Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

...


Key Concepts



eweek - compare AWS Azure GCP clouds - summary

...

This is a high-level comparison of the three major cloud service leaders here in mid-2019. We will be updating this article with new information as it becomes available, and eWEEK will also be examining in closer detail the various services—computing, storage, networking and tools—that each vendor offers.


Cloud Security Concepts


cloud security concepts dzone   

cloud-security-dzone-2202-w_defa3108.pdf file

cloud-security-dzone-2202-w_defa3108.pdf link



Potential Value Opportunities

...

build-run-concepts-2019-linkedin.com-An overview of security postures in Azure and AWS.pdf


Candidate Solutions


ATARC  - Advanced Tech Architecture Research Council

Government systems technology focus



NIST - National Institute of Security Technology - issues bulletins on recommended security practices and alerts



FIPS 140.2 - Security Basics Compliance Recommendations for IT systems



Fedramp = standard for security assessment, authorization, monitoring

https://www.fedramp.gov/faqs/

The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. This approach uses a “do once, use many times” framework that saves cost, time, and staff required to conduct redundant Agency security assessments.

Yes, FedRAMP is mandatory for Federal Agency cloud deployments and service models at the low, moderate, and high risk impact levels. Private cloud deployments intended for single organizations and implemented fully within federal facilities are the only exception.



Step-by-step guide for Example

...