Open Source Summit + ELC North America 2019

For T-Mobile, the purpose of public cloud is to accelerate time-to-value for customers, unlocking developer agility while protecting the business from critical security and compliance issues. This is a challenge given agility and compliance are typically at odds with one another, especially in the highly dynamic environment of cloud.

Nicholas & Steve will present PacBot, a system developed by their team since 2016 and open-sourced in the Fall or 2018. It auto-discovers assets in the cloud and applies software rules (policy-as-code) to continually check compliance. In addition to a rules engine, it includes a big data lake and a strong visualization capability to provide real insight into compliance.

Most importantly, PacBot includes the ability to "auto fix" critical issues, both in batch and real-time reaction to events.

Nicholas & Steve will demo PacBot and discuss its evolution over three years and the critical process of getting stakeholder buy-in for auto-remediation.