3 ms·
TIL of aws-us-gov
by krrishd 6y ago
TIL of aws-us-gov
- dijit 6y agousually referred to as gov-cloud. Has it's own version of everything, physically segmented, even for global systems such as IAM. You have to be a US Citizen to work on it and you need special security clearances.
- cperciva 6y agoYou might be getting GovCloud and AWS Secret Region confused. I've been told that I can access GovCloud if I cross the border from Canada, despite not being a US Citizen. (This came up in the context of providing FreeBSD AMIs.)
- BillinghamJ 6y agoI believe the secret region is just part of GovCloud. Afaik, GovCloud is just the marketing name for aws-us-gov
- schwank 6y agoGovCloud is a separate partition from Secret. Different regulatory framework alignment and customer onboarding. GovCloud customers only need be a US person or entity, beyond that any further regulatory alignment is up to the customer. AWS does not audit the IAM user base for nationality or any compliance requirements. Disclaimer: I am an AWS Public Sector Solutions Architect.
- BillinghamJ 6y agoAh it looks to be aws-iso (c2s.ic.gov, top secret) and aws-iso-b (sc2s.sgov.gov, secret)?
- peterwwillis 6y agoSo, just to clarify: if a "customer" who happens to employ tens of thousands of people also employs non-US citizens (such as the DoD's foreign national IT contractors), then non-US citizens would have access to GovCloud.
- stevehawk 6y agoSecret region is not a part of govcloud.
- deleted 6y ago[deleted]
- FpUser 6y agoAnd then somebody like Clinton sharing it over private servers.