Category: Application Services

Under legacy Federal Risk and Authorization Management Program (FedRAMP) Rev5, continuous monitoring meant monthly deliverables and annual assessments. Under FedRAMP 20x, it means persistent, automated validation where the status of your security posture is always known. In this post, we operationalize that model using AWS Security Hub, AWS Config conformance packs, Amazon GuardDuty, Amazon Inspector, and Sigma detection rules to build an always-on monitoring architecture.

In this post, we explore a human-in-the-loop (HITL) framework in the form of architectural patterns teams can use to introduce agentic AI incrementally into eligibility workflows that are adapted to their programs, policies, and risk tolerances.

A recent State CIO Survey from the National Association of State Chief Information Officers (NASCIO) highlights that modernization extends beyond a single piece of technology. Digital accessibility, AI, modernization funding, cloud, data governance, collaboration, and service delivery are now all connected priorities that influence constituent-facing experiences and the operating models that make those experiences possible. Amazon Web Services (AWS) and partners like Presidio help agencies address these priorities through cloud-based modernization patterns that connect workflow, data, experience, and governance.

In this post, we describe how ITHAKA and Amazon Web Services (AWS) collaborated to build an on-demand PDF accessibility pipeline that remediates documents when users need them, serving researchers while using nonprofit resources responsibly. For organizations managing a large document collection under accessibility compliance deadlines, this post shows there is an affordable, practical path forward that doesn’t require converting an entire library upfront.

In this post, we review how AWS Lambda works today, introduce durable functions, walk through a document processing use case for child welfare, and explain when to choose durable functions over AWS Step Functions.

In this post, we walk through the evidence pipeline, from Amazon Web Services (AWS) Config evaluations and AWS Security Hub findings through transformation and storage, to producing the dual-format output that satisfies FedRAMP 20x Phase 2 completeness requirements.

In this post, we share a reference AWS architecture that healthcare organizations, health plans, and state agencies can use to deploy AI agents while maintaining HIPAA compliance.

In this post, you’ll learn how to build an identity incident review workflow that analyzes an event timeline, converts the findings into a strict incident record, and connects the review to a local account-control lookup. The examples separate observed facts from inferences and keep final incident and remediation decisions with a human reviewer.

In Part 2 of our two-part series, we discuss the architecture of the Signal-Activated Agent Pattern and its application for proactive government AI. For Part 1, see Signal-activated generative AI: How agencies can reach more people and react faster.

This post explores how an agentic AI architecture on Amazon Web Services (AWS) modernizes the procurement lifecycle from solicitation to proposal evaluation while maintaining compliance with government regulations including United States of America FAR (Federal Acquisition Regulation),United States of America DFARS (Defense Federal Acquisition Regulation), and Canadian procurement frameworks (Public Service Procurement Canada (PSPC) /Shared Services Canada (SSC).