AWS Public Sector Blog

Turning vague agent personality goals into versioned prompts with Amazon Bedrock

Turning vague agent personality goals into versioned prompts with Amazon Bedrock

The methodology described in this post translates subjective personality requirements into testable behaviors, versioned prompts, and documented boundaries. It addresses several dimensions of Responsible AI at AWS, an eight-dimension framework that guides how we build and evaluate AI systems.

An incident response playbook for satellite operations on AWS (Part-1): Detection and forensic readiness

An incident response playbook for satellite operations on AWS (Part-1): Detection and forensic readiness

In this post, the first in a two-part series, we focus on the detection and forensic readiness side of satellite IR. This post walks through instrumenting your ground segment with Amazon Web Services (AWS) security services and AWS Ground Station so that threats surface before they cause damage, and forensic data is already flowing when an incident occurs.

An incident response playbook for satellite operations on AWS (Part-2): Automated response and recovery

An incident response playbook for satellite operations on AWS (Part-2): Automated response and recovery

This blog covers what to do when those detections fire. Satellite incident response (IR) must account for constraints that ground-based systems never face: containment actions that wait for the next orbital pass, decisions that trade mission continuity against security, and recovery procedures where the compromised endpoint cannot be physically accessed. It walks through containment, eradication, recovery, automated runbooks, and tabletop exercises designed for satellite operations teams.

Prepare for your GovRAMP Progressing Snapshot with AWS

Prepare for your GovRAMP Progressing Snapshot with AWS

In this post, we explain what the Progressing Snapshot program is, what the program is for, who it is for, and how Amazon Web Services (AWS) helps you lay the foundation to address many of the 40 snapshot controls.

Solving federal log retention requirements with AWS account-level subscription filters

Solving federal log retention requirements with AWS account-level subscription filters

Learn how the Login.gov team implemented a robust long-term log retention system that solved multiple architectural challenges while using Amazon Web Services (AWS) account-level subscription filters to provide capabilities that other approaches couldn’t match.

Build an AI-powered form filling assistant with Strands Agents

Build an AI-powered form filling assistant with Strands Agents

This post explains how to build exactly that using Strands Agents and Amazon Bedrock. The entire solution runs in about 200 lines of Python code, and you can have it working on your computer after completing the pre-requisite steps.

https://app.asana.com/1/8442528107068/project/1207199896111772/task/1214439772201800?focus=true

Preventive controls for FedRAMP 20x: Using SCPs and guardrails to enforce KSIs

Why preventive controls matter for FedRAMP 20x Organizations strengthen their security posture when Amazon Web Services (AWS) cloud resources consistently align with security and regulatory requirements. Preventive security controls, which are designed to minimize or avoid threat events, help enforce these requirements before misconfigurations are deployed. In this post, we show how service control policies […]