Category: AWS Security Hub

As organisations modernise to meet the evolving expectations of the Australian Government, delivering secure, cloud-based services has become a commercial and operational necessity. This transformation brings a critical challenge: maintaining a hardened security posture while aligning to the Information Security Registered Assessors Program (IRAP) assessment requirements and priorities.

This post is for two audiences. The first is agencies already running MARS-E-compliant workloads on AWS that are looking to map their existing posture onto the new framework. The second is agencies planning a migration from on-premises infrastructure where ARC-AMPE will be in scope from the first day.

In this post, you will learn how the Maritime Cloud Environment (MCE) addresses these challenges by offering suppliers a secure, compliant, Navy-provided Amazon Web Services (AWS) Cloud environment for digital engineering collaboration.

Why preventive controls matter for FedRAMP 20x Organizations strengthen their security posture when Amazon Web Services (AWS) cloud resources consistently align with security and regulatory requirements. Preventive security controls, which are designed to minimize or avoid threat events, help enforce these requirements before misconfigurations are deployed. In this post, we show how service control policies […]

In this post, we explore how federal agencies can accelerate modernization, improve cybersecurity incident response, and support continuous compliance monitoring using Datadog’s FedRAMP High authorized observability and security platform.

This post brings guidance on Customer Responsibility Matrices (CRMs), authorization boundary definitions, and multi-provider control ownership into a single actionable framework for defense contractors preparing for third-party assessment.

In this post, we break down every KSI theme, categorize each indicator by validation approach, and provide a practical gap analysis framework so you can begin preparing your cloud service offering (CSO) for FedRAMP 20x authorization on Amazon Web Services (AWS).

In this blog, we will discuss how federal contractors handling Controlled Unclassified Information (CUI) for the General Services Administration (GSA) face a critical reality when the updated security requirements are required to maintain your contracts. The stakes extend beyond business; inadequate CUI protection compromises sensitive government operations and US national interests. The recently updated GSA IT Security Procedural Guide CIO-IT Security-21-112 Revision 1 (January 2026) aligns with NIST SP 800-171 Revision 3 and sets the bar for protecting CUI in nonfederal systems. Learn how Amazon Web Services (AWS) provides security services specifically designed to help you address these requirements efficiently.

In a previous post on the Public Sector Blog, we covered six key strategies in which Amazon Web Services (AWS) empowers AWS Partners to expand their platforms globally to reach more customers while meeting requirements such as data residency and sovereignty. These ranged from using AWS Global Infrastructure to AWS services that make it easier for […]

This post shows you how to use Amazon Web Services (AWS) services to meet Federal Risk and Authorization Management Program (FedRAMP) 20x requirements, reducing authorization time from months to weeks through automated compliance pipelines and continuous validation. You’ll learn how to build a trust center, automate vulnerability detection, generate Key Security Indicators (KSIs), and implement […]