Category: Developer Tools

As organisations modernise to meet the evolving expectations of the Australian Government, delivering secure, cloud-based services has become a commercial and operational necessity. This transformation brings a critical challenge: maintaining a hardened security posture while aligning to the Information Security Registered Assessors Program (IRAP) assessment requirements and priorities.

Catching a compliance violation in production is expensive. Catching it in a pull request is nearly free. In this post, we demonstrate how to build a multi-tool infrastructure as code (IaC) validation pipeline that checks AWS CloudFormation templates and Terraform configurations against Federal Risk and Authorization Management Program (FedRAMP) 20x Key Security Indicators (KSIs) before deployment. Combined with the preventive controls from Preventive controls for FedRAMP 20x: Using SCPs and guardrails to enforce KSIs and the methods to be described in future blog posts, this creates a full-lifecycle compliance architecture.

AWS GovCloud (US) is an innovative cloud solution that includes a pair of AWS Regions providing a cloud computing environment designed specifically for government agencies, contractors, and organizations that handle sensitive, International Traffic in Arms Regulations (ITAR)-controlled data and require US citizenship or entity status. AWS GovCloud (US) regions exist as a separate partition from […]

Every day, the Anne Arundel County, Maryland, Office of Community Engagement and Constituent Services receives hundreds of resident concerns by phone, online, and even in handwritten letters. These aren’t routine inquiries but complex problems, such as zoning disputes, permitting questions, and other issues that residents have escalated to the highest levels of county government. Staff […]

This post shows you how to use Amazon Web Services (AWS) services to meet Federal Risk and Authorization Management Program (FedRAMP) 20x requirements, reducing authorization time from months to weeks through automated compliance pipelines and continuous validation. You’ll learn how to build a trust center, automate vulnerability detection, generate Key Security Indicators (KSIs), and implement […]

In this post, we introduce AWS observability services, explore best practices for observability, and explain how to achieve them.

This post demonstrates how to enhance security and compliance in an isolated SageMaker JupyterLab environment by implementing two key customizations: configuring download restrictions and implementing secure Python package installation through AWS CodeArtifact.

Technical Safety BC (TSBC) regulates the safe installation and operation of technical systems (electrical, gas, boiler, elevator, etc.) in British Columbia. This post showcases how the TSBC built a machine learning operations (MLOps) solution using AWS to streamline production model training and management to process public safety inquiries more efficiently.

In this post, we demonstrate how to use the generative AI capabilities of Amazon Bedrock to streamline the creation of AWS Fault Injection Service (FIS) experiments.

Organizations adopting modern software development activities continue to embrace the advantages of AI and large language models (LLMs), maximizing the productivity of developers. Amazon Q Developer provides you with an AI coding companion that delivers direct access for developers to the AI companion within the integrated development environment (IDE). In this post, we walk you through an example you can use leveraging the power of Amazon Bedrock to provide a coding assistant in your IDE.