An evening with AI and Policy as Code

Tonight's topics are: • How AWS Textract enables end-to-end testing of Stripe's invoice customization • Policy-as-Code for automated security, compliance and cost optimization in AWS environments using Cloud Custodian • A Beginner's Guide to Agentic AI on AWS Venue, food and drinks are sponsored by [KnowIt](https://www.knowit.no/) - Thank you\! *Agenda:* • 1700: Snack and networking • 1730: Welcome • 1735: Lightning-talk about *Textract* • 1745: Presentation about *Policy-as-Code* • *1830: BREAK* • 1845: Presentation about *Agentic AI* ----------- TALKS ----------- How AWS Textract enables end-to-end testing of Stripe's invoice customization Markus Tacker works as Principal Engineer on Nordic Semiconductor's IoT cloud platform, nRF Cloud. He will give us a short overview of how they use AWS Textract to write end-to-end tests for nRF Cloud's customer invoicing feature which is based on Stripe. He will address the various testing approaches tried and why end-to-end black-box testing was implemented. Policy-as-Code for automated security, compliance and cost optimization in AWS environments using Cloud Custodian. As AWS environments grow, it becomes harder to keep consistent control over security, compliance and cost using manual processes alone. There are several ways to approach cloud governance in AWS, each with different trade-offs in terms of flexibility and complexity, including: -Native AWS services such as AWS Config and Conformance Packs -Policy engines like Open Policy Agent (OPA) and Terraform Sentinel -Open-source policy-as-code tools such as Cloud Custodian -Custom solutions built on AWS services and event-driven patterns In this project, we look at how Policy-as-Code can be used to automate parts of cloud governance in AWS, around identifying risks, enforcing rules and reducing unnecessary cost. Policy-as-Code is a way of defining governance rules as code so they can be versioned and executed automatically. Cloud Custodian is an open-source tool that follows this approach and lets you define policies that can detect issues in cloud environments and trigger actions like alerts or remediation. In this session we go through how we used Cloud Custodian in an AWS environment as part of a bachelor project in collaboration with NEP Norway. For demonstration we cover: -How we evaluated and selected a policy-as-code tool -How we designed and implemented Cloud Custodian policies in AWS -Examples of security and compliance issues we identified -How we automated detection and alerting Speakers: Mohamed Abdulahi Sheik, Asiya Abdikafi and Alvin Umuhabwa We are three cybersecurity graduates who recently completed our bachelor project in collaboration with NEP Norway. The project focused on building an automated cloud governance tool in AWS using Policy-as-Code and Cloud Custodian. A Beginner's Guide to Agentic AI on AWS Most of us are consumers of AI. We ask Claude for things and move on. Becoming a builder of AI sounds like a much bigger leap than it actually is. We'll go through an agent that already works: the few parts it's built from, how it reaches into a live AWS account, pulls what it needs, and works out an answer. The tools you write only fetch data and the model does the reasoning. There's far less code involved than you'd expect. If you can write a Python function, you've done most of the hard part already. Speaker: Martin Aamodt is Principal Cloud Architect at KnowIt and he hold the famous golden AWS Certification jacket for having passed all available AWS certifications Huge thanks to tonight's sponsor is [KnowIt](https://www.knowit.no) Send one of the organisers a message (via Meetup or LinkedIn) via if you want to propose a future talk or host an event.