DoD Cloud IaC for AWS

Utilizing DoD Cloud IaC for AWS, DoD customers can deploy approved landing zones in less than a day. By leveraging IaC automation to generate preconfigured, preauthorized, Platform as a Service (PaaS)-focused landing zones, AWS Cloud environments can be immediately consumed for development and test workloads by DoD customers. Plus, they support an accelerated accreditation model for production workloads. Whenever possible, DoD Cloud IaC leverages native security services offered by Cloud Service Providers (CSP) over traditional datacenter tools.

DoD Cloud IaC for AWS received a three-year Authority to Operate (ATO), with conditions, from DISA’s Risk Management Executive. The ATO reduces the assessment and authorization burden for mission owners, to include the inheritance of 103 common controls and 295 control correlation identifiers (CCI) in the Enterprise Mission Assurance Support Services (eMASS) system. It is currently ATO'd for both IL5 and IL6 workloads.

Beyond the foundational environment deployments, DoD Cloud IaC for AWS includes a set of DISA-authorized, pre-configured offerings available through the AWS Service Catalog. These services decrease time to operational capability for a wide array of use cases and accelerate mission owners’ deployment of a tailored cloud environment. DoD Cloud IaC for AWS also provides customers the opportunity to move up the stack and leverage higher level native AWS Managed Services, which increases the number of controls inherited from the cloud services provider.