PacBot Policy as Code from T Mobile OSS

### Scaling Cloud Compliance with Policy as Code At 00:00, Setu Parimi from T-Mobile introduces PacBot (Policy as Code Bot), an open-source platform designed for continuous cloud compliance monitoring and automated policy enforcement, at the Cloud Village.

### Enterprise Multi-Cloud Governance Architecture At 05:08, Parimi details PacBot's distributed architectural framework. Designed to govern thousands of cloud accounts across AWS and Azure, PacBot utilizes serverless event collectors, auto-scaling microservices, and an administrative dashboard to track security posture in real time.

### Automated Asset Inventory and Shadow IT Discovery At 10:13, the presentation examines the difficulty of maintaining complete cloud visibility. Parimi describes how PacBot correlates Shodan internet scans with internal asset catalogs to trace external-facing IP addresses, identify untracked shadow IT infrastructure, and assign ownership to cloud assets.

### Managing Policy Exceptions and Developer Workflows At 14:54, the speaker reviews exception handling. PacBot incorporates structured exception workflows allowing developers to request temporary policy exemptions for testing or staged patching, ensuring security teams maintain compliance oversight without halting development velocity.

### Defining Policies as Code and Automated Remediation Concluding between 19:51 and 26:37, Parimi walks through authoring policies in code. He demonstrates how custom rules flag unapproved IAM roles, open security groups, and unencrypted databases, triggering automated remediation actions to resolve non-compliant resources autonomously.

(AI summary — Gemini Flash)