AWS GovCloud (US) enables organizations the freedom and flexibility to develop secure cloud solutions that are in compliance with the Department of Justice’s Criminal Justice Information Systems (CJIS) Security Policy, the U.S. International Traffic in Arms Regulations (ITAR), the Export Administration Regulations (EAR), the Department of Defense’s (DoD) Cloud Computing Security Requirements Guide (SRG) for Impact Levels 2, 4, and 5, FIPS 140-2, IRS-1075, and other compliant standards. Depending on business needs, AWS GovCloud offers special features and the ability to run unclassified workloads.
AWS GovCloud (US) is a segregated AWS region created to host sensitive data and regulated workloads in the cloud, assisting clients in meeting US government compliance requirements such as the Federal Risk and Authorization Management Program and the International Traffic in Arms Regulations (ITAR) (FedRAMP) high baseline standards.
Organizations may follow ITAR laws, FedRAMP specifications, DFARS criteria, DoD (SRG) Impact Levels 2, 4, and 5, as well as numerous other security and compliance standards, thanks to AWS GovCloud (US).
Secure sensitive unclassified data files in Amazon S3 using server-side encryption. Use our one-click AWS Key Management Service or AWS CloudHSM to store and manage security keys on your own terms (AWS KMS).
Identity federation, simple key rotation, and other strong access control testing methods are available to limit access to sensitive data by person, time, and location as well as which API requests users are able to make.
With your credentials, you can monitor who has access to and how sensitive data is used via AWS CloudTrail, our U.S-managed and operated API logging service.
Utilize Amazon GuardDuty to continuously monitor security for your AWS accounts and workloads. A probable account hack may be indicated by suspicious or unauthorized activity, such as unexpected API requests or potentially unlawful deployments, which are observed by Amazon GuardDuty.
A perfect solution for organizations that need to maintain compliance with highly regulated industries and/or government regulations.