Category: Amazon EC2

In this post, we discuss how AWS and Wiz support security and resilience for AMCs to help keep the focus more on patient care while maintaining a robust, secure operating environment.

Catching a compliance violation in production is expensive. Catching it in a pull request is nearly free. In this post, we demonstrate how to build a multi-tool infrastructure as code (IaC) validation pipeline that checks AWS CloudFormation templates and Terraform configurations against Federal Risk and Authorization Management Program (FedRAMP) 20x Key Security Indicators (KSIs) before deployment. Combined with the preventive controls from Preventive controls for FedRAMP 20x: Using SCPs and guardrails to enforce KSIs and the methods to be described in future blog posts, this creates a full-lifecycle compliance architecture.

Real missions break perfect prototypes. Through Project MAVERICK (Mission Autonomy Versatile Rapid Innovation and Capabilities Kit), Amazon Web Services (AWS) confronts this reality head-on—bringing cloud capabilities directly into the field to test autonomous systems where it matters most.

In this blog, learn how NASA’s Earth Science Data and Information System (ESDIS) is migrating over 170 petabytes of Earth science data to AWS to provide equitable access to researchers worldwide, eliminating the “data fortress” problem while achieving significant cost efficiencies through intelligent tiering, serverless architecture, and economies of scale. The post also details how NASA made over 6,000 Earth Science collections visible in the Registry of Open Data on AWS, enabling seamless discovery and analysis for the broader AWS user community.

Healthcare is entering a new era. Advances in AI, data analytics, and cloud computing are creating opportunities ranging from accelerating drug discovery and enabling precision medicine to helping clinicians detect disease earlier and spend more time with patients. As healthcare organizations embrace these technologies, they face an equally important responsibility: safeguarding some of the world’s […]

In this post, the first in a two-part series, we focus on the detection and forensic readiness side of satellite IR. This post walks through instrumenting your ground segment with Amazon Web Services (AWS) security services and AWS Ground Station so that threats surface before they cause damage, and forensic data is already flowing when an incident occurs.

This blog covers what to do when those detections fire. Satellite incident response (IR) must account for constraints that ground-based systems never face: containment actions that wait for the next orbital pass, decisions that trade mission continuity against security, and recovery procedures where the compromised endpoint cannot be physically accessed. It walks through containment, eradication, recovery, automated runbooks, and tabletop exercises designed for satellite operations teams.

Why preventive controls matter for FedRAMP 20x Organizations strengthen their security posture when Amazon Web Services (AWS) cloud resources consistently align with security and regulatory requirements. Preventive security controls, which are designed to minimize or avoid threat events, help enforce these requirements before misconfigurations are deployed. In this post, we show how service control policies […]

This post distills how one Amazon Web Services (AWS) customer in the defense and aerospace industry interpreted the U.S. International Traffic in Arms Regulations (ITAR) and concluded that U.S. commercial AWS Regions could support their export-controlled workloads, including AI workloads, when configured appropriately.

In this post, you’ll learn how KBR—a global science, technology, and engineering solutions organization—achieved a 33.5% cost savings and a 27.09% increase in pipeline processing speed by migrating geospatial processing workloads from an x86 Amazon Elastic Compute Cloud (Amazon EC2) M7i instance to AWS Graviton processors while maintaining data accuracy within 0.002% of x86 outputs.