FSV304: Farewell to a Trade-off: Enabling High-scale, Bank-wide Cloud Adoption by Delivering Control and Self-service through Automation and Continuous Compliance

Many financial institutions want to provide greater autonomy to their developers but find themselves hemmed in by intricate legacy processes and centralized IT teams that own different parts of the infrastructure and application stack. For Barclays PLC, the solution to this impasse lay in automating the management of hundreds (and, soon, thousands) of accounts, granting developers access to AWS technology directly via AWS Console or API while conforming to bank policy. Key to Barclays' strategy is “Persephone,” a system that creates accounts, sets policy, defines which services are enabled in the account, and runs Lambda functions to ensure continuous compliance. Persephone relies on services including CloudTrail, CloudWatch Events, IAM, KMS, and others to balance control and productivity. Barclays is also working to introduce automated reasoning testing and assurance techniques made available by the Automated Reasoning Group at AWS. Attendees of this session will gain an understanding of the mindset, skillset, and toolset shifts that a diversified global financial institution must make to meet the control objectives of the present while ensuring the agility to accommodate technology change of the future.