Despite the promise of lower infrastructure costs, collective efficiencies through shared IT services and access to cutting-edge cloud technologies, federal agencies had been held back by concerns about data privacy. To meet compliance requirements, governmental bodies and their subcontractors must store and process sensitive federal data separately from private sector workloads. However, until recently, their choices for hosting workloads in the cloud had been limited. AWS GovCloud certification to the highest level of FedRAMP compliance has helped to accelerate cloud adoption in the federal space, with public authorities now moving to the cloud at a faster rate than private corporations. But migrating to the cloud represents a seismic shift away from traditional IT practices. This not only requires a different approach to regulatory compliance but also operational management and application architecture. In this session, derived from the Cloud Leaders DC workshop on May 21st, we tackle the essentials of the cloud from a federal perspective. We take you through the key compliance frameworks that apply to governmental agencies, examine the types of IaaS offerings available and provide you with introductory guidance to cloud best practices. A move to the cloud is a complex undertaking that requires thorough research, careful planning and a range of new skills and expertise. Attend this session so you can fulfill your ultimate mission of innovation, agility, and cooperation, which are key to your organization's IaaS success and a better service to the US public.

1. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Elissa Livingston
Vice President, Strategic Alliances – CloudCheckr
WITH: Benjamin Laibson, CEO – Digital Age Experts (DAE)
Collaborative Cloud Management:
Enabling Public Sector IT
Transformation

2. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

3. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Founded to Produce
Security &
Compliance Software
AWS GovCloud
Government
Competency
Granted
2011
2012
2013
2014
2015
2016
2017
CloudCheckr Security
Module Beta for AWS
Released
CloudCheckr GA
Launch
Added Cost
Optimization Module
CloudCheckr on
AWS Marketplace
Security Competency
Granted
CloudCheckr Multi-Cloud
Offerings Added
Leadership Team Grows:
● CFO
● CRO
● CPO
● SVP Engineering
CloudCheckr’s
Strategic
Alliances Team
created to
cultivate and
nurture
collaborative
approach to
cloud
CLOUDCHECKR’S PUBLIC SECTOR HISTORY
3
2018
COMING SOON!
- CloudCheckr
on GovCloud
Marketplace
- CloudCheckr’s
Education
Comptency

4. Security &
Compliance
• Redshift Cluster <1 GB Of Free
Storage
• WorkSpace With Unhealthy State
• SES Domains With Failure Status
• DynamoDB System Errors
• EBS Volumes Without A Snapshot
• EC2 Errors in Console Output
• RDS Instance <10% Free Storage
• CloudFormation Stack w/ no Policy
• Idle Elastic Load Balancers
• Unused Elastic IP Addresses
• ElastiCache Reserved Nodes Not Utilized
• Unused AMIs
• EC2 RI Types with Unused Hours
• Excessive Costs for a Glacier Restore
• RDS Reserved Instance Payment Failed
• Idle RDS DB Instances
• EBS Volumes w/ Excessive Snapshots
• Elastic Load Balancers w/ HTTP Errors
• Over-Utilized RDS DB Instances
• Redshift Clusters in Maintenance Mode
• Under-Utilized EC2 Instances
• Auto Scaling Groups Not Utilized
• Excessive Log Files
• Failed Activities in RDS Events
• Root Access has Access Keys
• Ineffective Network ACL Deny Rule
• Regions w/out AWS Config Enabled
• EC2-VPC Traffic Allowed from any IP
• S3 Public Sensitive Objects Stored
• CloudTrail Unauthorized Access Attempts
• Publicly Accessible RDS Instances
• SNS Topic w/ Permission Set to All
250+
Cost Management100+
100+
100+
Utilization &
Performance
Availability
2
550+ Best Practices
© CloudCheckr 2018 - Confidential

5. Everything you need to manage and allocate costs, optimize spending & save money
COST ALLOCATION
❯ Granular Cost Reporting
❯ Budget Monitoring
❯ Budget Alerts
❯ EDP Pricing and Allocation Support
COST OPTIMIZATION
❯ Eliminate Waste
❯ “Right-Size” Resources
❯ Purchase Strategy Planning
❯ Reserved Resource Management
BUDGET STRATEGY: COST & EXPENSE MANAGEMENT
© CloudCheckr 2018 - Confidential 5

6. Ensure you have full control of your inventory to prevent resource sprawl
ASSET INVENTORY
❯ Cross Account Inventory Insight
❯ Resource Dashboards and Mapping
RESOURCE UTILIZATION
❯ Historic Utilization Analytics
❯ Continuous Resource Utilization Monitoring
SMART RESOURCE MANAGEMENT: DO MORE WITH LESS
© CloudCheckr 2018 - Confidential

7. 7
Sleep better with unified secure configuration management and activity monitoring for the public cloud
SECURE CONFIGURATION & CONTINUOUS MONITORING
SECURE CONFIGURATION
❯ Best Practice Checks
❯ Policy Management
❯ Network & Perimeter Analysis
ACTIVITY MONITORING
❯ Control Plane
❯ OS Logs
❯ Network Flows
© CloudCheckr 2018 - Confidential 7

8. 8
Built in security features check your configuration against compliance standards and allow for remediation
MEET COMPLIANCE STANDARDS & REMEDIATE VARIANCES
COMPLIANCE BENCHMARKS
❯ CIS Level 1 and Level 2
❯ NIST 800.53 PCI
❯ TOTAL COMPLIANCE
REMEDIATION
❯ Change management with InfoSec Notes
❯ Fix Now Command and Control
❯ Automatic Fix Always Option
❯ Supports Custom Alerts
© CloudCheckr 2018 - Confidential 8

9. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
TOTAL COMPLIANCE
Secure your cloud
- 37 Compliance Frameworks
- Automated Remediation with Fix Now
Visibility and auditing over
days/months/years
- See your corporate compliance in one pane
of glass
- Customize selected frameworks to meet
your organizations needs

10. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
1. Education + EdTech: DLT
2. Government: JHC
3. Intelligence Community: DAE
EMPOWERING PUBLIC SECTOR IT
TRANSFORMATION THROUGH PARTNERSHIPS

11. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
HIGHER EDUCATION + EDTECH: DLT
DLT: “(Our) goal is to provide the best tools and resources available to make our
customers' migration to and adoption of the cloud as seamless and efficient as
possible.”
DLT and CloudCheckr | New AWS Billing Solution

12. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
GOVERNMENT: JHC TECHNOLOGY
40% Customer Savings
20% Profit Growth
- Strategy
- Delivery
- Management

13. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
CloudCheckrPartnershipwith
DigitalAgeExperts,LLCTrustus, we’reExperts

14. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
CCJourneyto theICMarketplace
14
The intricacies of C2S and our lack of cleared engineering
support provided a difficult landscape to get our commercially
developed AMI to work exactly as designed in this restricted
environment.
Enter, Digital Age Experts.
Trustus, we’reExperts

15. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
CloudCheckrPartnershipwithDigitalAgeExperts(DAE)
15
HistoryofthePartnership–Astoryofhappenstance
• CloudCheckrandDAEwereintroducedbyAWSattheperfecttime
• DAEwaslookingtolaunchCC foranIntelligenceCommunity(IC) customer
• CC waslookingfora partnerwithexperiencewithintheICwhocouldhelpprovideC2S/classifiedsupport
• ThetwoworkedincollaborationtosuccessfullylaunchCloudCheckr’sIC Marketplaceproduct
• DAE’sknowledgeofC2Sallowedustosolvechallengeswithourtitlewithintwodays, includingidentifyingandremediating
configurationissueswithinthefirsttwohours
• CloudCheckrhostedDAEatitsHQinRochestertoprovidea deepdiveontheCC productandtheCC culture
• DAEthenimmediatelysupportedmultiplesuccessfuldeploymentsofCloudCheckrwithintheC2SandICMPenvironment

16. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
WhyWeConsideredDAEasa Partner
16
• BuilttheirentirecompanyaroundsupportingAWS andC2S customersandis anAWS AdvancedTier,PublicSector
ConsultingPartner
• A companystartedby atechnologist,andhasa cadreofsmart,cloud-focusedarchitects,developers,DevOpsengineers,
and systemengineers
• UnderstandourincrediblyimportantC2S customers–90% oftheircompanypossesseshighlevelsecurityclearances
• Possessintimate knowledge ofAWS APIsand theintricaciesofunique nuancesofC2S
• Developeda C2S Emulationand TestingPlatform, SHIFT,that solvedthe“ImpossibleMile”problemand filledthe gapsleft
fromusingotherplatforms

17. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
DAE’s SHIFT (patent pending)
Fully emulate any AWS air-gapped or custom region
Test endpoints, regions, services, and actions, parameters,
and values within services; receive detailed error
messaging with remediation steps
Run AMIs (or systems) that are configured for C2S and
have them WORK within the SHIFT platform.
Run the exact version and configuration of the AMI (or
systems) that will ultimately ship to the high side and not
need additional configurations
SHIFT will save CC time and money by providing an
emulation and testing platform to run our ICMP-ready
AMI to ensure successful deployments in C2S

18. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
TakeawaysfromourPartnershipwithDAE
• Don’ttryto conquertheIC Marketplaceorthe C2S environmentalone!
• Trusttheexpertsand thosewho havebeenoperating(orbornandraised)intheseenvironmentsforan extended
periodoftime
• Find the RIGHT partner; find apartnerthat ispassionateabout yourproductandabout Cloud –they willbecomean
extensionofyourcompanyso theymust representyouwell
• Find the rightC2S emulationand testingplatform–beforemaking a selection,asktherightquestionsastohowwellitcan
prepareyourproductforAWS air-gappedregions
• If youcan’ttest theexact AMI andconfigurationrunninginC2S thenyou’renotreallytestingit

19. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
CloudCheckr + AWS: Enabling IT
Transformation in the Public Sector

20. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
delivers a unified platform for cloud management of public
cloud environments, providing government agencies, educational
institutions, and nonprofit organizations with advanced cost,
security and automation capabilities.
Help simplify and amplify AWS Public Sector
Customers’ deployments!

21. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

22. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Speaker Contact
Vice President of Strategic Alliances
elissa.livingston@cloudcheckr.com
(585) 355-6845
www.cloudcheckr.com
Elissa Livingston,
CloudCheckr
Benjamin Laibson,
DAE
CEO
blaibson@digitalageexperts.com
(703) 927-6451
www.digitalageexperts.com