P3 Blueprint - Infrastructure as Code for Multi-Cloud

P3 Blueprint manages your AWS environment as-code and maximizes DevSecOps practices to deploy updates more frequently, keeping pace with configuration, operations, and evolving threats. P3 Blueprint is an Infrastructure as Code (IaC) solution, using the cloud agnostic Terraform framework, that maximizes self-service while enforcing security requirements across your AWS Organization. By leveraging CI/CD services like AWS CodePipeline, this solution delivers full declarable code to link infrastructure, application, and security settings into one fully integrated release. P3 Blueprint includes our “cloud accelerators” for managing AWS at-scale:

• Tardigrade: This capability automates the provisioning of a secure baseline across your entire AWS Organization and accounts, managed entirely as-code, and is multi-cloud capabable. It automatically configures essential services, including:

  • Identity & Access: AWS Identity and Access Management (IAM) roles and policies.
  • Log Archive: AWS CloudTrail logs and Amazon CloudWatch Logs stored in Amazon S3.
  • Security: AWS Security Hub, Amazon GuardDuty, and AWS Config rules.
  • Network: Amazon Virtual Private Cloud (VPC) structures, subnets, and route tables.

• Watchmaker: This "Server-as-Code" framework enables self-service provisioning of fully configured and pre-authorized Linux and Windows Amazon EC2 instances. Starting with standard Amazon Machine Images (AMIs), Watchmaker bootstraps and hardens the operating system, delivering over 200 inheritable security controls. This avoids the risk and maintenance overhead of static "gold disk" images. The resulting EC2 instance is not just secured, it is pre-authorized and ready for work within your VPC.