search

cloud-gov / cg-site

The cloud.gov website
https://cloud.gov
Other
59 stars 121 forks source link

Internal cloud.gov dataflow and architecture #1694

Open jeffb4 opened 4 years ago

jeffb4 commented 4 years ago

It would be useful for companies attempting the FedRAMP process to get more details on cloud.gov's internal network architecture and data flow.

As an example of a question this might help answer: If I am trying to get a non-agency-hosted SaaS hosted on AWS GovCloud approved for FedRAMP Moderate, do my EC2 nodes need to send all outbound traffic through a TIC? An L7 logging proxy? NAT? Direct igw?

pburkholder commented 4 years ago

Hi Jeff,

Thanks for the feedback. We have more diagrams at https://diagrams.fr.cloud.gov. They are not the easiest to read so we'll be redoing them in C4/PlanUML. I also hope to opensource more of our SSP as we move to OSCAL and better differentiate what can be open and what's still sensitive.

I hope that's of some help to you.

jeffb4 commented 4 years ago

Those diagrams are very, very useful thank you.

onelittlebecca commented 4 years ago

Agree -- the diagrams are SUPER helpful! Thanks!