AWS Public Sector Blog

Category: AWS Identity and Access Management (IAM)

https://app.asana.com/1/8442528107068/project/1207199896111772/task/1219271990555232?focus=true

IENAI SPACE validates 360™ space mission analysis software with AWS Foundational Technical Review

Spanish space-tech company IENAI SPACE put its cloud-based mission analysis platform, 360™, through the AWS Foundational Technical Review (FTR)—and came out stronger. In this post, we explore how the FTR process helped the team harden per-tenant data isolation and encryption, build a continuous software-supply-chain security pipeline, and formalize backup and recovery objectives, all while running on AWS.

Secure the handoff: A delegation audit for Amazon Bedrock AgentCore

Secure the handoff: A delegation audit for Amazon Bedrock AgentCore

This post shows you how to find those delegation failures in 30 minutes and what to do about them. It builds on the delegation model introduced in the Amazon Bedrock AgentCore companion post and turns it into an audit you can run today. This post also shows you how to enforce the boundaries you find on Amazon Web Services (AWS) with Amazon Bedrock AgentCore Policy, AWS Identity and Access Management (IAM), and Amazon Bedrock Guardrails.

Verify software supply chain security using AWS Nitro cryptographic verification

Verify software supply chain security using AWS Nitro cryptographic verification

This post demonstrates how to use Amazon Elastic Compute Cloud (Amazon EC2) instance attestation to produce cryptographically verifiable Amazon Machine Images (AMIs) for your DevSecOps platform and pipeline—the software factory that builds and delivers your workloads.

AI-enabled genomic pattern discovery in Epstein-Barr virus on Amazon EC2

AI-enabled genomic pattern discovery in Epstein-Barr virus on Amazon EC2

This post, which details a collaboration between a national genomics research institute and Temus using Amazon Web Services (AWS), demonstrates the power of combining deep bioinformatics with advanced AI models and machine learning methods in a scalable AWS environment to uncover novel patterns in complex viral genomes. In this post, we explore the details of a scalable proof of concept (POC) pipeline built on AWS that uses an advanced genomic foundation model and unsupervised clustering to transform raw genomic sequences into signals for further research.

Build a self-service student assistant with Amazon Bedrock Knowledge Bases

Build a self-service student assistant with Amazon Bedrock Knowledge Bases

Learn how with Amazon Bedrock Knowledge Bases, you build an assistant that grounds answers in your trusted documents through Retrieval Augmented Generation (RAG).

From Amazon RDS Custom for Oracle to what’s next: A technical guide to Oracle migration paths on AWS

From Amazon RDS Custom for Oracle to what’s next: A technical guide to Oracle migration paths on AWS

This post provides a decision framework and technical guidance to help database administrators and architects navigate the transition facing Amazon Web Services (AWS) customers who run workloads on Amazon Relational Database Service (Amazon RDS) Custom for Oracle.

Building supply chain multi-agent workloads in AWS GovCloud (US)

Building supply chain multi-agent workloads in AWS GovCloud (US)

This post shows how to build that on Amazon Web Services (AWS) using Amazon Bedrock, deployed in AWS GovCloud (US). You’ll deploy a working multi-agent workload, see how a supervisor coordinates specialized agents through the Converse API in Amazon Bedrock, and learn which AWS GovCloud (US) details break patterns copied from commercial Regions.

AWS expands its Defending Digital Campaigns offering for the 2026 election cycle

AWS expands its Defending Digital Campaigns offering for the 2026 election cycle

This post describes the program for the 2026 cycle, the services it covers, and how eligible campaigns and committees can enroll. Since AWS first joined DDC in 2020 and expanded the offering in 2022 and again in 2024, eligible campaigns and committees of any size and on either side of the aisle have used these services to protect the data, identities, and applications they rely on through Election Day.

https://app.asana.com/1/8442528107068/project/1207199896111772/task/1215597699950048?focus=true

How ITHAKA built an on-demand PDF remediation pipeline on AWS

In this post, we describe how ITHAKA and Amazon Web Services (AWS) collaborated to build an on-demand PDF accessibility pipeline that remediates documents when users need them, serving researchers while using nonprofit resources responsibly. For organizations managing a large document collection under accessibility compliance deadlines, this post shows there is an affordable, practical path forward that doesn’t require converting an entire library upfront.

State of Kansas modernizes mainframe file transfer using AWS Transfer Family

State of Kansas modernizes mainframe file transfer using AWS Transfer Family

In this post, we walk through how OSM partnered with Sierra-Cedar, an AWS Premier Consulting Partner, to design, build, and deploy FileVault—a secure file transfer solution powered by AWS Transfer Family and Amazon Simple Storage Service (Amazon S3)—while preserving the user experience that state employees already knew and trusted.