AWS Public Sector Blog

FedRAMP’s Consolidated Rules for 2026: What cloud service providers need to know

FedRAMP’s Consolidated Rules for 2026: What cloud service providers need to know

FedRAMP’s Consolidated Rules for 2026 (CR26), effective July 2026, change how cloud service providers achieve and maintain FedRAMP certifications and give federal agencies more autonomy. This guide covers CR26’s impact, new CSP responsibilities, and how to operationalize compliance on AWS GovCloud (US) and the AWS US East and US West Regions.

Xtasis accelerates medical research and scientific writing with AWS

Xtasis accelerates medical research and scientific writing with AWS

Dr. Adrienne Kline and her company Xtasis built three AI-powered tools on AWS: PixelGuard, NoteGuard, and CiteGeist. They automate the manual busywork of medical research, from de-identifying medical images and clinical notes to managing and verifying academic citations, giving researchers back months of time for science.

How AWS helps education leaders prioritize AI investments

How AWS helps education leaders prioritize AI investments

Eighteen months ago, most boards were asking leaders whether they were moving fast enough on AI. Today the question is harder: are our AI investments generating business value? Across industries, AI budgets have grown faster than the value leaders can point to, and education is no exception. Education technology (EdTech) and education leaders are spending aggressively on AI, and many struggle to tie that spend to outcomes. The numbers bear this out: McKinsey’s Enterprise AI FinOps Survey (May 2026) found that 93 percent of organizations were exceeding their AI budgets, as spend moves from isolated pilots to enterprise-wide adoption.

https://app.asana.com/1/8442528107068/project/1207199896111772/task/1219271990555232?focus=true

IENAI SPACE validates 360™ space mission analysis software with AWS Foundational Technical Review

Spanish space-tech company IENAI SPACE put its cloud-based mission analysis platform, 360™, through the AWS Foundational Technical Review (FTR)—and came out stronger. In this post, we explore how the FTR process helped the team harden per-tenant data isolation and encryption, build a continuous software-supply-chain security pipeline, and formalize backup and recovery objectives, all while running on AWS.

Infrastructure migrations, cleared for takeoff: AWS Transform and Outposts expand into AWS GovCloud (US)

AWS Transform is now available in the AWS GovCloud (US-West) Region, so agencies and regulated organizations can plan and run large-scale migrations without leaving the AWS GovCloud (US) boundary designed for sensitive data and regulated workloads. From this region, you can target both AWS GovCloud (US-East) and AWS GovCloud (US-West) as migration destinations.

https://app.asana.com/1/8442528107068/project/1207199896111772/task/1213279419557555?focus=true

Decoding DoD cybersecurity: CMMC, DFARS, and FedRAMP Equivalence demystified

Whether you’re a prime contractor, a subcontractor deep in the supply chain, a managed service provider (MSP) supporting DIB clients, or a CSP hosting defense workloads, this post explains what’s required, who’s responsible, and how to build a compliance strategy that holds up under scrutiny. Because nearly every one of these pathways ultimately runs on cloud infrastructure, we also highlight where Amazon Web Services (AWS) and AWS GovCloud (US) fit. The foundation you build on shapes how achievable compliance becomes.

Decoding DoD cybersecurity: Compliance guide for DIB organizations

Decoding DoD cybersecurity: Compliance guide for DIB organizations

Defense industrial base (DIB) organizations working through Cybersecurity Maturity Model Certification (CMMC), Defense Federal Acquisition Regulation Supplement (DFARS), and Federal Risk and Authorization Management Program (FedRAMP) requirements struggle to know how to get started. The answer depends on your role in the defense supply chain and the type of information you handle.