Automating security in aws with divvy cloud
- 1. DivvyCloud Continuous Security & Compliance for the Cloud
- 2. DivvyCloud protects cloud and container environments from: ● Misconfigurations ● Policy violations ● Threats ● IAM challenges Cloud and Container Security
- 3. How does it work? Harvest Unify Analysis Action Pervasively harvest data using cloud native API endpoints Convert infrastructure data into unified multicloud resource data model Analyze unified data and identify change in cloud environment Take action to notify, record, and ultimately remediate non- compliant resources
- 4. Immediate Impact ● PCI DSS ● HIPAA ● GDPR ● SOC 2 ● ISO 27001 ● NIST 800-53 ● NIST CSF ● FedRAMP CCM ● CSA CCM ● CIS for AWS ● CIS for Azure ● CIS for GCP ● CIS for Kubernetes
- 5. “DivvyCloud has been the most successful security product roll-out in our history.” Customers Love and Trust DivvyCloud © 2019 DivvyCloud; Private & Confidential; shared under NDA
- 6. Putting DivvyCloud to the Test Proof of Concept How DivvyCloud will help ● Document sharing ● PoC Kickoff Call ● Requirements tracking ● Pre Deployment configuration ● Deployment of DivvyCloud ● Training ● Onsite workshop ● Regular working sessions ● Exec presentation on POC results ● Roadmap review
- 10. Hosting Options: Best of both worlds Customer-hosted DivvyCloud hosted Installation Customer-deployed via Terraform or CloudFormation in customer’s cloud Dedicated account & VPC in cloud provider of customer’s choosing Maintenance Performed by customer Performed by DivvyCloud DivvyCloud administration Customer only Customer, with option to include DivvyCloud admin support at customer’s request Security & Compliance Full feature set Full feature set Cloud support All public and private Public only Extensibility REST API, Plugins, DB-layer REST API, select plugins Plugins No limitations Only DivvyCloud approved SSO & RBAC Full feature set Full feature set Bot remediation Full feature set Alerting, reporting, notification Automation via queue & topics only SLA Customer’s SLA 99.5% + DivvyCloud enterprise support
- 12. Customer Story ● Large-scale cloud ● Moving their products to cloud-based delivery ● Had run POCs on all other tools in the market ● On-boarded DivvyCloud + 400 cloud accounts in a single Terraform in 1 hour ● Finally got visibility into their cloud footprint for the 1st time ● DivvyCloud + Cloudability integration for cost control automated actions
- 13. Customer Story ● Highly regulated ● Massive data sets - every mortgage, deed and tax payer ● Based on success, also spread to sister org CSS (back-end securitization software) with even larger data sets ● Every mortgage in America is protected by DivvyCloud
- 14. Customer Story ● Cloud-native company ● Multi-cloud ● Replaced a competitor ● Needed action ● Needed integration with their own tooling ● High growth & complexity ● M&A management