As the new Cloud Smart Strategy rightly points out, obtaining an ATO is a long and cumbersome process. If one tries to obtain an ATO for a SaaS solution that sits on a PaaS solution that sits on a IaaS solution then this effort is tripled since each layer has to be separately authorized. Please consider making the highest layer (SaaS) inclusive of all lower layers so one can deal with only that layer than all three.
As the new Cloud Smart Strategy rightly points out, obtaining an ATO is a long and cumbersome process. If one tries to obtain an ATO for a SaaS solution that sits on a PaaS solution that sits on a IaaS solution then this effort is tripled since each layer has to be separately authorized. Please consider making the highest layer (SaaS) inclusive of all lower layers so one can deal with only that layer than all three.