archived the channel

We are working with a customer that requires the development environment to be created in the commercial cloud of AWS but requires the production environment to be in GovCloud. We are investigating the potential for using the atmos framework for provisioning stacks in both commercial and GovCloud at the same time. I looked around in the various channels on this forum, but could not find any mentions of GovCloud integration. Is it possible to integrate account creation and role based access via aws-teams and aws-team-roles components so that we can create and access accounts in both commercial and GovCloud AWS accounts at the same time?

Is this level of integration across the commercial and GovCloud accounts possible within the atmos framework structure? Did anyone complete this integration successfully?

Hi all, first time posting. Does SweetOps support AWS govcloud? Can I manage/provision my AWS organization in gov regions?

@Jim Park has joined the channel

@Stewart Henderson has joined the channel

@Andy Miguel has joined the channel

@bowlofstew has joined the channel

@Shannon Dunn has joined the channel

@David Lundgren has joined the channel

@stobiewankenobi has joined the channel

@Jon has joined the channel

@Jeff Wozniak has joined the channel

@loren has joined the channel

@joshmyers has joined the channel

@Brandon Metcalf has joined the channel

lol...the channel where we can all lament 🧌

@Jonathan Perry has joined the channel

@Megamind has joined the channel

Route53 has some interesting differences compared to commercial.

You can create private hosted zones in the AWS GovCloud (US). In general, the functionality is the same as for private hosted zones in the global version of Route 53. However, you can create alias records only when the alias target is another record in the same hosted zone. To route traffic to another AWS resource, such as an ELB load balancer or an S3 bucket, you can use a CNAME record instead of an alias record unless you're creating a record at the zone apex.

@Jim Conner has joined the channel

@Lucky has joined the channel

Big Bang - Declarative Kubernetes-based cyber-compliance platform. Includes a compliant cyber stack with a Service Mesh, centralized logging and monitoring, validating webhooks, network policies, continuous container security scan/monitoring
• Repo for Big Bang
• Big Bang Quick Start
• Big Bang example using the Zarf delivery tool (disclaimer: I'm a maintainer of Zarf)

Important Links
• DoD DevSecOps Reference Design
• Frequently Asked Questions doc about Open Source Software published by DoD CIO
• Platform One - USAF program that has a collection of cloud native, hardened, CNCF-compliant K8s distros, IaC, hardened containers, etc
• Repo1 - Open source GitLab hosted by Platform One
• Iron Bank - Public hardened container registry - DoD-wide reciprocity (controversial, but gaining acceptance rapidly)
• Registry1 - Public Docker registry for Iron Bank
• DoD Cloud IaC baselines - Not public, need to be government person with .mil email address

Let's start pinning useful gov resources for DevOps

oh yeah

@Andriy Knysh (Cloud Posse) has joined the channel

@Jeremy (UnderGrid Network Services) has joined the channel

@Andrew Roth has joined the channel

@Erik Osterman (Cloud Posse) has joined the channel