#govcloud - February 2022 | Slack Archive

govcloudArchived

26 messages

February 2022

Dec 2023

erikalmost 5 years ago

@Erik Osterman (Cloud Posse) has joined the channel

Andrew Rothalmost 5 years ago

@Andrew Roth has joined the channel

Jeremy (UnderGrid Network Services)almost 5 years ago

@Jeremy (UnderGrid Network Services) has joined the channel

Andriy Knysh (Cloud Posse)almost 5 years ago

@Andriy Knysh (Cloud Posse) has joined the channel

giphyalmost 5 years ago

oh yeah

Andrew Rothalmost 5 years ago

Let's start pinning useful gov resources for DevOps

Andrew Rothalmost 5 years ago(edited)

Important Links
• DoD DevSecOps Reference Design
• Frequently Asked Questions doc about Open Source Software published by DoD CIO
• Platform One - USAF program that has a collection of cloud native, hardened, CNCF-compliant K8s distros, IaC, hardened containers, etc
• Repo1 - Open source GitLab hosted by Platform One
• Iron Bank - Public hardened container registry - DoD-wide reciprocity (controversial, but gaining acceptance rapidly)
• Registry1 - Public Docker registry for Iron Bank
• DoD Cloud IaC baselines - Not public, need to be government person with .mil email address

Andrew Rothalmost 5 years ago(edited)

Big Bang - Declarative Kubernetes-based cyber-compliance platform. Includes a compliant cyber stack with a Service Mesh, centralized logging and monitoring, validating webhooks, network policies, continuous container security scan/monitoring
• Repo for Big Bang
• Big Bang Quick Start
• Big Bang example using the Zarf delivery tool (disclaimer: I'm a maintainer of Zarf)

Luckyalmost 5 years ago

@Lucky has joined the channel

Jim Conneralmost 5 years ago

@Jim Conner has joined the channel

Luckyalmost 5 years ago(edited)

Route53 has some interesting differences compared to commercial.

You can create private hosted zones in the AWS GovCloud (US). In general, the functionality is the same as for private hosted zones in the global version of Route 53. However, you can create alias records only when the alias target is another record in the same hosted zone. To route traffic to another AWS resource, such as an ELB load balancer or an S3 bucket, you can use a CNAME record instead of an alias record unless you're creating a record at the zone apex.