5 ms·

Thanks for the reply, great info. We have definitely been looking at more things like Azure AD. (Or Okta maybe?) for the identity management stuff. Even AWS has

Thanks for the reply, great info. We have definitely been looking at more things like Azure AD. (Or Okta maybe?) for the identity management stuff. Even AWS has one I think, but seems worse than other offerings. It is an interesting idea to consider. We already are using Slack, GSuite, Chime, and such. More in one service could have some interesting security improvements. Wow, I just looked into it they can even manage Macs. Very interesting. Most of our devices are Mac.

bladegash 6y ago
No problem! I think the majority of AWS' capabilities are provided through third-party partners (e.g., Okta, like you mentioned). I don't know for certain, but I'd be surprised if those are available on GovCloud/whatever Amazon's IL5 platform is. Use of additional services also then adds in additional SLAs, potentially additional costs, increased attack surface, etc. Also, I don't believe that Slack, GSuite, Chime, etc. are NIST 800-171/DFARs compliant, let alone authorized at IL5. The Teams in GCC is within the GCC enclave, from what I understand. I feel like I'm starting to sound like a Microsoft salesperson (promise I'm not!), but yeah, it's definitely worth checking out.