AWS Public Sector Blog
Category: Application Services
Architecting HIPAA-compliant AI agents to safeguard health data with AWS
In this post, we share a reference AWS architecture that healthcare organizations, health plans, and state agencies can use to deploy AI agents while maintaining HIPAA compliance.
Get started with OpenAI GPT-5.4 on Amazon Bedrock in AWS GovCloud (US)
In this post, you’ll learn how to build an identity incident review workflow that analyzes an event timeline, converts the findings into a strict incident record, and connects the review to a local account-control lookup. The examples separate observed facts from inferences and keep final incident and remediation decisions with a human reviewer.
The Signal-Activated Agent Pattern: A reference architecture for proactive government AI
In Part 2 of our two-part series, we discuss the architecture of the Signal-Activated Agent Pattern and its application for proactive government AI. For Part 1, see Signal-activated generative AI: How agencies can reach more people and react faster.
Transforming Public Sector Procurement with Agentic AI on AWS
This post explores how an agentic AI architecture on Amazon Web Services (AWS) modernizes the procurement lifecycle from solicitation to proposal evaluation while maintaining compliance with government regulations including United States of America FAR (Federal Acquisition Regulation),United States of America DFARS (Defense Federal Acquisition Regulation), and Canadian procurement frameworks (Public Service Procurement Canada (PSPC) /Shared Services Canada (SSC).
Implementing per-user token guardrails for Amazon Bedrock in government agencies
This post presents two complementary patterns for implementing per-user token guardrails on Amazon Bedrock from Amazon Web Services (AWS).
How Rize Credit Union built a serverless data lake on AWS to become its own source of truth
Credit unions exist to serve members, not to run data centers. Every hour our team spends on infrastructure is an hour not spent on the question a member actually cares about: “Is my money safe, is my experience easy, and is my credit union on my side?” Moving to a serverless, managed-service foundation on Amazon Web Services (AWS) means our engineers spend their time on membership modeling, fraud analytics, and AI augmentation instead of capacity planning.
Providing equitable access to NASA’s Earth science data archive
In this blog, learn how NASA’s Earth Science Data and Information System (ESDIS) is migrating over 170 petabytes of Earth science data to AWS to provide equitable access to researchers worldwide, eliminating the “data fortress” problem while achieving significant cost efficiencies through intelligent tiering, serverless architecture, and economies of scale. The post also details how NASA made over 6,000 Earth Science collections visible in the Registry of Open Data on AWS, enabling seamless discovery and analysis for the broader AWS user community.
Campaign reporting transformation at Boise State University Foundation
Learn how the Boise State University Foundation transformed quarterly Microsoft Excel reports into real-time dashboards using Amazon Quick, a 780-fold improvement that fundamentally changed how leadership makes decisions. It extracts actionable insights from a decades-old legacy system while supporting a major comprehensive fundraising campaign.
An incident response playbook for satellite operations on AWS (Part-1): Detection and forensic readiness
In this post, the first in a two-part series, we focus on the detection and forensic readiness side of satellite IR. This post walks through instrumenting your ground segment with Amazon Web Services (AWS) security services and AWS Ground Station so that threats surface before they cause damage, and forensic data is already flowing when an incident occurs.
An incident response playbook for satellite operations on AWS (Part-2): Automated response and recovery
This blog covers what to do when those detections fire. Satellite incident response (IR) must account for constraints that ground-based systems never face: containment actions that wait for the next orbital pass, decisions that trade mission continuity against security, and recovery procedures where the compromised endpoint cannot be physically accessed. It walks through containment, eradication, recovery, automated runbooks, and tabletop exercises designed for satellite operations teams.









