AWS Public Sector Blog

Category: Amazon Simple Storage Service (S3)

An incident response playbook for satellite operations on AWS (Part-1): Detection and forensic readiness

An incident response playbook for satellite operations on AWS (Part-1): Detection and forensic readiness

In this post, the first in a two-part series, we focus on the detection and forensic readiness side of satellite IR. This post walks through instrumenting your ground segment with Amazon Web Services (AWS) security services and AWS Ground Station so that threats surface before they cause damage, and forensic data is already flowing when an incident occurs.

An incident response playbook for satellite operations on AWS (Part-2): Automated response and recovery

An incident response playbook for satellite operations on AWS (Part-2): Automated response and recovery

This blog covers what to do when those detections fire. Satellite incident response (IR) must account for constraints that ground-based systems never face: containment actions that wait for the next orbital pass, decisions that trade mission continuity against security, and recovery procedures where the compromised endpoint cannot be physically accessed. It walks through containment, eradication, recovery, automated runbooks, and tabletop exercises designed for satellite operations teams.

Prepare for your GovRAMP Progressing Snapshot with AWS

Prepare for your GovRAMP Progressing Snapshot with AWS

In this post, we explain what the Progressing Snapshot program is, what the program is for, who it is for, and how Amazon Web Services (AWS) helps you lay the foundation to address many of the 40 snapshot controls.

Solving federal log retention requirements with AWS account-level subscription filters

Solving federal log retention requirements with AWS account-level subscription filters

Learn how the Login.gov team implemented a robust long-term log retention system that solved multiple architectural challenges while using Amazon Web Services (AWS) account-level subscription filters to provide capabilities that other approaches couldn’t match.

Build an AI-powered form filling assistant with Strands Agents

Build an AI-powered form filling assistant with Strands Agents

This post explains how to build exactly that using Strands Agents and Amazon Bedrock. The entire solution runs in about 200 lines of Python code, and you can have it working on your computer after completing the pre-requisite steps.

https://app.asana.com/1/8442528107068/project/1207199896111772/task/1214439772201800?focus=true

Preventive controls for FedRAMP 20x: Using SCPs and guardrails to enforce KSIs

Why preventive controls matter for FedRAMP 20x Organizations strengthen their security posture when Amazon Web Services (AWS) cloud resources consistently align with security and regulatory requirements. Preventive security controls, which are designed to minimize or avoid threat events, help enforce these requirements before misconfigurations are deployed. In this post, we show how service control policies […]

Amazon Web Services Partner KBR achieves 27% savings migrating to AWS Graviton

Amazon Web Services Partner KBR achieves 27% savings migrating to AWS Graviton

In this post, you’ll learn how KBR—a global science, technology, and engineering solutions organization—achieved a 33.5% cost savings and a 27.09% increase in pipeline processing speed by migrating geospatial processing workloads from an x86 Amazon Elastic Compute Cloud (Amazon EC2) M7i instance to AWS Graviton processors while maintaining data accuracy within 0.002% of x86 outputs.

A faster, more resilient digital repository: Migrating DSpace to AWS

A faster, more resilient digital repository: Migrating DSpace to AWS

Learn more about the Digital Research and Curation Center (DRCC), the group within the Sheridan Libraries that builds and manages digital infrastructure for open scholarship, migrated DSpace to the cloud with Amazon Web Services (AWS).