundamental, a lot of end users, both participating and consuming. Vendor list is expanding. Putting the program together gets challenging when you have these kind of numbers. What were the themes? How did you put it all together? What was resonating? What's the focus? >> Yeah, it was so hard, we had so many applications that we could only accept 13%, which makes it almost impossible some of the decisions you have to make. And some of the things that were coming out, were like Knative, a lot of submissions around Knative. Serverless in general obviously being quite a hot topic, I would say across our industry. Really great talks from end users and we've seen a few on the keynote stage. Where some brands that we're all aware of, people like Airbnb, sharing their stories of what they've done to make their deployments, their cloud-native deployments, their use of kubernetes successful. So it's not just working from the ties, and doing some experiments, they are telling us how they've done this for real. >> You had a very successful KubeCon in Copenhagen. And so how did you integrate from Copenhagen to here. What were some of the inefficiencies? Obviously, the bigger numbers here. You recently had China the success where, we've reported on SiliconANGLE, the open source consumption and contribution is off the charts. It's huge, it's growing and it's a new dynamic. So between China, and Copenhagen, here, interesting things happening. >> China was phenomenal for me. It was my first trip to China, so it was eye-opening in all sorts of respects. And one of the really interesting things there was the use of machine learning. The uses of kube flow, real life examples. Again I think there is something about how much data they've been able to collect in China. But we heard some really great stories of, for example, electricity companies using machine learning on kubernetes to predict demand. It was fascinating. >> It's a lot of adoption. >> Yes. >> They are at the front end, they are a mobile culture. IOT is booming over there, it's just massive. >> Absolutely. >> Alright here in Seattle, obviously Seattle home of AWS, and I was just talking to some folks here locally in Seattle, just this morning, they said they think this is the biggest conference of the year here in Seattle. Which is really telling where you guys have come from. Interesting dynamic. A lot of new ecosystem partners. What's happening? It seems to be energy, the buzz. There's a subtext here that's buzzing around the hallways. What's the most important thing that people should be taking away from this event this year? >> I think the scale of it is coming from real adoption and businesses that are moving their applications into the cloud. Public cloud and hybrid cloud and finding success through doing that with cloud native components. You mentioned the end users who want to be part of the community, and they actually wanted to contribute to the community. You can look around the hall and see booths from, like Uber's over there. They're really contributing to this community. It's not just a bunch of enthusiasts, it's for real. >> Problems being solved, real company end users. >> So Liz, one of the things we've been looking at this is not a monolith here. You've actually got a whole lot of communities. As I've been wandering the floor, if I'm talking to people. We had Matt come on to talk about Envoy and they had their own conference at the beginning of the week and they had 250 people. As I'm wandering around, you talk to a number and it's like oh, I'm here all about Helm. You know there's different service meshes all over the place that everybody is talking about. >> Yeah another big theme. >> You're heavily focused on the security aspects there. I believe you've got a project that Aqua has been involved in. It was kube-hunter if I've got it. Maybe before you talk about kube-hunter, maybe just talk about balancing, this isn't one community, it's gotten really big. Do we need to break this into a micro-services space show? We'll have the core, but lots of other things and spread it out all over the world. >> Sure, it's a real challenge as this community is growing so fast and trying to keep the community feel. Balancing what the contributors want to do and making sure they're getting value and having the conversations they want, but also enabling the vendors, and the end users, and every constituent part to get something good out of this conference. It's a challenge as this gets bigger. There's no kind of, if this doubles again, will it feel the same? That's hard to imagine. So we got to think carefully about how-- >> We've seen that happen and it would not, even from last year to this year was a big change for a lot of people. >> For sure. >> So kube-hunter tell us about that. >> Yeah, kube-hunter, yes, kube-hunter is one of our open source projects at Aqua. It's basically penetration testing for kubernetes clusters, so it's written in Python. It attempts to make network requests looking for things like the open ports. It will tell you if you got some misconfigurations, 'cause a lot of the security issues with kubernetes can come about through poor configuration. And the other thing you can do, you can run it from externally to your cluster. You can also run it inside a pod inside your cluster and then that's simulating what might happen if an attacker got into your cluster, what could they do from there. They compromised a pod which could happen to a software vulnerability. Once they're in the pod, how vulnerable are you? What's the blast radius of that attack? And kube-hunter can help you see whether it's a complete disaster or actually fairly contained. >> Alright, Liz how are we doing from a security standpoint? We've watched the rise of containers over the last few years. And it's like okay wait do I need to put in some kind of lightweight VM? Do I do something there? What can I trust? What do I do? At AWS Reinvent a couple of weeks ago, there's the whole container marketplace. Feels like we are making progress but still plenty of work to do. >> Right, right, container security has lots of parts to it as you go through the life cycle of a container. Actually at AWS Reinvent, Aqua was recognized as having, I think they called it competency. Which I think it's a bit better than competency in container security. >> That's a complement I believe. >> Yeah, really complement, really competent. I think as community on the open source level, there are lots of good things happening. For example, the defaults in kubernetes have been getting better and better. If you are an enterprise, and particularly if you're a financial user, or a media company, or a government organization, you have much stronger requirements from a security perspective and that's where the open source tooling on its own may not be sufficient, and you may need to plug in commercial solutions like Aqua to really beef that up. And also to provide that end to end security right from when you're building your image through to the run time protection which is really powerful. >> Security has got to be built in from the beginning. Let me get your thoughts on end user traction and the huge demand for what end users are doing. I know you guys are seeing on the program side, the Linux foundation, CNC was talking about trying to get more case studies. We're seeing the end users prominent here. You mentioned Uber, Apple's here. A bunch of other companies, they're here. So end users are not only just contributing, they are also consuming. How are the new enterprises that are coming in consuming and interacting and engaging with kubernetes? Where are they on the IQ, if you will, level and what are they engaging on? Kubernetes has matured a bit and ready. It's been deployed, people using it. People gathering around it, but now people are starting to consume and deploy it at different scales. What's the end user uptake? What's the hot areas? What do you see the most people digging in? >> Great question, so I think we are seeing a lot of, particularly, I want to say like mature start-ups, so the Ubers and the Airbnbs and the Lyfts. They've got these massive scaled technology problems, and kubernetes is giving them, and the whole cloud-native community around it, it's giving them the ability to do these kind of custom things that they need to do. The kind of weird and wonderful things. They can add whatever adaptations they need, that maybe they wouldn't get if they were in a traditional architecture. So they're kind of the prominent voices that we are hearing right now. But at Aqua we are seeing some of these, maybe what you might call more traditional businesses like banks. They want to replicate that. They want to shape functionality really quickly. They are seeing challenges from upstart and they want to compete. So they know they've got to shift functionality quickly. They've got to do continuous deployment. Containers enable that. The whole cloud-native world enables that and that's where the adoption's from. >> They can take the blueprints from the people who built it from the ground up, the large scale startups, cloud-native in the beginning, and kind of apply the traditional IT kind of approach with the same tooling and the same platform. >> And we are seeing some interesting things around making that easier. So things like the CNAB, the cloud-native application bundling, that is coming out at Microsoft and Docker are involved in that. I think that's all to do with making it easier for enterprises to just go, yeah, this is the application I want to run it in the cloud. >> So let me ask you a question around the customer end users that we see coming onboard, because you have the upstream kind of community, the downstream benefits are impacting certainly IT and then developers, right? The classic developers, IT is starting to reimagine their infrastructure. All the goodness with cloud, and machine learning, and application is being redefined. It's changing the investment. So in 2019, what's your view on how companies are shaping their investment strategy to IT investment or technology investment strategies with cloud-native? Because this is a real trend that you just pointed out. Okay I'm a big company and I've used the old way and now I want the new way. So there's a lot of okay, instant start. Turn the key, does it run? There's a lot of managed services here, so the new persona of customer. How does that impact their investment, IT investments in your mind? What are you seeing please share any color commentary around that? >> I'm sure we're all aware that we're seeing shifts away from the traditional data center into public cloud which has implications around opex rather than capex. And I guess following on from that people worrying about whether vendor lock-in is a thing. Should they be just adopting in one public cloud or perhaps putting their eggs across different baskets? Should they be using these managed platforms? We have all these different distributions, we have these different managed solutions for kubernetes, there's a lot of choice out there. I think it's going to be interesting to see how that shapes out over the next few years. Are all these different distributions going to find a niche or how's that going to work? >> Matt Klein had a great observation. He was on earlier today from Lyft. He says look to solve a problem, use the tech to solve a problem, and then iterate, build on that. It's iteration mull of dev, ops. I think that's a good starting point. There's no magic silver bullet here. There's no magic answer, I think it's more of just get in there and get it going. The other question I have for you is 2019 prediction for kubernetes. What's going to happen this coming year? We're seeing this picture now, 8000 people, diverse audience. >> Yeah. >> What's the prediction 2019 for kubernetes? >> Oh, great question. I think maybe broader than just kubernetes, but the kind of cloud-native. Because kubernetes is like Janet said in her keynote this morning it's essentially boring. It kind of does what it's supposed to do now. I think what's going to be interesting is seeing those other pieces around it and above it, the improved developer experiences making it easier for companies to adopt. Maybe some of these choices around things like what service mesh you're going to use. How you're going to implement your observability. How you're going to deploy all this stuff without needing to hire 20 super detailed experts. We've got all the experts in this stuff. They're kind of here. The early adopters, great. Maybe that next wave, how are they going to be able to take advantage of this cloud-native? >> I think the programmability is key. Well great to have-- >> I think a big part of that is actually is going to be serverless. The ease of using serverless rather than the flexibility you get out of-- >> The millisecond latency around compute, yeah it's great. Well thanks for coming on, really appreciate it. Final question for you, what surprised you this year? Is there one thing that jumped out at you that you didn't expect? Good, bad or ugly? Great show here, it was packed. The waiting list was like 1500. What was the surprise this year from a program standpoint? >> I think actually the nicest surprise was the contribution of Phippy and all those lovely characters from Phippy Goes to the Zoo and those characters being donated by Microsoft, Matt Butcher and Karen Chu's work, was terrific. And it's just beautiful, just lovely. >> That's awesome, thanks so much Liz. Appreciate Liz right here. Program co-chair at KubeCon, CloudNativeCon, also technology evangelist at Aqua Security. That's her day job and her other job, she's running the content programming which is very huge here. Congratulations, I know it's tough work, a great job. >> Thank you very much. >> It's theCUBE coverage, breaking down all the action here at KubeCon and CloudNativeCon. I'm John Furrier and Stu Miniman, stay with us. Three days of wall-to-wall coverage. We're only on day two, we've got a whole nother day. A lot of great stories coming out of here and great content. Stay with us for more after this short break. (upbeat music)

>> Announcer: Live from Copenhagen, Denmark, it's theCUBE. Covering KubeCon and CloudNativeCon Europe 2018. Brought to you by the Cloud Native Computing Foundation and its ecosystem partners. >> Hello, everyone. Welcome back to theCUBE's exclusive coverage here in Copenhagen, Denmark for KubeCon 2018, part of the CNCF Cloud Native Compute Foundation, which is part of the Linux Foundation. I'm John Furrier, your host. We've got two great guests here, we've got Liz Rice, the co-chair of KubeCon and CloudNativeCon, kind of a dual naming because it's Kubernetes and it's Cloud Native and also technology evangelist at Aqua Security. She's co-chairing with Kelsey Hightower who will be on later today, and CUBE alumni as well, and Janet Kuo who is a software engineer at Google. Welcome to theCUBE, thanks for coming on. >> Yeah, thanks for inviting us. >> Super excited, we have a lot of energy even though we've got interviews all day and it's kind of, we're holding the line here. It's almost a celebration but also not a celebration because there's more work to do with Kubernetes. Just the growth of the CNCF continues to hit some interesting good performance KPIs on metrics. Growth's up on the membership, satisfaction is high, Kubernetes is being called a de facto standard. So by all kind of general qualitative metrics and quantitative, it's doing well. >> Lauren: It's doing great. >> But it's just the beginning. >> Yeah, yeah. I talked yesterday a little bit in, in the keynote, about project updates, about how Kubernetes has graduated. That's a real signal of maturity. It's a signal to the end-user companies out there that you know, the risk, nothing is ever risk-free, but you know, Kubernetes is here to stay. It's stable, it's got stable governance model, you know, it's not going away. >> John: It's working. >> It's going to continue to evolve and improve. But it's really working, and we've got end users, you know, not only happy and using it, they're prepared to come to this conference and share their stories, share their learnings, it's brilliant. >> Yeah, and Janet also, you know, you talk about China, we have announcement that, I don't know if it's formally announced, but Shanghai, is it out there now? >> Lauren: It is. >> Okay, so Shanghai in, I think November 14th, let me get the dates here, 14th and 15th in Shanghai, China. >> Janet: Yeah. >> Where it's going to be presented in either English or in Chinese, so it's going to be fully translated. Give us the update. >> Yeah, it will be fully translated, and we'll have a CFP coming soon, and people will be submitting their talks in English but they can choose to present either in English or Chinese. >> Can you help us get a CUBE host that can translate theCUBE for us? We need some, if you're out there watching, we need some hosts in China. But in all seriousness, this is a global framework, and this is again the theme of Cloud Native, you know. Being my age, I've seen the lift and shift IT world go from awesome greatness to consolidation to VMwares. I've seen the waves. But this is a different phenomenon with Cloud Native. Take a minute to share your perspectives on the global phenomenon of Cloud Native. It's a global platform, it's not just IT, it's a global platform, the cloud, and what that brings to the table for end users. >> I think for end users, if we're talking about consumers, it actually is, well what it's doing is allowing businesses to develop applications more quickly, to respond to their market needs more quickly. And end users are seeing that in more responsive applications, more responsive services, improved delivery of tech. >> And the businesses, too, have engineers on the front lines now. >> Absolutely, and there's a lot of work going on here, I think, to basically, we were talking earlier about making technology boring, you know, this Kubernetes level is really an abstraction that most application developers don't really need to know about. And making their experience easier, they can just write their code and it runs. >> So if it's invisible to the application developer, that's the success. >> That's a really helpful thing. They shouldn't have to worry about where their code is running. >> John: That's DevOps. >> Yeah, yeah. >> I think the container in Kubernetes technology or this Cloud Native technology that brings developer the ability to, you know, move fast and give them the agility to react to the business needs very quickly. And also users benefit from that and operators also, you know, can manage their applications much more easily. >> Yeah, when you have that abstraction layer, when you have that infrastructure as code, or even this new abstraction layer which is not just infrastructure, it's services, micro-services, growth has been phenomenal. You're bringing the application developer into an efficiency productivity mode where they're dictating the business model through software of the companies. So it's not just, "Hey build me something "and let's go sell it." They're on the front lines, writing the business logic of businesses and their customers. So you're seeing it's super important for them to have that ability to either double down or abandon quickly. This is what agile is. Now it's going from software to business. This, to me, I think is the highlight for me on this show. You see the dots connecting where the developers are truly in charge of actually being a business impact because they now have more capability. As you guys put this together and do the co-chair, do you and Kelsey, what do you guys do in the room, the secret room, you like, "Well let's do this on the content." I mean, 'cause there's so much to do. Take us through the process. >> So, a little bit of insight into how that whole process works. So we had well over 1,000 submissions, which, you know, there's no, I think there's like 150 slots, something like that. So that's a pretty small percentage that we can actually accept. We had an amazing program committee, I think there were around 60 people who reviewed, every individual reviewer looked at a subset. We didn't ask them to look at all thousand, that would be crazy. They scored them, that gave us a kind of first pass, like a sort of an ability to say, "Well, anything that was below average, "we can only take the top 15%, "so anything that's below average "is not going to make the cut." And then we could start looking at trying to balance, say, for example, there's been a lot of talk about were there too many Istio talks? Well, there were a lot of Istio talks because there were a lot of Istio submissions. And that says to us that the community wants to talk about Istio. >> And then number of stars, that's the number one project on the new list. I mean, Kubeflow and Istio are super hot. >> Yeah, yeah, Kubeflow's another great example, there are lots of submissions around it. We can't take them all but we can use the ratings and the advice from the program committee to try and assemble, you know, the best talks to try and bring different voices in, you know, we want to have subject matter experts and new voices. We want to have the big name companies and start-ups, we wanted to try and get a mix, you know. A diversity of opinion, really. >> And you're a membership organization so you have to balance the membership needs with the content program so, challenging with given the growth. I mean, I can only imagine. >> Yeah, so as program co-chairs, we actually have a really free hand over the content, so it's one of the really, I think, nice things about this conference. You know, sponsors do get to stand on stage and deliver their message, but they don't get to influence the actual program. The program is put together for the community, and by doing things like looking at the number of submissions, using those signals that the community want to talk about, I hope we can carry on giving the attendees that format. >> I would just say from an outsider perspective, I think that's something you want to preserve because if you look at the success of the CNCF, one thing I'm impressed by is they've really allowed a commercial environment to be fostered and enabled. But they didn't compromise the technical. >> Lauren: Yeah. >> And the content to me, content and technical tracks are super important because content, they all work together, right? So as long as there's no meddling, stay in your swim lane, whatever, whatever it is. Content is really important. >> Absolutely, yeah. >> Because that's the learning. >> Yeah, yeah. >> Okay, so what's on the cut list that you wish you could have put back on stage? Or is that too risque? You'll come back to that. >> Yeah. >> China, talk about China. Because obviously, we were super impressed last year when we went to go visit Alibaba just to the order of magnitude to the cultural mindset for their thinking around Cloud Native. And what I was most impressed with was Dr. Wong was talking about artistry. They just don't look at it as just technology, although they are nerdy and geeky like us in Silicon Valley. But they really were thinking about the artistry 'cause the app side of it has kind of a, not just design element to the user perspective. And they're very mobile-centric in China, so they're like, they were like, "This is what we want to do." So they were very advanced in my mind on this. Does that change the program in China vis a vis Seattle and here, is there any stark differences between Shanghai and Copenhagen and Seattle in terms of the program? Is there a certain focus? What's the insight into China? >> I think it's a little early to say 'cause we haven't yet opened the CFP. It'll be opening soon but I'm fully expecting that there will be, you know, some differences. I think the, you know, we're hoping to have speakers, a lot more speakers from China, from Asia, because it's local to them. So, like here, we tried to have a European flavor. You'll see a lot of innovators from Europe, like Spotify and the Financial Times, Monzo Bank. You know, they've all been able to share their stories with us. And I think we're hoping to get the same kind of thing in China, hear local stories as well. >> I mean that's a good call. I think conferences that do the rinse and repeat from North America and just slap it down in different regions aren't as effective as making it localized, in a way. >> Yeah. >> That's super important. >> I know that a lot of China companies, they are pretty invested pretty heavily into Kubernetes and Cloud Native technology and they are very innovative. So I actually joined a project in 2015 and I've been collaborating with a lot of Chinese contributors from China remotely on GitHub. For example, the contributors from Huawei and they've been invested a lot in this. >> And they have some contributors in the core. >> Yeah, so we are expecting to see submissions from those contributors and companies and users. >> Well, that's super exciting. We look forward to being there, and it should be excellent. We always have a fun time. The question that I want to ask you guys now, just to switch gears is, for the people watching who couldn't make it or might watch it on YouTube on Demand who didn't make the trip. What surprised you here? What's new, I'm asking, you have a view as the co-chair, you've seen it. But was there anything that surprised you, or did it go right? Nothing goes perfect. I mean, it's like my wedding, everything happens, didn't happen the way you planned it. There's always a surprise. Any wild cards, any x-factors, anything that stands out to you guys? >> So what I see from, so I attend, I think around five KubeCons. So from the first one it's only 550 people, only the small community, the contributors from Google and Red Hat and CoreOS and growing from now. We are growing from the inner circle to the outside circle, from the just contributors to also the users of it, like and also the ecosystem. Everyone that's building the technology around Cloud Native, and I see that growth and it's very surprising to me. We have a keynote yesterday from CERN and everyone is talking about their keynote, like they have I think 200 clusters, and that's amazing. And they said because of Kubernetes they can just focus on physics. >> Yeah, and that's a testimonial right there. >> Yeah. >> That was really good stories to hear, and I think maybe one of the things that surprises me, it sort of continues to surprise me is how collaborative, it's something about this kind of organization, this conference, this whole kind of movement, if you like. Where companies are coming in and sharing their learnings, and we've seen that, we've seen that a lot through the keynotes. And I think we see it on the conference floor, we see it in the hallway chat. And I think we see it in the way that the different SIGs and working groups and projects are all, kind of, collaborating on problem solving. And that's really exciting. >> That's why I was saying earlier in the beginning that there's a celebration amongst ourselves and the community. But also a realization that this is just the beginning, it's not a, it's kind of like when you get venture funding if you're a start-up. That's really when it begins, you don't celebrate, but you take a little bit of a pause. Now my personal take only to all of the hundreds of events we do a year is that I that think this community here has fought the hard DevOps battle. If you go back to 2008 timeframe, and '08, '09, '10, '11, '12, those years were, those were hyper scale years. Look at Google, Facebook, all the original DevOps engineers, they were eating glass and spitting nails. It was hard work. And it was really build your own, a lot of engineering, not just software development. So I think this, kind of like, camaraderie amongst the DevOps community saying, "Look, this is a really big "step up function with Kubernetes." Everyone's had some scar tissue. >> Yeah, I think a lot of people have learned from previous, you know, even other open source projects that they've worked on. And you see some of the amazing work that goes into the kind of, like, community governance side. The things that, you know, Paris Pittman does around contributor experience. It's so good to see people who are experts in helping developers engage, helping engineers engage, really getting to play that role. >> There's a lot of common experiences for people who have never met each other because there's people who have seen the hard work pay with scale and leverage and benefits. They see it, this is amazing. We had Sheryl from Google on saying, "When I left Google and I went out into the real world, "I was like, oh my God, "they don't actually use Borg," like, what? "What do they, how do they actually write software?" I mean, so she's a fish out of water and that, it's like, so again I think there's a lot of commonality, and it's a super great opportunity and a great community and you guys have done a great job, CNCF. And we hope to nurture that, the principles, and looking forward to China. Thanks for coming on theCUBE, we appreciate it. >> Yeah. >> Okay we're here at CNCF's KubeCon 2018, I'm John Furrier, more live coverage. Stay with us, day two of two days of CUBE coverage. Go to thecube.net, siliconangle.com for all the coverage. We'll be back, stay with us after this short break.

>> Hey everyone. Welcome back to theCUBE's coverage day two of CloudNative Security CON 23. Lisa Martin here in studio in Palo Alto with John Furrier. John, we've had some great conversations. I've had a global event. This was a global event. We had Germany on yesterday. We had the Boston Studio. We had folks on the ground in Seattle. Lot of great conversations, a lot of great momentum at this event. What is your number one takeaway with this inaugural event? >> Well, first of all, our coverage with our CUBE alumni experts coming in remotely this remote event for us, I think this event as an inaugural event stood out because one, it was done very carefully and methodically from the CNCF. I think they didn't want to overplay their hand relative to breaking out from CUBE CON So Kubernetes success and CloudNative development has been such a success and that event and ecosystem is booming, right? So that's the big story is they have the breakout event and the question was, was it a good call? Was it successful? Was it going to, would the dog hunt as they say, in this case, I think the big takeaway is that it was successful by all measures. One, people enthusiastic and confident that this has the ability to stand on its own and still contribute without taking away from the benefits and growth of Kubernetes CUBE CON and CloudNative console. So that was the key. Hallway conversations, the sessions all curated and developed properly to be different and focused for that reason. So I think the big takeaway is that the CNCF did a good job on how they rolled this out. Again, it was very intimate event small reminds me of first CUBE CON in Seattle, kind of let's test it out. Let's see how it goes. Again, clearly it was people successful and they understood why they're doing it. And as we commented out in our earlier segments this is not something new. Amazon Web Services has re:Invent and re:Inforce So a lot of parallels there. I see there. So I think good call. CNCF did the right thing. I think this has legs. And then as Dave pointed out, Dave Vellante, on our last keynote analysis was the business model of the hackers is better than the business model of the industry. They're making more money, it costs less so, you know, they're playing offense and the industry playing defense. That has to change. And as Dave pointed out we have to make the cost of hacking and breaches and cybersecurity higher so that the business model crashes. And I think that's the strategic imperative. So I think the combination of the realities of the market globally and open source has to go faster. It's good to kind of decouple and be highly cohesive in the focus. So to me that's the big takeaway. And then the other one is, is that there's a lot more security problems still unresolved. The emphasis on developers productivity is at risk here, if not solved. You saw supply chain software, again, front and center and then down in the weeds outside of Kubernetes, things like BIND and DNS were brought up. You're seeing the Linux kernel. Really important things got to be paid attention to. So I think very good call, very good focus. >> I would love if for us to be able to, as the months go on talk to some of the practitioners that actually got to attend. There were 72 sessions, that's a lot of content for a small event. Obviously to your point, very well curated. We did hear from some folks yesterday who were just excited to get the community back together in person. To your point, having this dedicated focus on CloudNativesecurity is incredibly important. You talked about, you know, the offense defense, the fact that right now the industry needs to be able to pivot from being on defense to being on offense. This is a challenging thing because it is so lucrative for hackers. But this seems to be from what we've heard in the last couple days, the right community with the right focus to be able to make that pivot. >> Yeah, and I think if you look at the success of Kubernetes, 'cause again we were there at theCUBE first one CUBE CON, the end user stories really drove end user participation. Drove the birth of Kubernetes. Left some of these CloudNative early adopters early pioneers that were using cloud hyperscale really set the table for CloudNative CON. I think you're seeing that here with this CloudNative SecurityCON where I think we're see a lot more end user stories because of the security, the hairs on fire as we heard from Madrona Ventures, you know, as they as an investor you have a lot of use cases out there where customers are leaning in with getting the rolling up their sleeves, working with open source. This has to be the driver. So I'm expecting to see the next level of SecurityCON to be end user focused. Much more than vendor focused. Where CUBECON was very end user focused and then attracted all the vendors in that grew the industry. I expect the similar pattern here where end user action will be very high at the beginning and that will essentially be the rising tide for the vendors to be then participating. So I expect almost a similar trajectory to CUBECON. >> That's a good path that it needs to all be about all the end users. One of the things I'm curious if what you heard was what are some of the key factors that are going to move CloudNative Security forward? What did you hear the last two days? >> I heard that there's a lot of security problems and no one wants to kind of brag about this but there's a lot of under the hood stuff that needs to get taken care of. So if automation scales, and we heard that from one of the startups we've just interviewed. If automation and scale continues to happen and with the business model of the hackers still booming, security has to be refactored quickly and there's going to be an opportunity structurally to use the cloud for that. So I think it's a good opportunity now to get dedicated focus on fixing things like the DNS stuff old school under the hood, plumbing, networking protocols. You're going to start to see this super cloud-like environment emerge where data's involved, everything's happening and so security has to be re imagined. And I think there's a do over opportunity for the security industry with CloudNative driving that. And I think this is the big thing that I see as an opportunity to, from a story standpoint from a coverage standpoint is that it's a do-over for security. >> One of the things that we heard yesterday is that there's a lot of it, it's a pretty high percentage of organizations that either don't have a SOCK or have a very primitive SOCK. Which kind of surprised me that at this day and age the risks are there. We talked about that today's focus and the keynote was a lot about the software supply chain and what's going on there. What did you hear in terms of the appetite for organizations through the voice of the practitioner to say, you know what guys, we got to get going because there's going to be the hackers are they're here. >> I didn't hear much about that in the coverage 'cause we weren't in the hallways. But from reading the tea leaves and talking to the folks on the ground, I think there's an implied like there's an unlimited money from customers. So it's a very robust from the data infrastructure stack building we cover with the angel investor Kane you're seeing data infrastructure's going to be part of the solution here 'cause data and security go hand in hand. So everyone's got basically checkbook wide open everyone wants to have the answer. And we commented that the co-founder of Palo Alto you had on our coverage yesterday was saying that you know, there's no real platform, there's a lot of tools out there. People will buy anything. So there's still a huge appetite and spend in security but the answer's not going to more tool sprawling. It's going to more platform auto, something that enables automation, fix some of the underlying mechanisms involved and fix it fast. So to me I think it's going to be a robust monetary opportunity because of the demand on the business side. So I don't see that changing at all and I think it's going to accelerate. >> It's a great point in terms of the demand for the business side because as we know as we said yesterday, the next Log4j is out there. It's not a matter of if this happens again it's when, it's the extent, it's how frequent we know that. So organizations all the way up to the board have to be concerned about brand reputation. Nobody wants to be the next big headline in terms of breaches and customer data being given to hackers and hackers making all this money on that. That has to go all the way up to the board and there needs to be alignment between the board and the executives at the organization in terms of how they're going to deal with security, and now. This is not a conversation that can wait. Yeah, I mean I think the five C's we talked about yesterday the culture of companies, the cloud is an enabler, you've got clusters of servers and capabilities, Kubernetes clusters, you've got code and you've got all kinds of, you know, things going on there. Each one has elements that are at risk for hacking, right? So that to me is something that's super important. I think that's why the focus on security's different and important, but it's not going to fork the main event. So that's why I think the spin out was, spinout, or the new event is a good call by the CNCF. >> One of the things today that struck me they're talking a lot about software supply chain and that's been in the headlines for quite a while now. And a stat that was shared this morning during the keynote just blew my brains that there was a 742% increase in the software supply chain attacks occurring over the last three years. It's during Covid times, that is a massive increase. The threat landscape is just growing so amorphously but organizations need to help dial that down because their success and the health of the individuals and the end users is at risk. Well, Covid is an environment where everyone's kind of working at home. So there was some disruption to infrastructure. Also, when you have change like that, there's opportunities for hackers, they'll arbitrage that big time. But I think general the landscape is changing. There's no perimeter anymore. It's CloudNative, this is where it is and people who are moving from old IT to CloudNative, they're at risk. That's why there's tons of ransomware. That's why there's tons of risk. There's just hygiene, from hygiene to architecture and like Nick said from Palo Alto, the co-founder, there's not a lot of architecture in security. So yeah, people have bulked up their security teams but you're going to start to see much more holistic thinking around redoing security. I think that's the opportunity to propel CloudNative, and I think you'll see a lot more coming out of this. >> Did you hear any specific information on some of the CloudNative projects going on that really excite you in terms of these are the right people going after the right challenges to solve in the right direction? >> Well I saw the sessions and what jumped out to me at the sessions was it's a lot of extensions of what we heard at CUBECON and I think what they want to do is take out the big items and break 'em out in security. Kubescape was one we just covered. They want to get more sandbox type stuff into the security side that's very security focused but also plays well with CUBECON. So we'll hear more about how this plays out when we're in Amsterdam coming up in April for CUBECON to hear how that ecosystem, because I think it'll be kind of a relief to kind of decouple security 'cause that gives more focus to the stakeholders in CUBECON. There's a lot of issues going on there and you know service meshes and whatnot. So it's a lot of good stuff happening. >> A lot of good stuff happening. One of the things that'll be great about CUBECON is that we always get the voice of the customer. We get vendors coming on with the voice of the customer talking about and you know in that case how they're using Kubernetes to drive the business forward. But it'll be great to be able to pull in some of the security conversations that spin out of CloudNative Security CON to understand how those end users are embracing the technology. You brought up I think Nir Zuk from Palo Alto Networks, one of the themes there when Dave and I did their Ignite event in December was, of 22, was really consolidation. There are so many tools out there that organizations have to wrap their heads around and they need to be able to have the right enablement content which this event probably delivered to figure out how do we consolidate security tools effectively, efficiently in a way that helps dial down our risk profile because the risks just seem to keep growing. >> Yeah, and I love the technical nature of all that and I think this is going to be the continued focus. Chris Aniszczyk who's the CTO listed like E and BPF we covered with Liz Rice is one of the most three important points of the conference and it's just, it's very nerdy and that's what's needed. I mean it's technical. And again, there's no real standards bodies anymore. The old days developers I think are super important to be the arbiters here. And again, what I love about the CNCF is that they're developer focused and we heard developer first even in security. So you know, this is a sea change and I think, you know, developers' choice will be the standards bodies. >> Lisa: Yeah, yeah. >> They decide the future. >> Yeah. >> And I think having the sandboxing and bringing this out will hopefully accelerate more developer choice and self-service. >> You've been talking about kind of putting the developers in the driver's seat as really being the key decision makers for a while. Did you hear information over the last couple of days that validates that? >> Yeah, absolutely. It's clearly the fact that they did this was one. The other one is, is that engineering teams and dev teams and script teams, they're blending together. It's not just separate silos and the ones that are changing their team dynamics, again, back to the culture are winning. And I think this has to happen. Security has to be embedded everywhere in making it frictionless and to provide kind of the guardrail so developers don't slow down. And I think where security has become a drag or an anchor or a blocker has been just configuration of how the organization's handling it. So I think when people recognize that the developers are in charge and they're should be driving the application development you got to make sure that's secure. And so that's always going to be friction and I think whoever does it, whoever unlocks that for the developer to go faster will win. >> Right. Oh, that's what I'm sure magic to a developer's ear is the ability to go faster and be able to focus on co-development in a secure fashion. What are some of the things that you're excited about for CUBECON. Here we are in February, 2023 and CUBECON is just around the corner in April. What are some of the things that you're excited about based on the groundswell momentum that this first inaugural CloudNative Security CON is generating from a community, a culture perspective? >> I think this year's going to be very interesting 'cause we have an economic challenge globally. There's all kinds of geopolitical things happening. I think there's going to be very entrepreneurial activity this year more than ever. I think you're going to see a lot more innovative projects ideas hitting the table. I think it's going to be a lot more entrepreneurial just because the cycle we're in. And also I think the acceleration of mainstream deployments of out of the CNCF's main event CUBECON will happen. You'll see a lot more successes, scale, more clarity on where the security holes are or aren't. Where the benefits are. I think containers and microservices are continuing to surge. I think the Cloud scale hyperscale as Amazon, Azure, Google will be more aggressive. I think AI will be a big theme this year. I think you can see how data is going to infect some of the innovation thinking. I'm really excited about the data infrastructure because it powers a lot of things in the Cloud. So I think the Amazon Web Services, Azure next level gen clouds will impact what happens in the CloudNative foundation. >> Did you have any conversations yesterday or today with respect to AI and security? Was that a focus of anybody's? Talk to me about that. >> Well, I didn't hear any sessions on AI but we saw some demos on stage. But they're teasing out that this is an augmentation to their mission, right? So I think a lot of people are looking at AI as, again, like I always said there's the naysayers who think it's kind of a gimmick or nothing to see here, and then some are just going to blown away. I think the people who are alpha geeks and the industry connect the dots and understand that AI is going to be an accelerant to a lot of heavy lifting that was either manual, you know, hard to do things that was boring or muck as they say. I think that's going to be where you'll see the AI stories where it's going to accelerate either ways to make security better or make developers more confident and productive. >> Or both. >> Yeah. So definitely AI will be part of it. Yeah, definitely. One of the things too that I'm wondering if, you know, we talk about CloudNative and the goal of it, the importance of it. Do you think that this event, in terms of what we were able to see, obviously being remote the event going on in Seattle, us being here in Palo Alto and Boston and guests on from Seattle and Germany and all over, did you hear the really the validation for why CloudNative Security why CloudNative is important for organizations whether it's a bank or a hospital or a retailer? Is that validation clear and present? >> Yeah, absolutely. I think it was implied. I don't think there was like anyone's trying to debate that. I think this conference was more of it's assumed and they were really trying to push the ability to make security less defensive, more offensive and more accelerated into the solving the problems with the businesses that are out there. So clearly the CloudNative community understands where the security challenges are and where they're emerging. So having a dedicated event will help address that. And they've got great co-chairs too that put it together. So I think that's very positive. >> Yeah. Do you think, is it possible, I mean, like you said several times today so eloquently the industry's on the defense when it comes to security and the hackers are on the offense. Is it really possible to make that switch or obviously get some balances. As technology advances and industry gets to take advantage of that, so do the hackers, is that balance achievable? >> Absolutely. I mean, I think totally achievable. The question's going to be what's the environment going to be like? And I remember as context to understanding whether it's viable or not, is to look at, just go back 13 years ago, I remember in 2010 Amazon was viewed as an unsecure environment. Everyone's saying, "Oh, the cloud is not secure." And I remember interviewing Steve Schmidt at AWS and we discussed specifically how Amazon Cloud was being leveraged by hackers. They made it more complex for the hackers. And he said, "This is just the beginning." It's kind of like barbed wire on a fence. It's yeah, you're not going to climb it so people can get over it. And so since then what's happened is the Cloud has become more secure than on premises for a lot of either you know, personnel reasons, culture reasons, not updating, you know, from patches to just being insecure to be more insecure. So that to me means that the flip the script can be flipped. >> Yeah. And I think with CloudNative they can build in automation and code to solve some of these problems and make it more complex for the hacker. >> Lisa: Yes. >> And increase the cost. >> Yeah, exactly. Make it more complex. Increase the cost. That'll be in interesting journey to follow. So John, here we are early February, 2023 theCUBE starting out strong as always. What year are we in, 12? Year 12? >> 13th year >> 13! What's next for theCUBE? What's coming up that excites you? >> Well, we're going to do a lot more events. We got the theCUBE in studio that I call theCUBE Center as kind of internal code word, but like, this is more about getting the word out that we can cover events remotely as events are starting to change with hybrid, digital is going to be a big part of that. So I think you're going to see a lot more CUBE on location. We're going to do, still do theCUBE and have theCUBE cover events from the studio to get deeper perspective because we can then bring people in remote through our our studio team. We can bring our CUBE alumni in. We have a corpus of content and experts to bring to table. So I think the coverage will be increased. The expertise and data will be flowing through theCUBE and so Cube Center, CUBE CUBE Studio. >> Lisa: Love it. >> Will be a integral part of our coverage. >> I love that. And we have such great conversations with guests in person, but also virtually, digitally as well. We still get the voices of the practitioners and the customers and the vendors and the partner ecosystem really kind of lauded loud and clear through theCUBE megaphone as I would say. >> And of course getting the clips out there, getting the highlights. >> Yeah. >> Getting more stories. No stories too small for theCUBE. We can make it easy to get the best content. >> The best content. John, it's been fun covering CloudNative security CON with you with you. And Dave and our guests, thank you so much for the opportunity and looking forward to the next event. >> John: All right. We'll see you at Amsterdam. >> Yeah, I'll be there. We want to thank you so much for watching TheCUBES's two day coverage of CloudNative Security CON 23. We're live in Palo Alto. You are live wherever you are and we appreciate your time and your view of this event. For John Furrier, Dave Vellante, I'm Lisa Martin. Thanks for watching guys. We'll see you at the next show.

>> John Furrier: Hello, welcome back to theCUBE's coverage of Cloud Native Security Con 2023 North America the inaugural event. I'm John Furrier, host of theCUBE, along with Dave Alonte and Lisa Martin covering from the studio. But we have on location Emmy Eide, who is with Red Hat, director of Supply Chain Security. Emmy, great to have you on from location. Thanks for joining us. >> Emmy Eide: Yeah, thank you. >> So everyone wants to know this event is new, it's an aural event, cloud native con, coup con. Very successful. Was this event successful? They all want to know what's going on there. What's the vibe? What's the tracks like? Is it different? Why this event? Was it successful? What's different? >> Yeah, I've really enjoyed being here. The food is wonderful. There's also quite a few vendors here that are just some really cool emerging technologies coming out and a lot from open source, which is really cool to see as well. The talks are very interesting. It's really, they're very diverse in subject but still all security related which is really cool to see. And there's also a lot of different perspectives of how to approach security problems and the people behind them, which I love to see. And it's very nice to hear the different innovative ideas that we can go about doing security. >> We heard from some startups as well that they're very happy with the, with the decision to have a dedicated event. Red Hat is no stranger to open source. Obviously coup con, you guys are very successful there in cloud native con, Now the security con. Why do you think they did this? What's the vibe? What's the rationale? What's your take on this? And what's different from a topic standpoint? >> For non-security specific like events? Is that what you mean? >> What's different from coup con, cloud native con, and here at the cloud native security con? Obviously security's the focus. Is it just deeper dives? Is it more under the hood? Is it root problems or is this beyond Kubernetes? What's the focus, I guess. People want to know, you know, why the new event? >> I mean, there's a lot of focus on supply chain security, right? Like that's the hot topic in security right now. So that's been a huge focus. I can't speak to the differences of those other conferences. I haven't been able to attend them. But I will say that having a security specific conference, it really focuses on the open community and how technology is evolving, and how do you apply security. It's not just talking about tools which I think other conferences tend to focus on just the tools and you can really, I think, get lost in that as someone trying to learn about security or trying to even implement security, but they talk about what it takes to implement those tools, What's behind the people behind implementing those tools? >> Let's get into some of the key topics that we've identified and get your reaction. One, supply chain security, which I know you'll give a lot of commentary on 'cause that's your focus. Also we heard, like, Liz Rice talking about the extended Berkeley packet filtering. Okay, that's big. You know, your root kernel management, that's big. Developer productivity was kind of implied around removing the blockers of security, making it, you know, more aligned with developer first mentality. So that seems to be our takeaway. What's your reaction to those things? You see the same thing? >> I don't have a specific reaction to those things. >> Do you see the same thing happening on the ground there? Are they covering supply? >> Oh, yeah. >> Those three things are they the big focus? >> Yeah. Yeah, I think it's all of those things kind of like wrapped into one, right? But yeah, there's... I'm not sure how to answer your question. >> Well, let's jump into supply chain for instance. 'Cause that has come up a lot. >> Sure. >> What's the focus there on the supply chain security? Is it SBOMs? Is it the container security? What's the key conversations and topics being discussed around supply chain security? >> Well, I think there's a lot of laughter around SBOM right now because no one can really define it, specifically, and everyone's talking about it. So there's, there's a lot more than just the SBOM conversation. We're talking about like full end-to-end development process and that whole software supply chain that goes with it. So there's everything from infrastructure, security, all the way through to like signing transparency logs. Really the full gambit of supply chain, which is is really neat to see because it is such a broad topic. I think a lot of folks now are involved in supply chain security in some way. And so just kind of bringing that to the surface of what are the different people that are involved in this space, thinking about, what's on the top of their mind when it comes to supply chain security. >> How would you scope the order of magnitude of the uptick in supply chain attacks? Is it pretty heavy right now or is it, you know, people with the hair on fire or is it... What's the, give us the taste of the temperature in the room on the supply chain attacks? >> I think most of the folks who are involved in the space understand just that it's increasing. I mean, like, what is it? A 742% increase average annual year, year over year in supply chain attacks. So the amount of attacks increasing is a little daunting, right, for most of us. But it is what it is. So I think most of us right now are just trying to come together to say, "What are you doing that works? This is what I'm doing that works." And in all the different facets of that. 'cause I think we try to throw, we try to throw tools at a lot of problems and this problem is so big and broad reaching that we really are needing to share best practices as a community and as a security community. So this has been, this conference has been really great for that. >> Yeah, I've heard that a lot. You know, too many tools, not enough platform thinking, not enough architecture, needs some structure. Are you seeing any best practice around frameworks and structure around how to start getting in and and building out more of a better approach or posture? I mean, what's that, what's the, what's the state of the union for supply chain, how to handle that? >> Well, I talked about that a little bit in my my keynote that I gave, actually, which was about... And I've heard other other leaders talk about it too. And obviously it keyed my ear just because I'm so passionate about it, about partnership. So you know, empathetic security where the security team that's enforcing the policies, creating the policies, guidelines is working with the teams that are actually doing the production and the development, hand-in-hand, right? Like I can sit there and tell you, "Hey, you have all these problems and here's your security checklist or framework you need to follow." But that's not going to do them any good and it's going to create a ton of holes, right? So actually partnering with them helping them to understand the risks that are associated with their very specific need and use case, because every product has a different kind of quirk to it, right? Like how it's being developed. It might use a different tool and if I sit there and say, "Hey, you need to log on to this, you need to like make your tool work this platform over here and it's not compatible." I'm going to have to completely reframe how I'm doing productization. I need to know that as a security practitioner because me disrupting productization is not something that I should be doing. And I've heard a couple a couple of folks kind of talking about that, the people aspect behind how we implement these tools, the frameworks and the platforms, and how do we draw out risk, right? Like how do we talk about risk with these teams and really make them understand so it's part of their core culture in their understanding. So when they go back to their, when they go back and having to make decisions without me in the room they know they can make those business decisions with the risk as part of that decision. >> I love that empathetic angle because that's really going to, what needs to happen. It's not just, "Hey, that's your department, see you later." Or not even having a knowledge of the information. This idea of team construction, team management is a huge cultural shift. I'm sure the reaction was very positive. How do you explain that to an organization that's out there? Like how do you... what's the first three steps you got to take? Is there anything that you can share for advice people watch you saying, "Yeah we need to we need to change how our teams operate and interact with each other." >> Yeah, I think the first step is to take a good hard look at yourself. And if you are standing there on an ivory tower with a clipboard, you're probably doing it wrong. Check the box security is never going to be any way that works long term. It's going to take you a long time to implement any changes. At Red Hat, we did not look ourselves. You know, we've been doing a lot of great things in supply chain security for a while, but really taking that look and saying, "How can we be more empathetic leaders in the security space?" So we looked at that, then you say, "Okay, what is my my rate of change going to happen?" So if I need to make so many security changes explaining to these organizations, you're actually going to go faster. We improved our efficiency by 2000% just by doing that, just by creating this more empathetic. So why it seems like it's more hands-on, so it's going to be harder, it's easy to send out an email and say, "Hey, meet the security standard, right?" That might seem like the easy way 'cause you don't have time to engage. It's so much faster if you actually engage and share that message and have a a common understanding between the teams that like, "I'm here to deliver a product, so is the security team. The security team's here to deliver that same product and I want to help you do it in a trusted way." Right? >> Yeah. Dave Alonte, my co-host, was just on a session. We were talking together about security teams jumping on every team and putting a C on their jersey to be like the captain of the intramural team, and being involved, and it goes beyond just like the checklist, like you said, "Oh, I got the SBOM list of materials and I got a code scanning thing." That's not enough, is what we're hearing. >> No. >> Is there a framework or a methodology to go beyond that? You got the empathetic, that's really kind of team issue. You got to go beyond some of the tactical things. What's next beyond, you got the empathy and what's that framework structure when you say where you say anything there? >> So what do you do after you have the empathy, right? >> Yeah. >> I would say Salsa is a good place to start, the software levels. Supply chain levels for software artifacts. It's a mouthful. That's a really good maturity framework to start with. No matter what size organization you have, they're just going to be coming out here soon with version one. They release 0.1 a few months back. That's a really good place to give yourself a gut check of where you are in maturity and where you can go, what are best practices. And then there's the SSDF, which is the Secure Software Development framework. I think NIST wrote that one. But that is also a really, a really good framework and they map really well to each other, actually, When you work through Salsa, you're actually working through the SSDF requirements. >> Awesome. Well, great to have you on and great to get that that knowledge. I have to ask you like coup con, I remember when it started in Seattle, their first coup con events, right? Kind of small, similar to this one, but there's a lot of end user activities. Certainly the CNCF kind of was coming together like right after that. What's the end user activity like there this week? That seems to always been the driver of these events. It's a little bit organic. You got some of the key experts coming together, focus. Have you observed any end user activity in terms of contributions, participation? What's the story on the end user piece there? Is it heavy? Is it light? What's the... >> Um, yeah... It seems moderate. I guess somewhere in the middle. I would say largely heavy, but there's definitely participation. There is a lot of communing and networking happening between different organizations to partner together, which is important. But I haven't really paid attention much to like the Twitter side of this. >> Yeah, you've been busy doing the keynotes. How's Red Hat doing all this? You guys have been great positioned with the cloud native movement. Been following the Red Hat's moves since OpenStack days. Really good, good line of product, good open source, Mojo, of course. Good product mix, right, and relevant. Where's the security focus here? Obviously, you guys are clearly focused on security. How's the Red Hat story going on over there? >> There was yesterday a really good talk that explains that super well. It was given by a Red Hatter, connecting all of the open source projects we've been a part of and kind of explaining them. And obviously again, I'm keying in 'cause it's a supply chain kind of conversation, but I'd recommend that anyone who's going to go back and watch these on YouTube to check that one out just to see kind of how we're approaching the security space as well as how we contribute back to the community in that way. >> Awesome. Great to have you on. Final word, I'll give you the final word. What's the big buzz on supply chain? How would you peg the progress there? Feeling good about where things are? What's the current progress on supply chain security? >> I think that it has opened up a lot of doors for communication between security organizations that have tended to be closed. I'm in product security. Product securities, information securities tend to not speak externally about what we're doing. So you don't want to, you know, look bad or you don't want to expose any risk that we have, right? But it is, I think, necessary to open those lines of communication, to be able to start tackling this. It's a big problem throughout all of our industries, and if one supply chain is attacked and those products are used in someone else's supply chain, that can continue, right? So I think it's good. We have a lot of work to do as an industry and the advancements in technology is going to make that a little bit more complicated. But I'm excited for it. >> You can just throw AI at it. That's the big, everyone's doing AI. Just throw AI at it, it'll solve it. Isn't that the new thing? >> I do secure AI though. >> Super important. I love what you're doing there. Supply chain, open source needs, supply chain security. Open source needs this big time. It has to be there. Thank you for the work that you do. Really appreciate you coming on. Thank you. >> Yeah, thanks for having me. >> Yeah, good stuff. Supply chain, critical to open source growth. Open source is going to be the key to success in the future with automation and AI right around the corner. And that's important. This theCUBE covers from cloud native con, security con in North America, 2023. I'm John Furrier. Thanks for watching.

(upbeat music) >> Hey everyone and welcome to theCUBE's coverage day one of CloudNativeSecurityCon '23. Lisa Martin here with John Furrier and Dave Vellante. Dave and John, great to have you guys on the program. This is interesting. This is the first inaugural CloudNativeSecurityCon. Formally part of KubeCon, now a separate event here happening in Seattle over the next couple of days. John, I wanted to get your take on, your thoughts on this being a standalone event, the community, the impact. >> Well, this inaugural event, which is great, we love it, we want to cover all inaugural events because you never know, there might not be one next year. So we were here if it happens, we're here at creation. But I think this is a good move for the CNCF and the Linux Foundation as security becomes so important and there's so many issues to resolve that will influence many other things. Developers, machine learning, data as code, supply chain codes. So I think KubeCon, Kubernetes conference and CloudNativeCon, is all about cloud native developers. And it's a huge event and there's so much there. There's containers, there's microservices, all that infrastructure's code, the DevSecOps on that side, there's enough there and it's a huge ecosystem. Pulling it as a separate event is a first move for them. And I think there's a toe in the water kind of vibe here. Testing the waters a little bit on, does this have legs? How is it organized? Looks like they took their time, thought it out extremely well about how to craft it. And so I think this is the beginning of what will probably be a seminal event for the open source community. So let's listen to the clip from Priyanka Sharma who's a CUBE alumni and executive director of the CNCF. This is kind of a teaser- >> We will tackle issues of security together here and further on. We'll share our experiences, successes, perhaps more importantly, failures, and help with the collecting of understanding. We'll create solutions. That's right. The practitioners are leading the way. Having conversations that you need to have. That's all of you. This conference today and tomorrow is packed with 72 sessions for all levels of technologists to reflect the bottoms up, developer first nature of the conference. The co-chairs have selected these sessions and they are true blue practitioners. >> And that's a great clip right there. If you read between the lines, what she's saying there, let's unpack this. Solutions, we're going to fail, we're going to get better. Linux, the culture of iterating. But practitioners, the mention of practitioners, that was very key. Global community, 72 sessions, co-chairs, Liz Rice and experts that are crafting this program. It seems like very similar to what AWS has done with re:Invent as their core show. And then they have re:Inforce which is their cloud native security, Amazon security show. There's enough there, so to me, practitioners, that speaks to the urgency of cloud native security. So to me, I think this is the first move, and again, testing the water. I like the vibe. I think the practitioner angle is relevant. It's very nerdy, so I think this is going to have some legs. >> Yeah, the other key phrase Priyanka mentioned is bottoms up. And John, at our predictions breaking analysis, I asked you to make a prediction about events. And I think you've nailed it. You said, "Look, we're going to have many more events, but they're going to be smaller." Most large events are going to get smaller. AWS is obviously the exception, but a lot of events like this, 500, 700, 1,000 people, that is really targeted. So instead of you take a big giant event and there's events within the event, this is going to be really targeted, really intimate and focused. And that's exactly what this is. I think your prediction nailed it. >> Well, Dave, we'll call to see the event operating system really cohesive events connected together, decoupled, and I think the Linux Foundation does an amazing job of stringing these events together to have community as the focus. And I think the key to these events in the future is having, again, targeted content to distinct user groups in these communities so they can be highly cohesive because they got to be productive. And again, if you try to have a broad, big event, no one's happy. Everyone's underserved. So I think there's an industry concept and then there's pieces tied together. And I think this is going to be a very focused event, but I think it's going to grow very fast. >> 72 sessions, that's a lot of content for this small event that the practitioners are going to have a lot of opportunity to learn from. Do you guys, John, start with you and then Dave, do you think it's about time? You mentioned John, they're dipping their toe in the water. We'll see how this goes. Do you think it's about time that we have this dedicated focus out of this community on cloud native security? >> Well, I think it's definitely time, and I'll tell you there's many reasons why. On the front lines of business, there's a business model for security hackers and breaches. The economics are in favor of the hackers. That's a real reality from ransomware to any kind of breach attacks. There's corporate governance issues that's structural challenges for companies. These are real issues operationally for companies in the enterprise. And at the same time, on the tech stack side, it's been very slow movement, like glaciers in terms of security. Things like DNS, Linux kernel, there are a lot of things in the weeds in the details of the bowels of the tech world, protocol levels that just need to be refactored. And I think you're seeing a lot of that here. It was mentioned from Brian from the Linux Foundation, mentioned Dan Kaminsky who recently passed away who found that vulnerability in BIND which is a DNS construct. That was a critical linchpin. They got to fix these things and Liz Rice is talking about the Linux kernel with the extended Berkeley Packet Filtering thing. And so this is where they're going. This is stuff that needs to be paid attention to because if they don't do it, the train of automation and machine learning is going to run wild with all kinds of automation that the infrastructure just won't be set up for. So I think there's going to be root level changes, and I think ultimately a new security stack will probably be very driven by data will be emerging. So to me, I think this is definitely worth being targeted. And I think you're seeing Amazon doing the same thing. I think this is a playbook out of AWS's event focus and I think that's right. >> Dave, what are you thoughts? >> There was a lot of talk in, again, I go back to the progression here in the last decade about what's the right regime for security? Should the CISO report to the CIO or the board, et cetera, et cetera? We're way beyond that now. I think DevSecOps is being asked to do a lot, particularly DevOps. So we hear a lot about shift left, we're hearing about protecting the runtime and the ops getting much more involved and helping them do their jobs because the cloud itself has brought a lot to the table. It's like the first line of defense, but then you've really got a lot to worry about from a software defined perspective. And it's a complicated situation. Yes, there's less hardware, yes, we can rely on the cloud, but culturally you've got a lot more people that have to work together, have to share data. And you want to remove the blockers, to use an Amazon term. And the way you do that is you really, if we talked about it many times on theCUBE. Do over, you got to really rethink the way in which you approach security and it starts with culture and team. >> Well the thing, I would call it the five C's of security. Culture, you mentioned that's a good C. You got cloud, tons of issues involved in cloud. You've got access issues, identity. you've got clusters, you got Kubernetes clusters. And then you've got containers, the fourth C. And then finally is the code itself, supply chain. So all areas of cloud native, if you take out culture, it's cloud, cluster, container, and code all have levels of security risks and new things in there that need to be addressed. So there's plenty of work to get done for sure. And again, this is developer first, bottoms up, but that's where the change comes in, Dave, from a security standpoint, you always point this out. Bottoms up and then middle out for change. But absolutely, the imperative is today the business impact is real and it's urgent and you got to pedal as fast as you can here, so I think this is going to have legs. We'll see how it goes. >> Really curious to understand the cultural impact that we see being made at this event with the focus on it. John, you mentioned the four C's, five with culture. I often think that culture is probably the leading factor. Without that, without getting those teams aligned, is the rest of it set up to be as successful as possible? I think that's a question that's- >> Well to me, Dave asked Pat Gelsinger in 2014, can security be a do-over at VMWorld when he was the CEO of VMware? He said, "Yes, it has to be." And I think you're seeing that now. And Nick from the co-founder of Palo Alto Networks was quoted on theCUBE by saying, "Zero Trust is some structure to give to security, but cloud allows for the ability to do it over and get some scale going on security." So I think the best people are going to come together in this security world and they're going to work on this. So you're going to start to see more focus around these security events and initiatives. >> So I think that when you go to the, you mentioned re:Inforce a couple times. When you go to re:Inforce, there's a lot of great stuff that Amazon puts forth there. Very positive, it's not that negative. Oh, the world is falling, the sky is falling. And so I like that. However, you don't walk away with an understanding of how they're making the CISOs and the DevOps lives easier once they get beyond the cloud. Of course, it's not Amazon's responsibility. And that's where I think the CNCF really comes in and open source, that's where they pick up. Obviously the cloud's involved, but there's a real opportunity to simplify the lives of the DevSecOps teams and that's what's critical in terms of being able to solve, or at least keep up with this never ending problem. >> Yeah, there's a lot of issues involved. I took some notes here from some of the keynote you heard. Security and education, training and team structure. Detection, incidents that are happening, and how do you respond to that architecture. Identity, isolation, supply chain, and governance and compliance. These are all real things. This is not like hand-waving issues. They're mainstream and they're urgent. Literally the houses are on fire here with the enterprise, so this is going to be very, very important. >> Lisa: That's a great point. >> Some of the other things Priyanka mentioned, exposed edges and nodes. So just when you think we're starting to solve the problem, you got IOT, security's not a one and done task. We've been talking about culture. No person is an island. It's $188 billion business. Cloud native is growing at 27% a year, which just underscores the challenges, and bottom line, practitioners are leading the way. >> Last question for you guys. What are you hoping those practitioners get out of this event, this inaugural event, John? >> Well first of all, I think this inaugural event's going to be for them, but also we at theCUBE are going to be doing a lot more security events. RSA's coming up, we're going to be at re:Inforce, we're obviously going to be covering this event. We've got Black Hat, a variety of other events. We'll probably have our own security events really focused on some key areas. So I think the thing that people are going to walk away from this event is that paying attention to these security events are going to be more than just an industry thing. I think you're going to start to see group gatherings or groups convening virtually and physically around core issues. And I think you're going to start to see a community accelerate around cloud native and open source specifically to help teams get faster and better at what they do. So I think the big walkaway for the customers and the practitioners here is that there's a call to arms happening and this is, again, another signal that it's worth breaking out from the core event, but being tied to it, I think that's a good call and I think it's a well good architecture from a CNCF standpoint and a worthy effort, so I give it a thumbs up. We still don't know what it's going to look like. We'll see what day two looks like, but it seems to be experts, practitioners, deep tech, enabling technologies. These are things that tend to be good things to hear when you're at an event. I'll say the business imperative is obvious. >> The purpose of an event like this, and it aligns with theCUBE's mission, is to educate and inspire business technology pros to action. We do it in theCUBE with free content. Obviously this event is a for-pay event, but they are delivering some real value to the community that they can take back to their organizations to make change. And that's what it's all about. >> Yep, that is what it's all about. I'm looking forward to seeing over as the months unfold, the impact that this event has on the community and the impact the community has on this event going forward, and really the adoption of cloud native security. Guys, great to have you during this keynote analysis. Looking forward to hearing the conversations that we have on theCUBE today. Thanks so much for joining. And for my guests, for my co-hosts, John Furrier and Dave Vellante. I'm Lisa Martin. You're watching theCUBE's day one coverage of CloudNativeSecurityCon '23. Stick around, we got great content on theCUBE coming up. (upbeat music)

(dramatic wooshing) >> Hello, and I'm John Furrier, host of theCUBE. Check out the upcoming Season 2, Episode 4 AWS Startup Showcase featuring Cybersecurity. We got 10 hot growing startups. We got keynote from Jon Ramsey, Vice President of AWS Security, as well as amazing Heroes, AWS Cloud Heroes in security, Liz Rice, and we've got some amazing, talented people sharing their insights. Here on theCUBE, every episode is a new topic. This topic is cybersecurity. Check it out. It's an ongoing series. It's the hottest startups in the ecosystem of AWS, Amazon Web Services. It's theCUBE.

(air whooshing) (cymbal crashing) >> Hello everybody, I'm John Furrier, host of theCUBE. Join us for the season two, episode four of the ongoing series, The AWS Startup Showcase. For this episode, it's all about cybersecurity, hackers, super hackers, super cloud, all 10 companies presenting are the latest, hottest companies in cybersecurity startups. Of course, John Ramsey will be keynoting. He's the vice president of AWS, a security team. And of course, we've got great expert panels with the heroes, Liz Rice from Open Source, talking about kernaling in Linux kernal, security programming to best practices for CSOs. If you're a CSO or CXO, check it out.

>>Hey, everyone. Welcome to the AWS partner, showcase women in tech. I'm Lisa Martin from the cube. And today we're gonna be looking into the exciting evolution of women in the tech industry. I'm going to be joined by Danielle GShock, the ISP PSA director at AWS. And we have the privilege of speaking with some wicked smart women from Teradata NetApp. JFI a 10th revolution group, company and honeycomb.io. We're gonna look at some of the challenges and biases that women face in the tech industry, especially in leadership roles. We're also gonna be exploring how are these tech companies addressing diversity, equity and inclusion across their organizations? How can we get more young girls into stem earlier in their careers? So many questions. So let's go ahead and get started. This is the AWS partner showcase women in tech. Hey, everyone. Welcome to the AWS partner showcase. This is season one, episode three. And I'm your host, Lisa Martin. I've got two great guests here with me to talk about women in tech. Hillary Ashton joins us the chief product officer at Terry data. And Danielle Greshaw is back with us, the ISV PSA director at AWS ladies. It's great to have you on the program talking through such an important topic, Hillary, let's go ahead and start with you. Give us a little bit of an intro into you, your background, and a little bit about Teradata. >>Yeah, absolutely. So I'm Hillary Ashton. I head up the products organization. So that's our engineering product management office of the CTO team. Um, at Teradata I've been with Terra data for just about three years and really have spent the last several decades. If I can say that in the data and analytics space, um, I spent time, uh, really focused on the value of, of analytics at scale, and I'm super excited to be here at Teradata. I'm also a mom of two teenage boys. And so as we talk about women in tech, I think there's, um, uh, lots of different dimensions and angles of that. Um, at Teradata, we are partnered very deeply with AWS and happy to talk a little bit more about that, um, throughout this discussion as well. >>Excellent. A busy mom of two teen boys. My goodness. I don't know how you do it. Let's now look, Atter data's views of diversity, equity and inclusion. It's a, the, it's a topic that's important to everyone, but give us a snapshot into some of the initiatives that Terra data has there. >>Yeah, I have to say, I am super proud to be working at Teradata. We have gone through, uh, a series of transformations, but I think it starts with culture and we are deeply committed to diversity, equity and inclusion. It's really more than just a statement here. It's just how we live our lives. Um, and we use, uh, data to back that up. Um, in fact, we were named one of the world's most ethical companies for the 13th year in a row. Um, and all of our executive leadership team has taken an oath around D E and I that's available on LinkedIn as well. So, um, in fact, our leadership team reporting into the CEO is just about 50 50, um, men and women, which is the first time I've worked in a company where that has been the case. And I think as individuals, we can probably appreciate what a huge difference that makes in terms of not just being a representative, but truly being on a, on a diverse and equitable, uh, team. And I think it really, uh, improves the behaviors that we can bring, um, to our office. >>There's so much value in that. It's I impressive to see about a 50 50 at the leadership level. That's not something that we see very often. Tell me how you, Hillary, how did you get into tech? Were you an engineering person by computer science, or did you have more of a zigzaggy path to where you are now? >>I'm gonna pick door number two and say more zigzaggy. Um, I started off thinking, um, that I started off as a political science major or a government major. Um, and I was probably destined to go into, um, the law field, but actually took a summer course at Harvard. I did not go to Harvard, but I took a summer course there and learned a lot about multimedia and some programming. And that really set me on a trajectory of how, um, data and analytics can truly provide value and, and outcomes to our customers. Um, and I have been living that life ever since. Um, I graduated from college, so, um, I was very excited and privileged in my early career to, uh, work in a company where I found after my first year that I was managing, um, uh, kids, people who had graduated from Harvard business school and from MIT Sloan school. Um, and that was super crazy, cuz I did not go to either of those schools, but I sort of have always had a natural knack for how do you take technology and, and the really cool things that technology can do, but because I'm not a programmer by training, I'm really focused on the value that I'm able to help, um, organizations really extract value, um, from the technology that we can create, which I think is fantastic. >>I think there's so much value in having a zigzag path into tech. You bring Danielle, you and I have talked about this many times you bring such breadth and such a wide perspective. That really is such a value. Add to teams. Danielle, talk to us from AWS's perspective about what can be done to encourage more young women to get and under and underrepresented groups as well, to get into stem and stay. >>Yeah, and this is definitely a challenge as we're trying to grow our organization and kind of shift the numbers. And the reality is, especially with the more senior folks in our organization, unless you bring folks with a zigzag path, the likelihood is you won't be able to change the numbers that you have. Um, but for me, it's really been about, uh, looking at that, uh, the folks who are just graduating college, maybe in other roles where they are adjacent to technology and to try to spark their interest and show that yes, they can do it because oftentimes it's really about believing in themselves and, and realizing that we need folks with all sorts of different perspectives to kind of come in, to be able to help really, um, provide both products and services and solutions for all types of people inside of technology, which requires all sorts of perspectives. >>Yeah, the diverse perspectives. There's so much value and there's a lot of data that demonstrates how much value revenue impact organizations can make by having diversity, especially at the leadership level. Hillary, let's go back to you. We talked about your career path. You talked about some of the importance of the focus on de and I at Tarana, but what are, what do you think can be done to encourage, to sorry, to recruit more young women and under groups into tech, any, any carrot there that you think are really important that we need to be dangling more of? >>Yeah, absolutely. And I'll build on what Danielle just said. I think the, um, bringing in diverse understandings, um, of, of customer outcomes, I mean, I, the we've really moved from technology for technology's sake and I know AWS and entirety to have had a lot of conversations on how do we drive customer outcomes that are differentiated in the market and really being customer centric and technology is wonderful. You can do wonderful things with it. You can do not so wonderful things with it as well, but unless you're really focused on the outcomes and what customers are seeking, um, technology is not hugely valuable. And so I think bringing in people who understand, um, voice of customer who understand those outcomes, and those are not necessarily the, the, the folks who are PhD in mathematics or statistics, um, those can be people who understand a day in the life of a data scientist or a day in the life of a citizen data scientist. And so really working to bridge the high impact technology with the practical kind of usability, usefulness of data and analytics in our cases, I think is something that we need more of in tech and sort of demystifying tech and freeing technology so that everybody can use it and having a really wide range of people who understand not just the bits and bites and, and how to program, but also the value in outcomes that technology through data and analytics can drive. >>Yeah. You know, we often talk about the hard skills, but this, their soft skills are equally, if not more important that even just being curious, being willing to ask questions, being not afraid to be vulnerable, being able to show those sides of your personality. I think those are important for, for young women and underrepresented groups to understand that those are just as important as some of the harder technical skills that can be taught. >>That's right. >>What do you think about from a bias perspective, Hillary, what have you seen in the tech industry and how do you think we can leverage culture as you talked about to help dial down some of the biases that are going on? >>Yeah. I mean, I think first of all, and, and there's some interesting data out there that says that 90% of the population, which includes a lot of women have some inherent bias in their day, day behaviors when it comes to to women in particular. But I'm sure that that is true across all kinds of, of, um, diverse and underrepresented folks in, in the world. And so I think acknowledging that we have bias and actually really learning how, what that can look like, how that can show up. We might be sitting here and thinking, oh, of course I don't have any bias. And then you realize that, um, as you, as you learn more about, um, different types of bias, that actually you do need to kind of, um, account for that and change behaviors. And so I think learning is sort of a fundamental, um, uh, grounding for all of us to really know what bias looks like, know how it shows up in each of us. >>Um, if we're leaders know how it shows up in our teams and make sure that we are constantly getting better, we're, we're not gonna be perfect anytime soon. But I think being on a path to improvement to overcoming bias, um, is really, is really critical. And part of that is really starting the dialogue, having the conversations, holding ourselves and each other accountable, um, when things aren't going in, in a, in a Coptic way and being able to talk openly about that, that felt, um, like maybe there was some bias in that interaction and how do we, um, how do we make good on that? How do we change our, our behavior? Fundamentally of course, data and analytics can have some bias in it as well. And so I think as we look at the, the technology aspect of bias, um, looking at at ethical AI, I think is a, a really important, uh, additional area. And I'm sure we could spend another 20 minutes talking about that, but I, I would be remiss if I didn't talk more about sort of the bias, um, and the over the opportunity to overcome bias in data and analytics as well. >>Yeah. The opportunity to overcome it is definitely there you bring up a couple of really good points, Hillary. It, it starts with awareness. We need to be aware that there are inherent biases in data in thought. And also to your other point, hold people accountable ourselves, our teammates, that's critical to being able to, to dial that back down, Daniel, I wanna get your perspective on, on your view of women in leadership roles. Do you think that we have good representation or we still have work to do in there? >>I definitely think in both technical and product roles, we definitely have some work to do. And, you know, when I think about, um, our partnership with Teradata, part of the reason why it's so important is, you know, Teradata solution is really the brains of a lot of companies. Um, you know, the what, how, what they differentiate on how they figure out insights into their business. And it's, it's all about the product itself and the data and the same is true at AWS. And, you know, we really could do some work to have some more women in these technical roles, as well as in the product, shaping the products. Uh, just for all the reasons that we just kind of talked about over the last 10 minutes, um, in order to, you know, move bias out of our, um, out of our solutions and also to just build better products and have, uh, better, you know, outcomes for customers. So I think there's a bit of work to do still. >>I agree. There's definitely a bit of work to do, and it's all about delivering those better outcomes for customers at the end of the day, we need to figure out what the right ways are of doing that and working together in a community. Um, we've had obviously a lot had changed in the last couple of years, Hillary, what's your, what have you seen in terms of the impact that the pandemic has had on this status of women in tech? Has it been a pro is silver lining the opposite? What are you seeing? >>Yeah, I mean, certainly there's data out there that tells us factually that it has been, um, very difficult for women during COVID 19. Um, women have, uh, dropped out of the workforce for a wide range of, of reasons. Um, and, and that I think is going to set us back all of us, the, the Royal us or the Royal we back, um, years and years. Um, and, and it's very unfortunate because I think we we're at a time when we're making great progress and now to see COVID, um, setting us back in, in such a powerful way. I think there's work to be done to understand how do we bring people back into the workforce. Um, how do we do that? Understanding work life balance, better understanding virtual and remote, working better. I think in the technology sector, um, we've really embraced, um, hybrid virtual work and are, are empowering people to bring their whole selves to work. >>And I think if anything, these, these zoom calls have, um, both for the men and the women on my team. In fact, I would say much more. So for the men on my team, I'm seeing, I was seeing more kids in the background, more kind of split childcare duties, more ability to start talking about, um, other responsibilities that maybe they had, uh, especially in the early days of COVID where maybe daycares were shut down. And, um, you had, you know, maybe a parent was sick. And so we saw quite a lot of, um, people bringing their whole selves to the office, which I think was, was really wonderful. Um, uh, even our CEO saw some of that. And I think, um, that that really changes the dialogue, right? It changes it to maybe scheduling meetings at a time when, um, people can do it after daycare drop off. >>Um, and really allowing that both for men and for women makes it better for, for women overall. So I would like to think that this hybrid working, um, environment and that this, um, uh, whole view into somebody's life that COVID has really provided for probably for white collar workers, if I'm being honest for, um, people who are in a, at a better point of privilege, they don't necessarily have to go into the office every day. I would like to think that tech can lead the way in, um, you know, coming out of the, the old COVID. I don't know if we have a new COVID coming, but the old COVID and really leading the way for women and for people, um, to transform how we do work, um, leveraging data and analytics, but also, um, overcoming some of the, the disparities that exist for women in particular in the workforce. >>Yeah, I think there's, there's like we say, there's a lot of opportunity there and I like your point of hopefully tech can be that guiding light that shows us this can be done. We're all humans at the end of the day. And ultimately if we're able to have some sort of work life balance, everything benefits, our work or more productive, higher performing teams impacts customers, right? There's so much value that can be gleaned from, from that hybrid model and embracing for humans. We need to be able to, to work when we can, we've learned that you don't have to be, you know, in an office 24, 7 commuting, crazy hours flying all around the world. We can get a lot of things done in a ways that fit people's lives rather than taking command over it. Wanna get your advice, Hillary, if you were to talk to your younger self, what would be some of the key pieces of advice you would say? And Danielle and I have talked about this before, and sometimes we, we would both agree on like, ask more questions. Don't be afraid to raise your hand, but what advice would you give your younger self and that younger generation in terms of being inspired to get into tech >>Oh, inspired and being in tech? You know, I think looking at technology as, in some ways, I feel like we do a disservice to, um, inclusion when we talk about stem, cuz I think stem can be kind of daunting. It can be a little scary for people for younger people. When I, when I go and talk to folks at schools, I think stem is like, oh, all the super smart kids are over there. They're all like maybe they're all men. And so, um, it's, it's a little, uh, intimidating. Um, and stem is actually, you know, especially for, um, people joining the workforce today. It's actually how you've been living your life since you were born. I mean, you know, stem inside and out because you walk around with a phone and you know how to get your internet working and like that is technology right. >>Fundamentally. And so demystifying stem as something that is around how we, um, actually make our, our lives useful and, and, and how we can change outcomes. Um, through technology I think is maybe a different lens to put on it. So, and there's absolutely for, for hard sciences, there's absolutely a, a great place in the world for folks who wanna pursue that and men and women can do that. So I, I don't want to be, um, uh, setting the wrong expectations, but I, I think stem is, is very holistic in, um, in the change that's happening globally for us today across economies, across global warming, across all kinds of impactful issues. And so I think everybody who's interested in, in some of that world change can participate in stem. It just may be through a different, through a different lens than how we classically talk about stem. >>So I think there's great opportunity to demystify stem. I think also, um, what I would tell my younger self is choose your bosses wisely. And that sounds really funny. That sounds like inside out almost, but I think choose the person that you're gonna work for in your first five to seven years. And it might be more than one person, but be, be selective, maybe be a little less selective about the exact company or the exact title. I think picking somebody that, you know, we talk about mentors and we talk about sponsors and those are important. Um, but the person you're gonna spend in your early career, a lot of your day with a lot, who's gonna influence a lot of the outcomes for you. That is the person that you, I think want to be more selective about, um, because that person can set you up for success and give you opportunities and set you on course to be, um, a standout or that person can hold you back. >>And that person can put you in the corner and not invite you to the meetings and not give you those opportunities. And so we're in an economy today where you actually can, um, be a little bit picky about who you go and work for. And I would encourage my younger self. I actually, I just lucked out actually, but I think that, um, my first boss really set me, um, up for success, gave me a lot of feedback and coaching. Um, and some of it was really hard to hear, but it really set me up for, for, um, the, the path that I've been on ever since. So it, that would be my advice. >>I love that advice. I it's brilliant. I didn't think it choose your bosses wisely. Isn't something that we primarily think about. I think a lot of people think about the big name companies that they wanna go after and put on a resume, but you bring up a great point. And Danielle and I have talked about this with other guests about mentors and sponsors. I think that is brilliant advice and also more work to do to demystify stem. But luckily we have great family leaders like the two of you helping us to do that. Ladies, I wanna thank you so much for joining me on the program today and talking through what you're seeing in de and I, what your companies are doing and the opportunities that we have to move the needle. Appreciate your time. >>Thank you so much. Great to see you, Danielle. Thank you Lisa, to see you. >>My pleasure for my guests. I'm Lisa Martin. You're watching the AWS partner showcase season one, episode three. Hey everyone. Welcome to the AWS partner showcase. This is season one, episode three, with a focus on women in tech. I'm your host, Lisa Martin. I've got two guests here with me, Sue Peretti, the EVP of global AWS strategic alliances at Jefferson Frank, a 10th revolution group company, and Danielle brushoff. One of our cube alumni joins us ISV PSA director, ladies. It's great to have you on the program talking about a, a topic that is near and dear to my heart at women in tech. >>Thank you, Lisa. >>So let's go ahead and start with you. Give the audience an understanding of Jefferson Frank, what does the company do and about the partnership with AWS? >>Sure. Um, so let's just start, uh, Jefferson Frank is a 10th revolution group company. And if you look at it, it's really talent as a service. So Jefferson Frank provides talent solutions all over the world for AWS clients, partners and users, et cetera. And we have a sister company called revelent, which is a talent creation company within the AWS ecosystem. So we create talent and put it out in the ecosystem. Usually underrepresented groups over half of them are women. And then we also have, uh, a company called rubra, which is a delivery model around AWS technology. So all three companies fall under the 10th revolution group organization. >>Got it. Danielle, talk to me a little bit about from AWS's perspective and the focus on hiring more women in technology and about the partnership. >>Yes. I mean, this has definitely been a focus ever since I joined eight years ago, but also just especially in the last few years we've grown exponentially and our customer base has changed. You know, we wanna have, uh, an organization interacting with them that reflects our customers, right. And, uh, we know that we need to keep pace with that even with our growth. And so we've very much focused on early career talent, um, bringing more women and underrepresented minorities into the organization, sponsoring those folks, promoting them, uh, giving them paths to growth, to grow inside of the organization. I'm an example of that. Of course I benefit benefited from it, but also I try to bring that into my organization as well. And it's super important. >>Tell me a little bit about how you benefited from that, Danielle. >>Um, I just think that, um, you know, I I've been able to get, you know, a seat at the table. I think that, um, I feel as though I have folks supporting me, uh, very deeply and wanna see me succeed. And also they put me forth as, um, you know, a, represent a representative, uh, to bring more women into the organization as well. And I think, um, they give me a platform, uh, in order to do that, um, like this, um, but also many other, uh, spots as well. Um, and I'm happy to do it because I feel that, you know, if you always wanna feel that you're making a difference in your job, and that is definitely a place where I get that time and space in order to be that representative to, um, bring more, more women into benefiting from having careers in technology, which there's a lot of value there, >>A lot of value. Absolutely. So back over to you, what are some of the trends that you are seeing from a gender diversity perspective in tech? We know the, the numbers of women in technical positions, uh, right. There's so much data out there that shows when girls start dropping up, but what are some of the trends that you are seeing? >>So it's, that's a really interesting question. And, and Lisa, I had a whole bunch of data points that I wanted to share with you, but just two weeks ago, uh, I was in San Francisco with AWS at the, at the summit. And we were talking about this. We were talking about how we can collectively together attract more women, not only to, uh, AWS, not only to technology, but to the AWS ecosystem in particular. And it was fascinating because I was talking about, uh, the challenges that women have and how hard to believe, but about 5% of women who were in the ecosystem have left in the past few years, which was really, really, uh, something that shocked everyone when we, when we were talking about it, because all of the things that we've been asking for, for instance, uh, working from home, um, better pay, uh, more flexibility, uh, better maternity leave seems like those things are happening. >>So we're getting what we want, but people are leaving. And it seemed like the feedback that we got was that a lot of women still felt very underrepresented. The number one thing was that they, they couldn't be, you can't be what you can't see. So because they, we feel collectively women, uh, people who identify as women just don't see enough women in leadership, they don't see enough mentors. Um, I think I've had great mentors, but, but just not enough. I'm lucky enough to have a pres a president of our company, the president of our company, Zoe Morris is a woman and she does lead by example. So I'm very lucky for that. And Jefferson, Frank really quickly, we put out a hiring a salary and hiring guide a career and hiring guide every year and the data points. And that's about 65 pages long. No one else does it. Uh, it gives an abundance of information around, uh, everything about the AWS ecosystem that a hiring manager might need to know. But there is what, what I thought was really unbelievable was that only 7% of the people that responded to it were women. So my goal, uh, being that we have such a very big global platform is to get more women to respond to that survey so we can get as much information and take action. So >>Absolutely 7%. So a long way to go there. Danielle, talk to me about AWS's focus on women in tech. I was watching, um, Sue, I saw that you shared on LinkedIn, the Ted talk that the CEO and founder of girls and co did. And one of the things that she said was that there was a, a survey that HP did some years back that showed that, um, 60%, that, that men will apply for jobs if they only meet 60% of the list of requirements. Whereas with females, it's far, far less, we've all been in that imposter syndrome, um, conundrum before. But Danielle, talk to us about AWS, a specific focus here to get these numbers up. >>I think it speaks to what Susan was talking about, how, you know, I think we're approaching it top and bottom, right? We're looking out at what are the, who are the women who are currently in technical positions and how can we make AWS an attractive place for them to work? And that's all a lot of the changes that we've had around maternity leave and, and those types of things, but then also, um, more flexible working, uh, can, you know, uh, arrangements, but then also, um, early, how can we actually impact early, um, career women and actually women who are still in school. Um, and our training and certification team is doing amazing things to get, um, more girls exposed to AWS, to technology, um, and make it a less intimidating place and have them look at employees from AWS and say like, oh, I can see myself in those people. >>Um, and kind of actually growing the viable pool of candidates. I think, you know, we're, we're limited with the viable pool of candidates, um, when you're talking about mid to late career. Um, but how can we, you know, help retrain women who are coming back into the workplace after, you know, having a child and how can we help with military women who want to, uh, or underrepresented minorities who wanna move into AWS, we have a great military program, but then also just that early high school, uh, career, you know, getting them in, in that trajectory. >>Sue, is that something that Jefferson Frank is also able to help with is, you know, getting those younger girls before they start to feel there's something wrong with me. I don't get this. Talk to us about how Jefferson Frank can help really drive up that in those younger girls. >>Uh, let me tell you one other thing to refer back to that summit that we did, uh, we had breakout sessions and that was one of the topics. What can cuz that's the goal, right? To make sure that, that there are ways to attract them. That's the goal? So some of the things that we talked about was mentoring programs, uh, from a very young age, some people said high school, but then we said even earlier, goes back to you. Can't be what you can't see. So, uh, getting mentoring programs, uh, established, uh, we also talked about some of the great ideas was being careful of how we speak to women using the right language to attract them. And some, there was a teachable moment for, for me there actually, it was really wonderful because, um, an African American woman said to me, Sue and I, I was talking about how you can't be what you can't see. >>And what she said was Sue, it's really different. Um, for me as an African American woman, uh, or she identified, uh, as nonbinary, but she was relating to African American women. She said, your white woman, your journey was very different than my journey. And I thought, this is how we're going to learn. I wasn't offended by her calling me out at all. It was a teachable moment. And I thought I understood that, but those are the things that we need to educate people on those, those moments where we think we're, we're saying and doing the right thing, but we really need to get that bias out there. So here at Jefferson, Frank, we're, we're trying really hard to get that careers and hiring guide out there. It's on our website to get more women, uh, to talk to it, but to make suggestions in partnership with AWS around how we can do this mentoring, we have a mentor me program. We go around the country and do things like this. We, we try to get the education out there in partnership with AWS. Uh, we have a, a women's group, a women's leadership group, uh, so much that, that we do, and we try to do it in partnership with AWS. >>Danielle, can you comment on the impact that AWS has made so far, um, regarding some of the trends and, and gender diversity that Sue was talking about? What's the impact that's been made so far with this partnership? >>Well, I mean, I think just being able to get more of the data and have awareness of leaders, uh, on how <laugh>, you know, it used to be a, a couple years back, I would feel like sometimes the, um, uh, solving to bring more women into the organization was kind of something that folks thought, oh, this is Danielle is gonna solve this. You know? And I think a lot of folks now realize, oh, this is something that we all need to solve for. And a lot of my colleagues who maybe a couple years ago, didn't have any awareness or didn't even have the tools to do what they needed to do in order to improve the statistics on their, or in their organizations. Now actually have those tools and are able to kind of work with, um, work with companies like Susan's work with Jefferson Frank in order to actually get the data and actually make good decisions and feel as though, you know, they, they often, these are not lived experiences for these folks, so they don't know what they don't know. And by providing data and providing awareness and providing tooling and then setting goals, I think all of those things have really turned, uh, things around in a very positive way. >>And so you bring up a great point about from a diversity perspective, what is Jefferson Frank doing to, to get those data points up, to get more women of, of all well, really underrepresented minorities to, to be able to provide that feedback so that you can, can have the data and gleamy insights from it to help companies like AWS on their strategic objectives. >>Right? So as I, when I go back to that higher that, uh, careers in hiring guide, that is my focus today, really because the more data that we have, I mean, the, and the data takes, uh, you know, we need people to participate in order to, to accurately, uh, get a hold of that data. So that's why we're asking, uh, we're taking the initiative to really expand our focus. We are a global organization with a very, very massive database all over the world, but if people don't take action, then we can't get the right. The, the, the data will not be as accurate as we'd like it to be. Therefore take better action. So what we're doing is we're asking people all over the, all over the world to participate on our website, Jefferson frank.com, the se the high, uh, in the survey. So we can learn as much as we can. >>7% is such a, you know, Danielle and I we're, we've got to partner on this just to sort of get that message out there, get more data so we can execute, uh, some of the other things that we're doing. We're, we're partnering in. As I mentioned, more of these events, uh, we're, we're doing around the summits, we're gonna be having more ed and I events and collecting more information from women. Um, like I said, internally, we do practice what we preach and we have our own programs that are, that are out there that are within our own company where the women who are talking to candidates and clients every single day are trying to get that message out there. So if I'm speaking to a client or one of our internal people are speaking to a client or a candidate, they're telling them, listen, you know, we really are trying to get these numbers up. >>We wanna attract as many people as we can. Would you mind going to this, uh, hiring guide and offering your own information? So we've gotta get that 7% up. We've gotta keep talking. We've gotta keep, uh, getting programs out there. One other thing I wanted to Danielle's point, she mentioned, uh, women in leadership, the number that we gathered was only 9% of women in leadership within the AWS ecosystem. We've gotta get that number up, uh, as well because, um, you know, I know for me, when I see people like Danielle or, or her peers, it inspires me. And I feel like, you know, I just wanna give back, make sure I send the elevator back to the first floor and bring more women in to this amazing ecosystem. >>Absolutely. That's not that metaphor I do too, but we, but to your point to get that those numbers up, not just at AWS, but everywhere else we need, it's a help me help use situation. So ladies underrepresented minorities, if you're watching go to the Jefferson Frank website, take the survey, help provide the data so that the woman here that are doing this amazing work, have it to help make decisions and have more of females and leadership roles or underrepresented minorities. So we can be what we can see. Ladies, thank you so much for joining me today and sharing what you guys are doing together to partner on this important. Cause >>Thank you for having me, Leah, Lisa, >>Thank you. My pleasure for my guests. I'm Lisa Martin. You're watching the cubes coverage of the AWS partner showcase. Thanks for your time. Hey everyone. Welcome to the AWS partner showcase season one, episode three women in tech. I'm your host, Lisa Martin. We've got two female rock stars here with me next. Stephanie Curry joins us the worldwide head of sales and go to market strategy for AWS at NetApp and Danielle GShock is back one of our QM ISV PSA director at AWS. Looking forward to a great conversation, ladies, about a great topic, Stephanie, let's go ahead and start with you. Give us an overview of your story, how you got into tech and what inspired you. >>Thanks so much, Lisa and Danielle. It's great to be on this show with you. Um, thank you for that. Uh, my name's Stephanie cur, as Lisa mentioned, I'm the worldwide head of sales for, uh, AWS at NetApp and run a global team of sales people that sell all things AWS, um, going back 25 years now, uh, when I first started my career in tech, it was kind of by accident. Um, I come from a different background. I have a business background and a technical background from school, um, but had been in a different career and I had an opportunity to try something new. Um, I had an ally really that reached out to me and said, Hey, you'd be great for this role. And I thought, I'd take a chance. I was curious. Um, and, uh, it, it turned out to be a 25 year career, um, that I'm really, really excited about and, and, um, really thankful for that person, for introducing me to the, to the industry >>25 years in counting. I'm sure Danielle, we've talked about your background before. So what I wanna focus on with you is the importance of diversity for high performance. I know what a machine AWS is, and Stephanie'll come back to you with the same question, but talk about that, Danielle, from your perspective, that importance, um, for diversity to drive the performance. >>Yeah. Yeah. I truly believe that, you know, in order to have high performing teams, that you have to have people from all different types of backgrounds and experiences. And we do find that oftentimes being, you know, field facing, if we're not reflecting our customers and connecting with them deeply, um, on, on the levels that they're at, we, we end up missing them. And so for us, it's very important to bring people of lots of different technical backgrounds experiences. And of course, both men, women, and underrepresented minorities and put that forth to our customers, um, in order to make that connection and to end up with better outcomes. So >>Definitely it's all about outcomes, Stephanie, your perspective and NetApp's perspective on diversity for creating highly performant teams and organizations. >>I really aligned with Danielle on the comment she made. And in addition to that, you know, just from building teams in my, um, career know, we've had three times as many women on my team since we started a year ago and our results are really showing in that as well. Um, we find the teams are stronger, they're more collaborative and to Danielle's point really reflective, not only our partners, but our customers themselves. So this really creates connections, which are really, really important to scale our businesses and, and really, uh, meet the customer where they're at as well. So huge proponent of that ourselves, and really finding that we have to be intentional in our hiring and intentional in how we attract diversity to our teams. >>So Stephanie let's stay with you. So a three X increase in women on the team in a year, especially the kind of last year that we've had is really incredible. I, I like your, I, your thoughts on there needs to be a, there needs to be focus and, and thought in how teams are hired. Let's talk about attracting and retaining those women now, especially in sales roles, we all know the number, the percentages of women in technical roles, but what are some of the things that, that you do Stephanie, that NetApp does to attract and retain women in those sales roles? >>The, the attracting part's really interesting. And we find that, you know, you, you read the stats and I'd say in my experience, they're also true in the fact that, um, a lot of women would look at a job description and say, I can't do a hundred percent of that, that, so I'm not even going to apply with the women that we've attracted to our team. We've actually intentionally reached out and targeted those people in a good way, um, to say, Hey, we think you've got what it takes. Some of the feedback I've got from those women are, gosh, I didn't think I could ever get this role. I didn't think I had the skills to do that. And they've been hired and they are doing a phenomenal job. In addition to that, I think a lot of the feedback I've got from these hires are, Hey, it's an aggressive sales is aggressive. Sales is competitive. It's not an environment that I think I can be successful in. And what we're showing them is bring those softer skills around collaboration, around connection, around building teams. And they do, they do bring a lot of that to the team. Then they see others like them there and they know they can be successful cuz they see others like them on the team, >>The whole concept of we can't be what we can't see, but we can be what we can't see is so important. You said a couple things, Stephanie, that really stuck with me. And one of them was an interview on the Cub I was doing, I think a couple weeks ago, um, about women in tech. And the stat that we talked about was that women will apply will not apply for a job unless they meet 100% of the skills and the requirements that it's listed, but men will, if they only meet 60. And I, that just shocked me that I thought, you know, I, I can understand that imposter syndrome is real. It's a huge challenge, but the softer skills, as you mentioned, especially in the last two years, plus the ability to communicate, the ability to collaborate are incredibly important to, to drive that performance of any team of any business. >>Absolutely. >>Danielle, talk to me about your perspective and AWS as well for attracting and retaining talent. And, and, and particularly in some of those challenging roles like sales that as Stephanie said, can be known as aggressive. >>Yeah, for sure. I mean, my team is focused on the technical aspect of the field and we definitely have an uphill battle for sure. Um, two things we are focused on first and foremost is looking at early career women and that how we, how can we bring them into this role, whether in they're in support functions, uh, cl like answering the phone for support calls, et cetera, and how, how can we bring them into this organization, which is a bit more strategic, more proactive. Um, and then the other thing that as far as retention goes, you know, sometimes there will be women who they're on a team and there are no other women on that team. And, and for me, it's about building community inside of AWS and being part of, you know, we have women on solution architecture organizations. We have, uh, you know, I just personally connect people as well and to like, oh, you should meet this person. Oh, you should talk to that person. Because again, sometimes they can't see someone on their team like them and they just need to feel anchored, especially as we've all been, you know, kind of stuck at home, um, during the pandemic, just being able to make those connections with women like them has been super important and just being a, a long tenured Amazonian. Um, that's definitely one thing I'm able to, to bring to the table as well. >>That's so important and impactful and spreads across organizations in a good way. Daniel let's stick with you. Let's talk about some of the allies that you've had sponsors, mentors that have really made a difference. And I said that in past tense, but I also mean in present tense, who are some of those folks now that really inspire you? >>Yeah. I mean, I definitely would say that one of my mentors and someone who, uh, ha has been a sponsor of my career has, uh, Matt YK, who is one of our control tower GMs. He has really sponsored my career and definitely been a supporter of mine and pushed me in positive ways, which has been super helpful. And then other of my business partners, you know, Sabina Joseph, who's a cube alum as well. She definitely has been, was a fabulous partner to work with. Um, and you know, between the two of us for a period of time, we definitely felt like we could, you know, conquer the world. It's very great to go in with a, with another strong woman, um, you know, and, and get things done, um, inside of an organization like AWS. >>Absolutely. And S I've, I've agreed here several times. So Stephanie, same question for you. You talked a little bit about your kind of, one of your, uh, original early allies in the tech industry, but talk to me about allies sponsors, mentors who have, and continue to make a difference in your life. >>Yeah. And, you know, I think it's a great differentiation as well, right? Because I think that mentors teach us sponsors show us the way and allies make room for us at the table. And that is really, really key difference. I think also as women leaders, we need to make room for others at the table too, and not forget those softer skills that we bring to the table. Some of the things that Danielle mentioned as well about making those connections for others, right. And making room for them at the table. Um, some of my allies, a lot of them are men. Brian ABI was my first mentor. Uh, he actually is in the distribution, was in distribution, uh, with advent tech data no longer there. Um, Corey Hutchinson, who's now at Hashi Corp. He's also another ally of mine and remains an ally of mine, even though we're not at the same company any longer. Um, so a lot of these people transcend careers and transcend, um, um, different positions that I've held as well and make room for us. And I think that's just really critical when we're looking for allies and when allies are looking for us, >>I love how you described allies, mentors and sponsors Stephanie. And the difference. I didn't understand the difference between a mentor and a sponsor until a couple of years ago. Do you talk with some of those younger females on your team so that when they come into the organization and maybe they're fresh outta college, or maybe they've transitioned into tech so that they can also learn from you and understand the importance and the difference between the allies and the sponsors and the mentors? >>Absolutely. And I think that's really interesting because I do take, uh, an extra, uh, approach an extra time to really reach out to the women that have joined the team. One. I wanna make sure they stay right. I don't want them feeling, Hey, I'm alone here and I need to, I need to go do something else. Um, and they are located around the world, on my team. They're also different age groups, so early in career, as well as more senior people and really reaching out, making sure they know that I'm there. But also as Danielle had mentioned, connecting them to other people in the community that they can reach out to for those same opportunities and making room for them >>Make room at the table. It's so important. And it can, you never know what a massive difference and impact you can make on someone's life. And I, and I bet there's probably a lot of mentors and sponsors and allies of mine that would be surprised to know, uh, the massive influence they've had Daniel back over. Let's talk about some of the techniques that you employ, that AWS employees to make the work environment, a great place for women to really thrive and, and be retained as Stephanie was saying. Of course that's so important. >>Yeah. I mean, definitely I think that the community building, as well as we have a bit more programmatic mentorship, um, we're trying to get to the point of having a more programmatic sponsorship as well. Um, but I think just making sure that, um, you know, both everything from, uh, recruit to onboard to ever boarding that, uh, they they're the women who come into the organization, whether it's they're coming in on the software engineering side or the field side or the sales side that they feel as that they have someone, uh, working with them to help them drive their career. Those are the key things that were, I think from an organizational perspective are happening across the board. Um, for me personally, when I run my organization, I'm really trying to make sure that people feel that they can come to me at any time open door policy, make sure that they're surfacing any times in which they are feeling excluded or anything like that, any challenges, whether it be with a customer, a partner or with a colleague. Um, and then also of course, just making sure that I'm being a good sponsor, uh, to, to people on my team. Um, that is key. You can talk about it, but you have to start with yourself as well. >>That's a great point. You you've got to, to start with yourself and really reflect on that. Mm-hmm <affirmative> and look, am I, am I embodying what it is that I need? And not that I know they need that focused, thoughtful intention on that is so importants, let's talk about some of the techniques that you use that NetApp uses to make the work environment a great place for those women are marginalized, um, communities to really thrive. >>Yeah. And I appreciate it and much like Danielle, uh, and much like AWS, we have some of those more structured programs, right around sponsorship and around mentorship. Um, probably some growth there, opportunities for allies, because I think that's more of a newer concept in really an informal structure around the allies, but something that we're growing into at NetApp, um, on my team personally, I think, um, leading by example's really key. And unfortunately, a lot of the, um, life stuffs still lands on the women, whether we like it or not. Uh, I have a very, uh, active husband in our household, but I still carry when it push comes to shove it's on me. Um, and I wanna make sure that my team knows it's okay to take some time and do the things you need to do with your family. Um, I'm I show up as myself authentically and I encourage them to do the same. >>So it's okay to say, Hey, I need to take a personal day. I need to focus on some stuff that's happening in my personal life this week now, obviously to make sure your job's covered, but just allowing some of that softer vulnerability to come into the team as well, so that others, um, men and women can feel they can do the same thing. And that it's okay to say, I need to balance my life and I need to do some other things alongside. Um, so it's the formal programs, making sure people have awareness on them. Um, I think it's also softly calling people out on biases and saying, Hey, I'm not sure if you know, this landed that way, but I just wanted to make you aware. And usually the feedback is, oh my gosh, I didn't know. And could you coach me on something that I could do better next time? So all of this is driven through our NetApp formal programs, but then it's also how you manifest it on the teams that we're leading. >>Absolutely. And sometimes having that mirror to reflect into can be really eye-opening and, and allow you to, to see things in a completely different light, which is great. Um, you both talked about, um, kind of being what you, uh, can see, and, and I know both companies are upset customer obsessed in a good way. Talk to me a little bit, Danielle, go back over to you about the AWS NetApp partnership. Um, some of that maybe alignment on, on performance on obviously you guys are very well aligned, uh, in terms of that, but also it sounds like you're quite aligned on diversity and inclusion. >>Well, we definitely do. We have the best partnerships with companies in which we have these value alignments. So I think that is a positive thing, of course, but just from a, from a partnership perspective, you know, from my five now plus years of being a part of the APN, this is, you know, one of the most significant years with our launch of FSX for NetApp. Um, with that, uh, key key service, which we're making available natively on AWS. I, I can't think of a better Testament to the, to the, um, partnership than that. And that's doing incredibly well and it really resonates with our customers. And of course it started with customers and their need for NetApp. Uh, so, you know, that is a reflection, I think, of the success that we're having together. >>And Stephanie talk to, uh, about the partnership from your perspective, NetApp, AWS, what you guys are doing together, cultural alignment, but also your alignment on really bringing diversity into drive performance. >>Yeah, I think it's a, a great question. And I have to say it's just been a phenomenal year. Our relationship has, uh, started before our first party service with FSX N but definitely just, um, uh, the trajectory, um, between the two companies since the announcement about nine months ago has just taken off to a, a new level. Um, we feel like an extended part of the family. We worked together seamlessly. A lot of the people in my team often say we feel like Amazonians. Um, and we're really part of this transformation at NetApp from being that storage hardware company into being an ISV and a cloud company. And we could not do this without the partnership with AWS and without the, uh, first party service of Fs XM that we've recently released. Um, I think that those joint values that Danielle referred to are critical to our success, um, starting with customer obsession and always making sure that we are doing the right thing for the customer. >>We coach our team teams all the time on if you are doing the right thing for the customers, you cannot do anything wrong. Just always put the customer at the, in the center of your decisions. And I think that there is, um, a lot of best practice sharing and collaboration as we go through this change. And I think a lot of it is led by the diverse backgrounds that are on the team, um, female, male, um, race and so forth, and just to really, uh, have different perspectives and different experiences about how we approach this change. Um, so we definitely feel like a part of the family. Uh, we are absolutely loving, uh, working with the AWS team and our team knows that we are the right place, the right time with the right people. >>I love that last question for each of you. And I wanna stick with you Stephanie advice to your younger self, think back five years. What advice would you seen what you've accomplished and maybe the thet route that you've taken along the way, what would you advise your youngest Stephanie self. >>Uh, I would say keep being curious, right? Keep being curious, keep asking questions. And sometimes when you get a no, it's not a bad thing, it just means not right now and find out why and, and try to get feedback as to why maybe that wasn't the right opportunity for you. But, you know, just go for what you want. Continue to be curious, continue to ask questions and find a support network of people around you that wanna help you because they are there and they, they wanna see you be successful too. So never be shy about that stuff. >><laugh> absolutely. And I always say failure does not have to be an, a bad F word. A no can be the beginning of something. Amazing. Danielle, same question for you. Thinking back to when you first started in your career, what advice would you give your younger self? >>Yeah, I think the advice I'd give my younger self would be, don't be afraid to put yourself out there. Um, it's certainly, you know, coming from an engineering background, maybe you wanna stay behind the scenes, not, not do a presentation, not do a public speaking event, those types of things, but back to what the community really needs, this thing. Um, you know, I genuinely now, uh, took me a while to realize it, but I realized I needed to put myself out there in order to, um, you know, allow younger women to see what they could be. So that would be the advice I would give. Don't be afraid to put yourself out there. >>Absolutely. That advice that you both gave are, is so fantastic, so important and so applicable to everybody. Um, don't be afraid to put yourself out there, ask questions. Don't be afraid of a, no, that it's all gonna happen at some point or many points along the way. That can also be good. So thank you ladies. You inspired me. I appreciate you sharing what AWS and NetApp are doing together to strengthen diversity, to strengthen performance and the advice that you both shared for your younger selves was brilliant. Thank you. >>Thank you. >>Thank you >>For my guests. I'm Lisa Martin. You're watching the AWS partner showcase. See you next time. Hey everyone. Welcome to the AWS partner showcase season one, episode three women in tech. I'm your host, Lisa Martin. I've got two female rock stars joining me. Next Vero Reynolds is here engineering manager, telemetry at honeycomb, and one of our cube alumni, Danielle Ock ISV PSA director at AWS. Join us as well. Ladies. It's great to have you talking about a very important topic today. >>Thanks for having us. >>Yeah, thanks for having me. Appreciate it. >>Of course, Vera, let's go ahead and start with you. Tell me about your background and tech. You're coming up on your 10th anniversary. Happy anniversary. >>Thank you. That's right. I can't believe it's been 10 years. Um, but yeah, I started in tech in 2012. Um, I was an engineer for most of that time. Uh, and just recently as a March, switched to engineering management here at honeycomb and, um, you know, throughout my career, I was very much interested in all the things, right. And it was a big FOMO as far as trying a few different, um, companies and products. And I've done things from web development to mobile to platforms. Um, it would be apt to call me a generalist. Um, and in the more recent years I was sort of gravitating more towards developer tool space. And for me that, uh, came in the form of cloud Foundry circle CI and now honeycomb. Um, I actually had my eye on honeycomb for a while before joining, I came across a blog post by charity majors. >>Who's one of our founders and she was actually talking about management and how to pursue that and whether or not it's right, uh, for your career. And so I was like, who is this person? I really like her, uh, found the company. They were pretty small at the time. So I was sort of keeping my eye on them. And then when the time came around for me to look again, I did a little bit more digging, uh, found a lot of talks about the product. And on the one hand they really spoke to me as the solution. They talked about developers owning their coding production and answering questions about what is happening, what are your users seeing? And I felt that pain, I got what they were trying to do. And also on the other hand, every talk I saw at the time was from, uh, an amazing woman <laugh>, which I haven't seen before. Uh, so I came across charity majors again, Christine Y our other founder, and then Liz Jones, who's our principal developer advocate. And that really sealed the deal for me as far as wanting to work here. >>Yeah. Honeycomb is interesting. This is a female founded company. You're two leaders. You mentioned that you like the technology, but you were also attracted because you saw females in the leadership position. Talk to me a little bit about what that's like working for a female led organization at honeycomb. >>Yeah. You know, historically, um, we have tried not to over index on that because there was this, uh, maybe fear awareness of, um, it taking away from our legitimacy as an engineering organization, from our success as a company. Um, but I'm seeing that, uh, rhetoric shift recently because we believe that with great responsibility, uh, with great power comes great responsibility, and we're trying to be more intentional as far as using that attribute of our company. Um, so I would say that for me, it was, um, a choice between a few offers, right. And that was a selling point for sure, because again, I've never experienced it and I've really seen how much they walk that walk. Um, even me being here and me moving into management, I think were both, um, ways in which they really put a lot of trust and support in me. And so, um, I it's been a great ride. >>Excellent. Sounds like it. Before we bring Danielle in to talk about the partnership. I do wanna have you there talk to the audience a little bit about honeycomb, what technology it's delivering and what are its differentiators. >>Yeah, absolutely. Um, so honeycomb is an observability tool, uh, that enables engineers to answer questions about the code that runs in production. And, um, we work with a number of various customers. Some of them are Vanguards, slack. Hello, fresh, just to name a couple, if you're not familiar with observability tooling, it's akin to traditional application performance monitoring, but we believe that observability is succeeding APM because, uh, APM tools were built at the time of monoliths and they just weren't designed to help us answer questions about complex distributed systems that we work with today, where things can go wrong anywhere in that chain. And you can't predict what you're gonna need to ask ahead of time. So some of the ways that we are different is our ability to store and query really rich data, which we believe is the key to understanding those complex systems. >>What I mean by rich data is, um, something that has a lot of attributes. So for example, when an error happens, knowing who it happened to, which user ID, which, um, I don't know, region, they were in, um, what, what, what they were doing at the time and what was happening at the rest of your system. And our ingest engine is really fast. You can do it in as little as three seconds and we call data like this. I said, kind of rich data, contextual data. We refer it as having high ality and high dimensionality, which are big words. But at the end of the day, what that means is we can store and we can query the data. We can do it really fast. And to give you an example of how that looks for our customers, let's say you have a developer team who are using comb to understand and observe their system. >>And they get a report that a user is experiencing a slowdown or something's wrong. They can go into comb and figure out that this only happens to users who are using a particular language pack with their app. And they operated their app last week, that it only happens when they are trying to upload a file. And so it's this level of granularity and being able to zoom in and out, um, under your data that allows you to understand what's happening, especially when you have an incident going on, right. Or your really important high profile customer is telling you that something's wrong. And we can do that. Even if everything else in your other tools looks fine, right? All of your dashboards are okay. You're not actually getting paged on it, but your customers are telling you that something's wrong. Uh, and we believe that's where we shine in helping you there. >>Excellent. It sounds like that's where you really shine that real time visibility is so critical these days. Danielle, Danielle, wanna bring you into the conversation. Talk to us a little bit about the honeycomb partnership from the AWS lens. >>Yeah. So excuse me, observability is obviously a very important, uh, segment in the cloud space, very important to AWS, um, because a lot of all of our customers, uh, as they build their systems distributed, they need to be able to see where, where things are happening in the complex systems that they're building. And so honeycomb is a, is an advanced technology partner. Um, they've been working with us for quite some time and they have a, uh, their solution is listed on the marketplace. Um, definitely something that we see a lot of demand with our customers and they have many integrations, uh, which, you know, we've seen is key to success. Um, being able to work seamlessly with the rest of the services inside of the AWS platform. And I know that they've done some, some great things with people who are trying to develop games on top of AWS, uh, things in that area as well. And so, uh, very important partner in the observa observability market that we have >>Back to you, let's kind of unpack the partnership, the significance that honeycomb ha is getting from being partners with an organization as potent and pivotal as AWS. >>Yeah, absolutely. Um, I know this predates me to some extent, but I know for a long time, AWS and honeycomb has really pushed the envelope together. And, um, I think it's a beneficial relationship for both ends. There's kind of two ways of looking at it. On the one side, there is our own infrastructure. So honeycomb runs on AWS and actually one of our critical workloads that supports that fast query engine that I mentioned uses Lambda. And it does so in a pretty Orthodox way. So we've had a longstanding conversation with the AWS team as far as drawing outside those lines and kind of figuring out how to use this technology in a way that works for us and hopefully will work for other customers of theirs as well. Um, that also allows us to ask for early access for certain features when they become available. >>And then that way we can be sort of the Guinea pigs and try things out, um, in a way that migrates our system and optimizes our own performance, but also allows again, other customers of AWS to follow in that path. And then the other side of that partnership is really supporting our customers who are both honeycomb users and AWS users, because it's, as you imagine, quite a big overlap, and there are certain ways in which we can allow our customers to more easily get their data from AWS to honeycomb. So for example, last year we built a tool, um, based on the new Lambda extension capability that allowed our users who run their applications in Lambdas to get that telemetry data out of their applications and into honeycomb. And it man was win, win. >>Excellent. So I'm hearing a lot of synergies from a technology perspective, you're sticking with you, and then Danielle will bring you in, let's talk about how honeycomb supports D and I across its organization. And how is that synergistic with AWS's approach? Yeah, >>Yeah, absolutely. So I sort of alluded to that hesitancy to over index on the women led aspect of ourselves. Um, but again, a lot of things are shifting, we're growing a lot. And so we are recognizing that we need to be more intentional with our DEI initiatives, and we also notice that we can do better and we should do better. And to that, and we're doing a few things differently, um, that are pretty recent initiatives. We are partnering with organizations that help us target specific communities that are underrepresented in tech. Um, some examples would be after tech hu Latinas in tech among, um, a number of others. And another initiative is DEI head start. That's something that is an internal, um, practice that we started that includes reaching out to underrepresented applicants before any new job for honeycomb becomes live. So before we posted to LinkedIn, before it's even live on our job speech, and the idea there is to kind of balance our pipeline of applicants, which the hope is will lead to more diverse hires in the long term. >>That's a great focus there. Danielle, I know we've talked about this before, but for the audience, in terms of the context of the honeycomb partnership, the focus at AWS for D E and I is really significant, unpack that a little bit for us. >>Well, let me just bring it back to just how we think about it, um, with the companies that we work with, but also in, in terms of, you know, what we want to be able to do, excuse me, it's very important for us to, you know, build products that reflect, uh, the customers that we have. And I think, you know, working with, uh, a company like honeycomb that is looking to differentiate in a space, um, by, by bringing in, you know, the experiences of many different types of people I genuinely believe. And I'm sure Vera also believes that by having those diverse perspectives, that we're able to then build better products for our customers. Um, and you know, it's one of, one of our leadership principles, uh, is, is rooted in this. I write a lot, it asks for us to seek out diverse perspectives. Uh, and you can't really do that if everybody kind of looks the same and thinks the same and has the same background. So I think that is where our de and I, um, you know, I thought process is rooted and, you know, companies like honeycomb that give customers choice and differentiate and help them, um, to do what they need to do in their unique, um, environments is super important. So >>The, the importance of thought diversity cannot be underscored enough. It's something that is, can be pivotal to organizations. And it's very nice to hear that that's so fundamental to both companies, Barry, I wanna go back to you for a second. You, I think you mentioned this, the DEI head start program, that's an internal program at honeycomb. Can you shed a little bit of light on that? >>Yeah, that's right. And I actually am in the process of hiring a first engineer for my team. So I'm learning a lot of these things firsthand, um, and how it works is we try to make sure to pre-load our pipeline of applicants for any new job opening we have with diverse candidates to the best of our abilities, and that can involve partnering with the organizations that I mentioned or reaching out to our internal network, um, and make sure that we give those applicants a head start, so to speak. >>Excellent. I like that. Danielle, before we close, I wanna get a little bit of, of your background. We've got various background in tag, she's celebrating her 10th anniversary. Give me a, a short kind of description of the journey that you've navigated through being a female in technology. >>Yeah, thanks so much. I really appreciate, uh, being able to share this. So I started as a software engineer, uh, back actually in the late nineties, uh, during the, the first.com bubble and, uh, have, have spent quite a long time actually as an individual contributor, um, probably working in software engineering teams up through 2014 at a minimum until I joined AWS, uh, as a customer facing solutions architect. Um, I do think spending a lot of time, hands on definitely helped me with some of the imposter syndrome, um, issues that folks suffer from not to say I don't at all, but it, it certainly helped with that. And I've been leading teams at AWS since 2015. Um, so it's really been a great ride. Um, and like I said, I'm very happy to see all of our engineering teams change, uh, as far as their composition. And I'm, I'm grateful to be part of it. >>It's pretty great to be able to witness that composition change for the better last question for each of you. And we're almost out of time and Danielle, I'm gonna stick with you. What's your advice, your recommendations for women who either are thinking about getting into tech or those who may be in tech, maybe they're in individual positions and they're not sure if they should apply for that senior leadership position. What do you advise them to do? >>I mean, definitely for the individual contributors, tech tech is a great career, uh, direction, um, and you will always be able to find women like you, you have to maybe just work a little bit harder, uh, to join, have community, uh, in that. But then as a leader, um, representation is very important and we can bring more women into tech by having more leaders. So that's my, you just have to take the lead, >>Take the lead, love that there. Same question for you. What's your advice and recommendations for those maybe future female leaders in tech? >>Yeah, absolutely. Um, Danielle mentioned imposter syndrome and I think we all struggle with it from time to time, no matter how many years it's been. And I think for me, for me, the advice would be if you're starting out, don't be afraid to ask, uh, questions and don't be afraid to kind of show a little bit of ignorance because we've all been there. And I think it's on all of us to remember what it's like to not know how things work. And on the flip side of that, if you are a more senior IC or, uh, in a leadership role, also being able to model just saying, I don't know how this works and going and figuring out answers together because that was a really powerful shift for me early in my career is just to feel like I can say that I don't know something. >>I totally agree. I've been in that same situation where just ask the question because you I'm guaranteed, there's a million outta people in the room that probably has the, have the same question and because of imposter syndrome, don't wanna admit, I don't understand that. Can we back up, but I agree with you. I think that is, um, one of the best things. Raise your hand, ask a question, ladies. Thank you so much for joining me talking about honeycomb and AWS, what you're doing together from a technology perspective and the focus efforts that each company has on D E and I, we appreciate your insights. Thank you so much for having us great talking to you. My pleasure, likewise for my guests, I'm Lisa Martin. You're watching the AWS partner showcase women in check. Welcome to the AWS partner showcase I'm Lisa Martin, your host. This is season one, episode three, and this is a great episode that focuses on women in tech. I'm pleased to be joined by Danielle Shaw, the ISV PSA director at AWS, and the sponsor of this fantastic program. Danielle, it's great to see you and talk about such an important topic. >>Yes. And I will tell you, all of these interviews have just been a blast for me to do. And I feel like there has been a lot of gold that we can glean from all of the, um, stories that we heard on these interviews and good advice that I myself would not have necessarily thought of. So >>I agree. And we're gonna get to set, cuz advice is one of the, the main things that our audience is gonna hear. We have Hillary Ashton, you'll see from TETA there, Reynolds joins us from honeycomb, Stephanie Curry from NetApp and Sue Paris from Jefferson Frank. And the topics that we dig into are first and foremost, diversity equity and inclusion. That is a topic that is incredibly important to every organization. And some of the things Danielle that our audiences shared were really interesting to me. One of the things that I saw from a thematic perspective over and over was that like D Reynolds was talking about the importance of companies and hiring managers and how they need to be intentional with de and I initiatives. And that intention was a, a, a common thing that we heard. I'm curious what your thoughts are about that, that we heard about being intentional working intentionally to deliver a more holistic pool of candidates where de I is concerned. What are your, what were some of the things that stuck out to you? >>Absolutely. I think each one of us is working inside of organizations where in the last, you know, five to 10 years, there's been a, you know, a strong push in this direction, mostly because we've really seen, um, first and foremost, by being intentional, that you can change the, uh, the way your organization looks. Um, but also just that, you know, without being intentional, um, there was just a lot of, you know, outcomes and situations that maybe weren't great for, um, you know, a healthy, um, and productive environment, uh, working environment. And so, you know, a lot of these companies have made a big investments and put forth big initiatives that I think all of us are involved in. And so we're really excited to get out here and talk about it and talk about, especially as these are all partnerships that we have, how, you know, these align with our values. So >>Yeah, that, that value alignment mm-hmm <affirmative> that you bring up is another thing that we heard consistently with each of the partners, there's a cultural alignment, there's a customer obsession alignment that they have with AWS. There's a D E and I alignment that they have. And I, I think everybody also kind of agreed Stephanie Curry talked about, you know, it's really important, um, for diversity on it, on, on impacting performance, highly performant teams are teams that are more diverse. I think we heard that kind of echoed throughout the women that we talked to in >>This. Absolutely. And I absolutely, and I definitely even feel that, uh, with their studies out there that tell you that you make better products, if you have all of the right input and you're getting all many different perspectives, but not just that, but I can, I can personally see it in the performing teams, not just my team, but also, you know, the teams that I work alongside. Um, arguably some of the other business folks have done a really great job of bringing more women into their organization, bringing more underrepresented minorities. Tech is a little bit behind, but we're trying really hard to bring that forward as well to in technical roles. Um, but you can just see the difference in the outcomes. Uh, at least I personally can just in the adjacent teams of mine. >>That's awesome. We talked also quite a bit during this episode about attracting women and underrepresented, um, groups and retaining them. That retention piece is really key. What were some of the things that stuck out to you that, um, you know, some of the guests talked about in terms of retention? >>Yeah. I think especially, uh, speaking with Hillary and hearing how, uh, Teradata is thinking about different ways to make hybrid work work for everybody. I think that is definitely when I talk to women interested in joining AWS, oftentimes that might be one of the first, uh, concerns that they have. Like, am I going to be able to, you know, go pick my kid up at four o'clock at the bus, or am I going to be able to, you know, be at my kids' conf you know, conference or even just, you know, have enough work life balance that I can, um, you know, do the things that I wanna do outside of work, uh, beyond children and family. So these are all very important, um, and questions that especially women come and ask, but also, um, you know, it kind of is a, is a bellwether for, is this gonna be a company that allows me to bring my whole self to work? And then I'm also gonna be able to have that balance that I need need. So I think that was something that is, uh, changing a lot. And many people are thinking about work a lot differently. >>Absolutely. The pandemic not only changed how we think about work, you know, initially it was, do I work from home or do I live at work? And that was legitimately a challenge that all of us faced for a long time period, but we're seeing the hybrid model. We're seeing more companies be open to embracing that and allowing people to have more of that balance, which at the end of the day, it's so much better for product development for the customers, as you talked about there's, it's a win-win. >>Absolutely. And, you know, definitely the first few months of it was very hard to find that separation to be able to put up boundaries. Um, but I think at least I personally have been able to find the way to do it. And I hope that, you know, everyone is getting that space to be able to put those boundaries up to effectively have a harmonious, you know, work life where you can still be at home most of the time, but also, um, you know, have that cutoff point of the day or at least have that separate space that you can feel that you're able to separate the two. >>Yeah, absolutely. And a lot of that from a work life balance perspective leads into one of the next topics that we covered in detail with, and that's mentors and sponsors the differences between them recommendations from, uh, the women on the panel about how to combat imposter syndrome, but also how to leverage mentors and sponsors throughout your career. One of the things that, that Hillary said that I thought was fantastic, advice were mentors and sponsors are concerned is, is be selective in picking your bosses. We often see people, especially younger folks, not necessarily younger folks. I shouldn't say that that are attracted to a company it's brand maybe, and think more about that than they do the boss or bosses that can help guide them along the way. But I thought that was really poignant advice that Hillary provided something that I'm gonna take into consideration myself. >>Yeah. And I honestly hadn't thought about that, but as I reflect through my own career, I can see how I've had particular managers who have had a major impact on helping me, um, with my career. But, you know, if you don't have the ability to do that, or maybe that's not a luxury that you have, I think even if you're able to, you know, find a mentor for a period of time or, um, you know, just, just enable for you to be able to get from say a point a to point B just for a temporary period. Um, just so you can grow into your next role, have a, have a particular outcome that you wanna drive, have a particular goal in mind find that person who's been there and done that and can really help you get through. If you don't have the luxury of picking your manager mentor, who can help you get to the next step. >>Exactly. That, that I thought that advice was brilliant and something that I hadn't really considered either. We also talked with several of the women about imposter syndrome. You know, that's something that everybody, I think, regardless of gender of your background, everybody feels that at some point. So I think one of the nice things that we do in this episode is sort of identify, yes, imposter syndrome is real. This is, this is how it happened to me. This is I navigated around or got over it. I think there's some great advice there for the audience to glean as well about how to dial down the imposter syndrome that they might be feeling. >>Absolutely. And I think the key there is just acknowledging it. Um, but also just hearing all the different techniques on, on how folks have dealt with it because everybody does, um, you know, even some of the smartest, most confident men I've, I've met in, uh, industry still talk to me about how they have it and I'm shocked by it oftentimes, but, um, it is very common and hopefully we, we talk about some good techniques to, to deal with that. >>I think we do, you know, one of the things that when we were asking the, our audience, our guests about advice, what would they tell their younger selves? What would they tell young women or underrepresented groups in terms of becoming interested in stem and in tech and everybody sort of agreed on me, don't be afraid to raise your hand and ask questions. Um, show vulnerabilities, not just as the employee, but even from a leadership perspective, show that as a leader, I, I don't have all the answers. There are questions that I have. I think that goes a long way to reducing the imposter syndrome that most of us have faced at some point in our lives. And that's just, don't be afraid to ask questions. You never know, oh, how can people have the same question sitting in the room? >>Well, and also, you know, for folks who've been in industry for 20, 25 years, I think we can just say that, you know, it's a, it's a marathon, it's not a sprint and you're always going to, um, have new things to learn and you can spend, you know, back to, we talked about the zing and zagging through careers, um, where, you know, we'll have different experiences. Um, all of that kind of comes through just, you know, being curious and wanting to continue to learn. So yes, asking questions and being vulnerable and being able to say, I don't know all the answers, but I wanna learn is a key thing, uh, especially culturally at AWS, but I'm sure with all of these companies as well, >>Definitely I think it sounded like it was really ingrained in their culture. And another thing too, that we also talked about is the word, no, doesn't always mean a dead end. It can often mean not right now or may, maybe this isn't the right opportunity at this time. I think that's another important thing that the audience is gonna learn is that, you know, failure is not necessarily a bad F word. If you turn it into opportunity, no isn't necessarily the end of the road. It can be an opener to a different door. And I, I thought that was a really positive message that our guests, um, had to share with the, the audience. >>Yeah, totally. I can, I can say I had a, a mentor of mine, um, a very, uh, strong woman who told me, you know, your career is going to have lots of ebbs and flows and that's natural. And you know that when you say that, not right now, um, that's a perfect example of maybe there's an ebb where it might not be the right time for you now, but something to consider in the future. But also don't be afraid to say yes, when you can. <laugh> >>Exactly. Danielle, it's been a pleasure filming this episode with you and the great female leaders that we have on. I'm excited for the audience to be able to learn from Hillary Vera, Stephanie Sue, and you so much valuable content in here. We hope you enjoy this partner showcase season one, episode three, Danielle, thanks so much for helping >>Us with it's been a blast. I really appreciate it >>All audience. We wanna enjoy this. Enjoy the episode.

>>Hey everyone. Welcome to the AWS partner showcase season one, episode three women in tech. I'm your host. Lisa Martin. I've got two female rock stars joining me. Next Vera Reynolds is here engineering manager, telemetry at honeycomb, and one of our Cub alumni, Danielle GShock ISV PSA director at AWS joins us as well. Ladies. It's great to have you talking about a very important topic today. >>Thanks for having us. Yeah, thanks for having me. Appreciate it. >>Of course, Vera, let's go ahead and start with you. Tell me about your background and tech. You're coming up on your 10th anniversary. Happy anniversary. >>Thank you. That's right. I can't believe it's been 10 years, but yeah, I started in tech in 2012. I was an engineer for most of that time. And just recently, as of March switched to engineering management here at honeycomb and, you know, throughout my career, I was very much interested in all the things, right. And it was a big FOMO as far as trying a few different companies and products, and I've done things from web development to mobile, to platforms. It would be apt to call me a generalist. And in the more recent years, I was sort of gravitating more towards developer tool space. And for me, that came in the form of cloud Foundry circle CI, and now honeycomb. I actually had my eye on honeycomb for a while before joining, I came across a blog post by charity majors. Who's one of our founders and she was actually talking about management and how to pursue that and whether or not it's right for your career. >>And so I was like, who is this person? I really like her found the company. They were pretty small at the time. So I was sort of keeping my eye on them. And then when the time came around for me to look again, I did a little bit more digging, found a lot of talks about the product. And on the one hand, they really spoke to me as the solution. They talked about developers owning their coding in production and answering questions about what is happening, what are your users seeing? And I felt that pain, I got what they were trying to do. And also on the other hand, every talk I saw at the time was from an amazing woman, which I haven't seen before. So I came across charity majors again, Christine Young, who's our other founder. And then Liz Frank Jones, who's our, our principal developer advocate. And that really sealed the deal for me as far as wanting to work here. >>Yeah. Honeycomb is interesting. This is a female founded company. You two leaders, you mentioned that you liked the technology, but you were also attracted because you saw females and the leadership position. Talk to me a little bit about what that's like working for a female led organization at honeycomb. >>Yeah. You know, historically we have tried not to over index on that because there was this maybe fear or rareness of it taking away from our legitimacy as an engineering organization, from our success as a company. But I'm seeing that rhetoric shift recently because we believe that with great responsibility with great power comes great responsibility. And we're trying to be more intentional as far as using that attribute of our company. So I would say that for me, it was a choice between a few offers, right. And that was a selling point, for sure, because again, I've never experienced it and I've really seen how much they walk that walk. Even me being here and me moving into management, I think were both ways in which they really put a lot of trust and support in me. And so I it's been a great ride. >>Excellent. Sounds like it. Before we bring Danielle in to talk about the partnership. I do wanna have you here, talk to the audience a little bit about honeycomb, what technology it's delivering and what are its differentiators. >>Yeah, absolutely. So honeycomb is an observability tool that enables engineers to answer questions about the code that runs in production. And we work with a number of various customers. Some of them are Vanguards, slack. Hello, fresh. Just to name a couple. If you're not familiar with observability tooling, it's akin to traditional application performance monitoring, but we believe that observability is succeeding APM because APM tools were built at the time of monoliths and they just weren't designed to help us answer questions about complex distributed systems that we work with today, where things can go wrong anywhere in that chain. And you can't predict what you're gonna need to ask ahead of time. So some of the ways that we are different is our ability to store and query really rich data, which we believe is the key to understanding those complex systems. What I mean by rich data is something that has a lot of attributes. >>So for example, when an error happens, knowing who it happened to, which user ID, which I don't know region, they were in, what, what they were doing at the time and what was happening at the rest of your system. And our ingest engine is really fast. You could do it in as little as three seconds and we call data like this. I said, kind of rich data, contextual data. We refer it as having high ity and high dimensionality, which are big words. But at the end of the day, what that means is we can store and we can query this data and we can do it really fast. And to give you an example of how that looks for our customers, let's say you have a developer team who are using honeycomb to understand and observe their system. And they get a report that a user is experiencing a slowdown or something's wrong. >>They can go into honeycomb and figure out that this only happens to users who are using a particular language pack with their app. And they operated their app last week, that it only happens when they are trying to upload a file. And so it's this level of granularity and being able to zoom in and out under data that allows you to understand what's happening, especially when you have an incident going on, right. Or your really important high profile customer is telling you that something's wrong. And we can do that. Even if everything else in your other tools looks fine, right? All of your dashboards are okay. You're not actually getting paged on it, but your customers are telling you that something's wrong. And we believe that's where we shine in helping you there. >>Excellent. It sounds like that's where you really shine that realtime visibility is so critical these days. Danielle, Danielle, wanna bring you into the conversation. Talk to us a little bit about the honeycomb partnership from the AWS lens. >>Yeah. So excuse me, observability is obviously a very important segment in the cloud space, very important to AWS, because a lot of all of our customers, as they build their systems distributed, they need to be able to see where, where things are happening in the complex systems that they're building. And so honeycomb is a, is an advanced technology partner. They've been working with us for quite some time and they have a, their solution is listed on the marketplace. Definitely something that we see a lot of demand with our customers, and they have many integrations, which, you know, we've seen is key to success. Being able to work seamlessly with the rest of the services inside of the AWS platform. And I know that they've done some, some great things with people who are trying to develop games on top of AWS things in that area as well. And so very important partner in the observa observability market that we have >>You back to you, let's kind of unpack the partnership, the significance that honeycomb ha is getting from being partners with an organization as potent and pivotal as AWS. >>Yeah, absolutely. I know that this predates me to some extent, but I know for a long time, AWS and honeycomb has really pushed the envelope together. And I think it's a beneficial relationship for both ends. There is kind of two ways of looking at it. On the one side, there is our own infrastructure. So honeycomb runs on AWS and actually one of our critical workloads that supports that fast query engine that I mentioned uses Lambda. And it does so in a pretty Orthodox way. So we've had a long standing conversation with the AWS team as far as drawing outside those lines and kind of figuring out how to use the technology in a way that works for us and hopefully will work for other customers of theirs as well. That also allows us to ask for early access for certain features when they become available. >>And then that way we can be sort of the Guinea pigs and try things out in a way that migrates our system and optimizes our own performance, but also allows again, other customers of AWS to follow in that path. And then the other side of that partnership is really supporting our customers who are both honeycomb users and AWS users, because it's, as you imagine, quite a big overlap, and there are certain ways in which we can allow our customers to more easily get their data from AWS to honeycomb. So for example, last year we built a tool based on the new Lambda extension capability that allowed our users who run their applications in Lambdas to get that tele, telemetry data out of their applications and into honeycomb and it land was win-win >>Excellent. So I'm hearing a lot of synergies from a technology perspective, you're sticking with you, and then Danielle will bring you in. Let's talk about how honeycomb supports D and I across its organization. And how is that synergistic with AWS's approach? Yeah, >>Yeah, absolutely. So I, I sort of alluded to that hesitancy to over index on the women led aspect of ourselves. But again, a lot of things are shifting, we're growing a lot. And so we are recognizing that we need to be more intentional with our DEI initiatives, and we also notice that we can do better and we should do better. And to that, and we're doing a few things differently that are pretty recent initiatives. We are partnering with organizations that help us target specific communities that are underrepresented in tech. Some examples would be after tech hu Latinas in tech among a number of others. And another initiative is DEI head start. That's something that is an internal practice that we started that includes reaching out to underrepresented applicants before any new job for honeycomb becomes live. So before we posted to LinkedIn, before it's even live on our job speech, and the idea there is to kind of balance our pipeline of applicants, which the hope is we'll lead to more diverse hires in the long term. >>That's a great focus there. Danielle, I know we've talked about this before, but for the audience, in terms of the context of the honeycomb partnership, the focus at AWS for D E and I is really significant, unpack that a little bit for us. >>Well, let me just bring it back to just how we think about it with the companies that we work with, but also in, in terms of, you know, what we want to be able to do, excuse me, it's very important for us to, you know, build products that reflect the customers that we have. And I think, you know, working with a company like honeycomb that is looking to differentiate in a space by, by bringing in, you know, the experiences of many different types of people I genuinely believe. And I'm sure Vera also believes that by having those diverse perspectives, that we're able to then build better products for our customers. And, you know, it's one of, one of our leadership principles is, is rooted in this. I write a lot, it asks for us to seek out diverse perspectives and you can't really do that if everybody kind of looks the same and thinks the same and has the same background. So I think that is where our de and I, you know, I thought process is rooted and, you know, companies like honeycomb that give customers choice and differentiate and help them to do what they need to do in their unique environments is super important. So >>The, the importance of thought diversity cannot be underscored enough. It's something that is, can be pivotal to organizations. And it's very nice to hear that that's so fundamental to both companies, Barry, I wanna go back to you for a second. You, I think you mentioned this, the DEI headstart program, that's an internal program at honeycomb. Can you shed a little bit of light on that? >>Yeah, that's right. And I actually am in the process of hiring a first engineer for my team. So I'm learning a lot of these things firsthand and how it works is we try to make sure to pre-load our pipeline of applicants for any new job opening we have with diverse candidates to the best of our abilities. And that can involve partnering with the organizations that I mentioned or reaching out to our internal network and make sure that we give those applicants a head start, so to speak. >>Excellent. I like that. Danielle, before we close, I wanna get a little bit of, of your background. We've got various background in tech, she's celebrating her 10th anniversary. Give me a, a short kind of description of the journey that you've navigated through being a female in technology. >>Yeah, thanks so much. I really appreciate being able to share this. So I started as a software engineer back actually in the late nineties during the, the first.com bubble and have, have spent quite a long time actually as an individual contributor, probably working in software engineering teams up through 2014 at a minimum until I joined AWS as a customer facing solutions architect. I do think spending a lot of time, hands on, definitely helped me with some of the imposter syndrome issues that folks suffer from not to say I don't at all, but it, it certainly helped with that. And I've been leading teens at AWS since 2015. So it's really been a great ride. And like I said, I'm very happy to see all of our engineering teams change as far as their composition. And I'm, I'm grateful to be part of it. >>It's pretty great to be able to witness that composition change for the better last question for each of you. And we're almost out of time and Danielle, I'm gonna stick with you. What's your advice or your recommendations for women who either are thinking about getting into tech or those who may be in tech, maybe they're in individual contributor positions and they're not sure if they should apply for that senior leadership position. What do you advise them to do? >>I mean, definitely for the individual contributors, tech tech is a great career direction and you will always be able to find women like you, you have to maybe just work a little bit harder to join, have community in that. But then as a leader, representation is very important and we can bring more women into tech by having more leaders. So that's my, you just have to take the lead, >>Take the lead, love it there. Same question for you. What's your advice and recommendations for those maybe future female leaders in tech? >>Yeah, absolutely. Danielle mentioned imposter syndrome and I think we all struggle with it from time to time, no matter how many years it's been. And I think for me, for me, the advice would be if you're starting out, don't be afraid to ask questions and don't be afraid to kind of show a, a little bit of ignorance because we've all been there. And I think it's on all of us to remember what it's like to not know how things work. And on the flip side of that, if you are a more senior IC or in a leadership role, also being able to model just saying, I don't know how this works and going and figuring out answers together because that was a really powerful shift for me early in my career is just to feel like I can say that I don't know something. >>I totally agree. I've been in that same situation where just ask the question because you I'm guaranteed. There's a million other people in the room that probably has the, have the same question. And because of imposter syndrome, don't wanna admit, I don't understand that. Can we back up, but I agree with you. I think that is one of the best things. Raise your hand, ask a question, ladies. Thank you so much for joining me talking about honeycomb and AWS, what you're doing together from a technology perspective and the focus efforts that each company has on D and I, we appreciate your insights. >>Thank you so much for having us great talking to you. >>My pleasure, likewise for my guests, I'm Lisa Martin. You're watching the AWS partner showcase women in check.

>>Hey everyone. Welcome to the AWS partner showcase season one, episode three women in tech. I'm your host. Lisa Martin. I've got two female rock stars joining me. Next Vera Reynolds is here engineering manager, telemetry at honeycomb, and one of our Cub alumni, Danielle GShock ISV PSA director a at AWS joins us as well. Ladies. It's great to have you talking about a very important topic today. >>Thanks for having us. Yeah, thanks for having me. Appreciate it. >>Of course, Vera, let's go ahead and start with you. Tell me about your background and tech. You're coming up on your 10th anniversary. Happy anniversary. >>Thank you. That's right. I can't believe it's been 10 years, but yeah, I started in tech in 2012. I was an engineer for most of that time. And just recently, as of March switched to engineering management here at honeycomb and, you know, throughout my career, I was very much interested in all the things, right. And it was a big FOMO as far as trying a few different companies and products. And I've done things from web development to mobile, to platforms. It would be apt to call me a generalist. And in the more recent years, I was sort of gravitating more towards developer tool space. And for me, that came in the form of cloud Foundry circle CI, and now honeycomb. I actually had my eye on honeycomb for a while before joining, I came across a blog post by charity majors. Who's one of our founders and she was actually talking about management and how to pursue that and whether or not it's right for your career. >>And so I was like, who is this person? I really like her found the company. They were pretty small at the time. So I was sort of keeping my eye on them. And then when the time came around for me to look again, I did a little bit more digging, found a lot of talks about the product. And on the one hand, they really spoke to me as the solution. They talked about developers owning their coding in production and answering questions about what is happening, what are your users seeing? And I felt that pain, I got what they were trying to do. And also on the other hand, every talk I saw at the time was from an amazing woman, which I haven't seen before. So I came across charity majors again, Christine yen, who our other founder, and then Liz Frank Jones, who our principal developer advocate. And that really sealed the deal for me as far as wanting to work here. >>Yeah. Honeycomb is interesting. This is a female founded company. You're two leaders. You mentioned that you like the technology, but you were also attracted because you saw females in the leadership position. Talk to me a little bit about what that's like working for a female led organization at honeycomb. >>Yeah. You know, historically we have tried not to over index on that because there was this maybe fear or rareness of it taking away from our legitimacy as an engineering organization, from our success as a company. But I'm seeing that rhetoric shift recently because we believe that with great responsibility with great power comes great responsibility. And we're trying to be more intentional as far as using that attribute of our company. So I would say that for me, it was a choice between a few offers, right. And that was a selling point, for sure, because again, I've never experienced it and I've really seen how much they walk that walk. Even me being here and me moving into management, I think were both ways in which they really put a lot of trust and support in me. And so I it's been a great ride. >>Excellent. Sounds like it. Before we bring Danielle in to talk about the partnership. I do wanna have you here, talk to the audience a little bit about honeycomb, what technology it's delivering and what are its differentiators. >>Yeah, absolutely. So honeycomb is an observability tool that enables engineers to answer questions about the code that runs in production. And we work with a number of various customers. Some of them are Vanguard, slack. Hello, fresh. Just to name a couple. If you're not familiar with observability tooling, it's akin to traditional application performance monitoring, but we believe that observability is succeeding APM because APM tools were built at the time of monoliths and they just weren't designed to help us answer questions about complex distributed systems that we work with today, where things can go wrong anywhere in that chain. And you can't predict what you're gonna need to ask ahead of time. So some of the ways that we are different is our ability to store and query really rich data, which we believe is the key to understanding those complex systems. What I mean by rich data is something that has a lot of attributes. >>So for example, when an error happens, knowing who it happened to, which user ID, which I don't know region, they were in, what, what, what they were doing at the time and what was happening at the rest of your system. And our ingest engine is really fast. You can do it in as little as three seconds and we call data like this. I said, kind of rich data, contextual data. We refer it as having high ity and high dimensionality, which are big words. But at the end of the day, what that means is we can store and we can query this data and we can do it really fast. And to give you an example of how that looks for our customers, let's say you have a developer team who are using comb to understand and observe their system. And they get a report that a user is experiencing a slowdown or something's wrong. >>They can go into honeycomb and figure out that this only happens to users who are using a particular language pack with their app. And they operated their app last week, that it only happens when they are trying to upload a file. And so it's this level of granularity and being able to zoom in and out under data that allows you to understand what's happening, especially when you have an incident going on, right. Or your really important high profile customer is telling you that something's wrong. And we can do that. Even if everything else in your other tools looks fine, right? All of your dashboards are okay. You're not actually getting paged on it, but your customers are telling you that something's wrong. And we believe that's where we shine in helping you there. >>Excellent. It sounds like that's where you really shine that real time visibility is so critical these days. Danielle, Danielle, wanna bring you into the conversation. Talk to us a little bit about the honeycomb partnership from the AWS lens. >>Yeah. So excuse me, observability is obviously a very important segment in the cloud space, very important to AWS, because a lot of all of our customers, as they build their systems distributed, they need to be able to see where, where things are happening in the complex systems that they're building. And so honeycomb is a, is an advanced technology partner. They've been working with us for quite some time and they have a, their solution is listed on the marketplace. Definitely something that we see a lot of demand with our customers, and they have many integrations, which, you know, we've seen is key to success. Being able to work seamlessly with the rest of the services inside of the AWS platform. And I know that they've done some, some great things with people who are trying to develop games on top of AWS things in that area as well. And so very important partner in the observa observability market that we have. >>Vera a back to you, let's kind of unpack the partnership, the significance that honeycomb ha is getting from being partners with an organization as potent and pivotal as AWS. >>Yeah, absolutely. I Don know that this Predates me to some extent, but I Don know for a long time, AWS and honeycomb has really pushed the envelope together. And I think it's a beneficial relationship for both ends. There's kind of two ways of looking at it. On the one side, there is our own infrastructure. So honeycomb runs on AWS and actually one of our critical workloads that supports that fast query engine that I mentioned uses Lambda. And it does also in a pretty unorthodox way. So we've had a long standing conversation with the AWS team as far as drawing outside those lines and kind of figuring out how to use the technology in a way that works for us and hopefully will work for other customers of theirs as well. That also allows us to ask for early access for certain features when they become available. >>And then that way we can be sort of the Guinea pigs and try things out in a way that migrates our system and optimizes our own performance, but also allows again, other customers of AWS to follow in that path. And then the other side of that partnership is really supporting our customers who are both honeycomb users and AWS users, because it's, as you imagine, quite a big overlap, and there are certain ways in which we can allow our customers to more easily get their data from AWS to honeycomb. So for example, last year, we built a tool based on the new Lambda extension capability that allowed our users who run their applications in Lambdas to get that tele telemetry data out of their applications and into honeycomb and demand was win-win >>Excellent. So I'm hearing a lot of synergies from a technology perspective, you're sticking with you, and then Danielle will bring you in. Let's talk about how honeycomb supports D E and I across its organization. And how is that synergistic with AWS's approach Vera? >>Yeah, absolutely. So I sort of alluded to that hesitancy to over index on the women led aspect of ourselves. But again, a lot of things are shifting, we're growing a lot. And so we are recognizing that we need to be more intentional with our DEI initiatives, and we also notice that we can do better and we should do better. And to that end, we're doing a few things differently that are pretty recent initiatives. We are partnering with organizations that help us target specific communities that are underrepresented in tech. Some examples would be Africa, tech hu Latinas in tech among a number of others. And another initiative is DEI head start. That's something that is an internal practice that we started that includes reaching out to underrepresented applicants before any new job for honeycomb becomes live. So before we posted to LinkedIn, before it's even live on our job speech, and the idea there is to kind of balance our pipeline of applicants, which the hope is will lead to more diverse hires in the long term. >>That's a great focus there. Danielle, I know we've talked about this before, but for the audience, in terms of the context of the honeycomb partnership, the focus at AWS for D E and I is really significant, unpack that a little bit for us. >>Well, let me just bring it back to just how we think about it with the companies that we work with, but also in, in terms of, you know, what we want to be able to do, excuse me, it's very important for us to, you know, build products that reflect the customers that we have. And I think, you know, working with a company like honeycomb that is looking to differentiate in a space by, by bringing in, you know, the experiences of many different types of people I genuinely believe. And I'm sure Vera also believes that by having those diverse perspectives, that we're able to then build better products for our customers. And, you know, it's one of, one of our leadership principles is, is rooted in this. I write a lot, it asks for us to seek out diverse perspectives and you can't really do that if everybody kind of looks the same and thinks the same and has the same background. So I think that is where our de and I, you know, I thought process is rooted and, you know, companies like honeycomb that give customers choice and differentiate and help them to do what they need to do in their unique environments is super important. So >>The, the importance of thought diversity cannot be underscored enough. It's something that is, can be pivotal to organizations. And it's very nice to hear that that's so fundamental to both companies, Barry, I wanna go back to you for a second. You, I think you mentioned this, the DEI head start program, that's an internal program at honeycomb. Can you shed a little bit of light on that? >>Yeah, that's right. And I actually am in the process of hiring a first engineer for my team. So I'm learning a lot of these things firsthand and how it works is we try to make sure to pre-load our pipeline of applicants for any new job opening we have with diverse candidates to the best of our abilities. And that can involve partnering with the organizations that I mentioned or reaching out to our internal network and make sure that we give those applicants a head start, so to speak. >>Excellent. I like that. Danielle, before we close, I wanna get a little bit of, of your background. We've got various background in tech, she's celebrating her 10th anniversary. Give me a, a short kind of description of the journey that you've navigated through being a female in technology. >>Yeah, thanks so much. I really appreciate being able to share this. So I started as a software engineer back actually in the late nineties during the, the first.com bubble and have, have spent quite a long time actually as an individual contributor, probably working in software engineering teams up through 2014 at a minimum until I joined AWS as a customer facing solutions architect. I do think spending a lot of time, hands on, definitely helped me with some of the imposter syndrome issues that folks suffer from not to say I don't at all, but it, it certainly helped with that. And I've been leading teen at AWS since 2015. So it's really been a great ride. And like I said, I'm very happy to see all of our engineering teams change as far as their composition. And I'm, I'm grateful to be part of it. >>It's pretty great to be able to witness that composition change for the better last question for each of you. And we're almost out of time and Danielle, I'm gonna stick with you. What's your advice, your recommendations for women who either are thinking about getting into tech or those who may be in tech, maybe they're in individual contributor positions, and they're not sure if they should apply for that senior leadership position. What do you advise them to do? >>I mean, definitely for the individual contributors, tech tech is a great career direction and you will always be able to find women like you, you have to maybe just work a little bit harder to join, have community in that. But then as a leader, representation is very important and we can bring more women into tech by having more leaders. So that's my, you just have to take the lead, >>Take the lead. Love that various same question for you. What's your advice and recommendations for those maybe future female leaders in tech? >>Yeah, absolutely. Danielle mentioned imposter syndrome and I think we all struggle with it from time to time, no matter how many years it's been. And I think for me, for me, the advice would be if you're starting out, don't be afraid to ask questions and don't be afraid to kind of show a bit, a little bit of ignorance because we've all been there. And I think it's on all of us to remember what it's like to not know how things work. And on the flip side of that, if you are a more senior IC or in a leadership role, also being able to model just saying, I don't know how this works and going and figuring out answers together because that was a really powerful shift for me early in my career is just to feel like I can say that I don't know something. >>I totally agree. I've been in that same situation where just ask the question because you I'm guaranteed. There's a million outta people in the room that probably has the, have the same question and because an imposter syndrome don't wanna admit, I don't understand that. Can we back up, but I agree with you. I think that is one of the best things. Raise your hand and ask a question, ladies. Thank you so much for joining me talking about honeycomb and AWS, what you're doing together from a technology perspective and the focus efforts that each company has on D E and I, we appreciate your insights. >>Thank you so much for having us talking to >>My pleasure. Likewise, for my guests, I'm Lisa Martin. You're watching the AWS partner showcase women in.