AWS Public Sector Blog

Category: AWS Key Management Service

Verify software supply chain security using AWS Nitro cryptographic verification

Verify software supply chain security using AWS Nitro cryptographic verification

This post demonstrates how to use Amazon Elastic Compute Cloud (Amazon EC2) instance attestation to produce cryptographically verifiable Amazon Machine Images (AMIs) for your DevSecOps platform and pipeline—the software factory that builds and delivers your workloads.

Building a RAG architecture on Amazon Bedrock to support CJIS compliance

Building a RAG architecture on Amazon Bedrock to support CJIS compliance

Analysts manually reviewing virtual reams of sensitive documents, looking for one key detail, need a more efficient way to search. They know generative AI must be able to do the job, but what they don’t know is whether they can apply generative AI to law enforcement data. You can, and Amazon Web Services (AWS) offers […]

Practical digital sovereignty: Building a sovereign landing zone on AWS

Practical digital sovereignty: Building a sovereign landing zone on AWS

In this post, we translate pillars into a deployable cloud foundation, focusing on the key postures of security, identity management, governance, network design, resilience, continuity, auditability, and operational independence.

AWS expands its Defending Digital Campaigns offering for the 2026 election cycle

AWS expands its Defending Digital Campaigns offering for the 2026 election cycle

This post describes the program for the 2026 cycle, the services it covers, and how eligible campaigns and committees can enroll. Since AWS first joined DDC in 2020 and expanded the offering in 2022 and again in 2024, eligible campaigns and committees of any size and on either side of the aisle have used these services to protect the data, identities, and applications they rely on through Election Day.

Building machine-readable FedRAMP 20x evidence on AWS

In this post, we walk through the evidence pipeline, from Amazon Web Services (AWS) Config evaluations and AWS Security Hub findings through transformation and storage, to producing the dual-format output that satisfies FedRAMP 20x Phase 2 completeness requirements.

Run SAP workloads at DoD Impact Level 5 with SAP NS2 on AWS GovCloud (US)

Run SAP workloads at DoD Impact Level 5 with SAP NS2 on AWS GovCloud (US)

In this post, we explain what IL5 requires, how AWS GovCloud (US) and SAP NS2 meet those requirements together, and how defense organizations can get started.

MARS-E to ARC-AMPE: Guide for state Medicaid agencies on AWS

MARS-E to ARC-AMPE: Guide for state Medicaid agencies on AWS

This post is for two audiences. The first is agencies already running MARS-E-compliant workloads on AWS that are looking to map their existing posture onto the new framework. The second is agencies planning a migration from on-premises infrastructure where ARC-AMPE will be in scope from the first day.

Modernizing border control with digital arrival cards on AWS Cloud

Modernizing border control with digital arrival cards on AWS Cloud

Learn how Somapa Information Technology PCL (SomapaIT), an AWS Partner, chooses Amazon Web Services (AWS) Cloud to implement DAC systems because of its global footprint, security, high availability, and scalability.