 Michael can everyone hear me up the back? Is that loud enough? Cool. You can't hear me? Cool. Now, perfect So my name is Michael. I'm the CTO and co-founder of a cloud management platform called cumulus So we help organizations Bring automation governance visibility To customers like Symantec one-hatch University. We just started with an Australian bank And bring visibility to their cloud environments I think depending on where you are in your your cloud journey as you as you do more and more in an Amazon or Clouds you start to get more and more accounts. You start to get more and more Objects or more and more servers more and more volumes more and more snapshots more and more services And you may not necessarily understand when you start to get more and more bills And people start asking more and more questions as to what what you're spending your money on and what starts to happen Then is you need to find visibility in that and work out what's what is what is producing all those bills and a lot of Organizations will start to to implement stronger governance into their into their environments. We've got some really strong partners globally But he called it. Um, we're dealing with the likes of tech Mahindra persistent Deloitte, so we've got some very big names behind us now. Sorry. I was I was on beer duty, which is As you may notice from my accent, we're an Aussie based company What was my laptop that was here and that's Tim's up my laptops over there, sorry Let's gonna kick off with a few questions What he called it's um, so I assume we all use Amazon here or just a show of hands if you're currently using Amazon Nope What are your key? What are the key concerns for using Amazon cost? that a concern Sorry simplicity Security anyone not really No concerns Sorry more services They need to make the make some of the existing ones more sold before they've introduced too many more the doors over there Who really really needs to build games when I can't scale SAP in EC2. Sorry. Um, cool. I'll just get this set up. Sorry guys one second So quick quick another question. Um, those of you using Amazon. Are you all using it to generate revenue for your organization? Everyone yep And next question How many accounts of those of you that are wrong or how many Amazon accounts do you have for those of you generating revenue? Is it one? one account Cool, but that was to tell you that you're putting your company's revenue at risk And there's a company called code spaces out of the UK And a number of all other organizations I don't know if you've found if anyone's heard this story in about mid 2014 Someone was able to access their Amazon account. They had all their Production all their backups in the one account Someone was able to access that account. You might say how hard it is to get into an Amazon account I bet you if someone in this room's had a Russian Bitcoin hacker get into their Amazon account and spin up a million spot instances It happens all the time also an employee or something along those lines is disgruntled ex-employee But this company code spaces was was threatened and asked to give a million dollars money or something along those lines Or they were going to delete all of their services. They were some 15 people start up They had a lot of source repositories or they were like an SVN backup service or something along those lines That person did not wait for that million dollars to come Probably wasn't going to come anyway, and they destroyed all of their data. That company is now out of business So completely out of business So you say how do you fix this you do something really simple for any of you that said you've got one and you generate revenue You go home tonight. You sign up for another Amazon account And you move a copy of your snapshots whether it you're whether it's your RDS snapshots or your What he called it's your EBS snapshots and you move that into the other account You don't give the same access out to all your people in your organization at least at that point you've got two accounts Okay, I just urge you as a founder of a startup Like that's put my life into my business over the last four years It is the most important thing I would want any of my staff members to do so if any of you're working for startups First thing you do go home and do that or use use a platform that will automate all of that for you Which I'll show you a little little bit about shortly So hopefully that's that is a little bit helpful What I'm going to do now is I'm just going to show you through a little bit about what we do And what we help customers with I'll just log into the platform. Is anyone nervous after that? So essentially we're a portal or dashboard So we're available as a SaaS product or as an appliance And we help people with with strong governance, right? And I'll sort of explain a little bit of that quickly But what we've done is I've always been a in an infrastructure or in Been an infrastructure designer helping application teams scale or build scale on their application And so I've always been a lot of time drawing pictures of environments and then basically socializing that with 50,000 teams in an enterprise getting everyone to agree to it which is more force than the negotiation at times and then handing that to Engineering teams to go and provision all those services. So what I wanted to do is I wanted to combine the two together So create one artifact so draw a picture of an environment and provision that directly into a cloud provider So I'm able to actually skip out any problems with my documentation So my documentation is always current if I can build workflow and governance into a platform I can save all of that walk-through and say is this okay from a security perspective? Is this okay from a you know cost perspective? Is this okay from a whatever else is is in your organization and I'm able to push that or a technology perspective Am I am I allowed to use Windows? 2003 Or something along those lines I can skip all that because I've only got access to the resources that I'm allowed to use in that Organization so what we set off to do is build a visualization engine That enables me to load a a lot of workflow in so a lot of workflow or governance rules say for example This half of the room here. I may say I'm my Application group number one and they're only allowed to use Amazon Linux and T2. Micro and RDS my sequel And that's all that they're allowed to use whereas this here might be the admin group and they're allowed to use any service So I'm able to set up policy and restrict based on that Then I come and I design visually So very simply Unless you're using a Mac for the first time in a couple of months. I Designed my environment in a very simple manner. I'm able to see things like the estimated cost I think that's a big use case that we always get in What do you call it in cloud environments a manager or a project will ask? What's this going to cost to run in Amazon? I'm sure you've all had that question before and most people go. I don't know. We'll find out later I'm only allowed to use the services that have been that have been that have been given to me I know it's just looks a little bit off on that one, but you can see it over here I've got all my instance types that have been shared to me. I've got all my integration to things like Papa and chef More ansible and and I've got the governance around those What do you call it? Which particular thing? So for example, I'm allowed to deploy the API onto this server and that'll go on bootstrap that image and then pull that from a you know Whatever configuration management platform that you're using I'm able to set things like governance rules I'm only I'm on this part for the room that's only allowed to use the t1.micro at the moment And that'll allow me to do that These templates are completely What do you call it? JSON they're exportable to code You can edit them as code and then you can bring them back in or you can use a wizard depending on the skill set of your organization And you can modify these and say move them to another region for example or change the Config from a production sizing to a dev sizing or something along those lines depending on your your requirements You're able to do things like embedding naming conventions and tagging conventions into the platform Because I think what do you call it? Most accounts or most services or most Amazon accounts that I work with a lot of the time I would find probably about a Tell me 15% Compliance on tagging would that be about right? 15 to 20 percent compliance and given that tagging controls a lot of the commercials you can control a lot of permissions It's obviously very key to have that that that kind of level of compliance up We allow you to enforce them based on your custom business logic So for example, if you've got departments if you've got products We allow you to specify all of those things and then basically What do you call it automatically name the objects based on those particular? particular rulesets As you can see here the simplicity of doing something like adding a volume is as simple as dragging that volume onto the Onto the platform here They're very simple to do I'm also able to do other services, but I won't go into that level of detail all of these Templates of revision control so you can fully revert back to previous revisions And you can do anything that you need to do in that space When you hit the big go button that goes off and as you can see here It's going to force me to tag everything appropriately that'll go off and send that directly into a into the cloud provider We also support that other Company the mid-micro Thing that's that you're talking about but their their service doesn't work that well anyway, so Once that's built it becomes what we call an environment and it can be managed in court accordingly So you can do things like Just change this becomes what we call an environment so you can do things like cost alerting on those things so you can set up alerts You can set up delegated authorities So say for example if it goes over a hundred dollars You can set it up to say that I want this to alert so you can put pro budget or project budgets into the platform And that'll all um what he called it um to that'll all alert there. You can do things like automate Automate stop and start And all sorts of things like that You can also see a cost advisor, which will drill into things like unused services or Overspec services you've had a low balance so that hasn't passed traffic for 15 days It'll tell you that that to low balance is not being used You've got a server that's sitting on 1% CPU. It'll tell you that you should move it down a size And things like that and tell you the cost benefit that's available It also nicely breaks down all the unit costs of all the services as you can see here. I think Financial visibility or financial the ability to actually understand what something costs in the cloud is becoming very important And gives you ability to drill down on a lot of those things Coming back to what I was talking about before We're able to do things like set up backup preferences, so you're able to actually set up an additional account create policies and then schedule them off to a To another account and automate those backups. So for example, you can actually choose multiple environments Very simply like this add an add another Amazon account and that will automatically move all those snapshots across to that other account without Without too many or without any any issues there Through here, I won't go through it because there's a lot of detail here is all around governance So you can set up workflows. You can set up things like your only allowed to provision to Dev account or you're allowed to provision to this VPC or you're allowed to do XYZ You're only allowed to use RDS my sequel and all sorts of policy that that you'd expect in an enterprise probably One of the the most powerful things that we've we've released and it's actually free So you can sign up online as a SAS product. It's you know, it's completely free It's not a trial or anything all on those lines is a full discovery engine I think what he called it some it will go through your account It will scan all your accounts and it will go through at least all the regions that you've got services in If you go through here, it'll show you the cost of each of those VPCs You can see my dummy data here at $79 You can then drill down on that cost And actually it'll break it down by service and then by the service itself So maybe we're actually see at the top here. I think I've got things like servers They're all turned off and then I've got volumes which are like $17 and it breaks down those services again This is available completely free from our one. What do you call it? Just off our website Next I've actually we've actually exposed a service advisor Or I can actually go in and see all my detached or unused services again This is still free and you get a commercial value I think when we ran this for a very large security vendor I may have mentioned their name before that potential benefit was like $17,000. This does happen. It's Like people will shut down environments. They'll have heavily provisioned IOPS Services it'll be on a spend of 100 or 150,000. They'll shut them down. They need the data They won't think about the commercial impact when you put a number in front of them They go whoa that volume is costing me $4,000. I better do something about it. So they'll prioritize dealing with that Lastly as part of that free offering I'm able to actually visualize that environment. So it's not an environment that we've built It's an environment that you've built and we're able to give you a pictorial view of that environment That you're able to export to a PDF and use for your documentation Again, that's available for free. All you need to do is go to our website So this is a picture of a full VPC It obviously gives me the cost here again, and I'm able to actually then filter that by tag So I can actually break it down and Filter by tag what we actually do and I'll show you this in a second We're able to use multiple filters I'm able to break it down to true environments because a VPC to me is not an environment a VPC is a network I mean you might have multiple You know multiple environments might have a dev a test you might have multiple dev environments in the platform All we've done here is all we've done is to tag that load balancer I think it was tagged with the name environment And then basically the value was one and then it pulls all the dependent services back automatically and we'll show you that on a page And that's that's available as part of that free offering It's also got your RDS that's sitting out in the subnet group there You can export that to the PDF and that's available Completely free online, so check it out That's pretty much all I've got to show today. Is there any questions guys? You can't import but you can export to cloud formation But we discover see how this has been discovered into the platform I can take this and I can turn that into one of our templates So it can't it can't take the code But it can take the services and turn them into turn them into one of our templates And then once it's an environment it can turn it back into cloud formation as well Governance governance so for example cloud formation just writes a thing you go and provision it. Good luck And you do that 50,000 times I'll say that you're only allowed to provision a thousand dollars per month And all you're allowed to use is the latest version of Amazon Linux and the latest version of something else So it actually and and not allow you to use the marketplace for example I'm not allowed to you only allow you to use one object out of the marketplace So we're not allowed to use an internet connected environment So it actually set all of those government like governance rules for the different groups in your organization The governance are predefined by a group in the organization or you know by a higher power Whatever someone that wants to control commercial someone that wants to control security and risk Someone that wants to just set set rules and boundaries basically You know to also do things like tagging all of those things that it will set for for the different groups You can obviously as an admin it's full access manager full enterprise access management So if you've got the rights to edit the What he caught the governance rules, of course, you can you can change them But if you're a user that doesn't have those rules you'd have to get that changed by your Exactly So it's basically so the free products is to read only I am roll read only I am account The full product is currently a one-to-one mapping with a what he called inline policy But in the next month for probably four or six weeks It'll be like the trust between accounts will be implemented as well So it'll use the you know the what he called of the trust We've we're fully SAML integrated so you can use SAML you can integrate it into Gmail, etc. Etc. So Yeah, any other questions guys Immediately So obviously there's a completely free offering So the what do you call it is available free the discovery tool is completely free the full product offering I think is a percentage or is a percentage of the services and percentage of the services we manage Obviously, we don't manage a lot of those services. So things like traffic and that we don't manage But it works out to be about four to six four to six percent depending on your around what you're doing in your account That's correct. Yeah, that's correct. Yeah, so purely consumption based model if it's a large spend We generally work out, you know an organization cost or something along those lines out But yeah Cool Awesome. Thanks guys. Yes