Post Syndicated from Steve Earley original https://aws.amazon.com/blogs/security/aws-achieves-fedramp-p-ato-for-20-services-in-the-aws-us-east-west-regions-and-aws-govcloud-us-regions/
Amazon Web Services (AWS) is pleased to announce that 20 additional AWS services have achieved Provisional Authority to Operate (P-ATO) from the Federal Risk and Authorization Management Program (FedRAMP) Joint Authorization Board (JAB). The following are the 20 AWS services with FedRAMP authorization for the U.S. federal government and organizations with regulated workloads:
- AWS App Mesh provides application-level networking to help your services communicate with each other across multiple types of compute infrastructure.
- AWS Audit Manager helps you to continuously audit your AWS usage to simplify how risk and compliance are assessed with regulations and industry standards.
- AWS Chatbot is an interactive agent that helps you monitor, operate, and troubleshoot AWS workloads in your chat channels.
- Amazon Chime SDK is a collection of client software development kits that use resources in your AWS account to add collaborative audio calling, video calling, and screen share features to your web or mobile applications.
- AWS Cloud9 is a cloud-based integrated development environment (IDE) that helps you write, run, and debug your code with just a browser.
- Amazon Detective helps you analyze, investigate, and quickly identify the root cause of potential security issues or suspicious activities.
- EC2 Image Builder simplifies the building, testing, and deployment of virtual machine and container images for use on AWS or on-premises.
- Amazon FinSpace is a data management and analytics service that is purpose built for the financial services industry (FSI).
- AWS Firewall Manager is a security management service that allows you to centrally configure and manage firewall rules across your accounts and applications in AWS Organizations.
- Amazon Forecast is a fully managed service that uses machine learning to deliver highly accurate forecasts.
- Amazon Keyspaces (for Apache Cassandra) is a scalable, highly available, and managed Apache Cassandra–compatible database service.
- Amazon Kinesis Data Analytics is a fully managed service that you can use to process and analyze streaming data using Java, SQL, or Scala.
- Amazon Lex is an AWS service for building conversational interfaces into applications using voice and text.
- Amazon Managed Streaming for Apache Kafka (Amazon MSK) is an AWS streaming data service that manages Apache Kafka infrastructure and operations.
- Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ to help you set up and operate message brokers on AWS.
- Amazon Neptune is a fast, reliable, fully managed graph database service that helps you build and run applications that work with highly connected datasets.
- AWS Network Firewall is a managed service that helps you to deploy essential network protections for your Amazon Virtual Private Cloud (Amazon VPC).
- Amazon Quantum Ledger Database (Amazon QLDB) is a purpose-built ledger database that provides a complete and cryptographically verifiable history of changes made to your application data.
- AWS Resource Access Manager (AWS RAM) is designed to help you securely share resources across AWS accounts, within your organization or organizational units (OUs) in AWS Organizations, and with AWS Identity and Access Management (IAM) roles and users for supported resource types.
- Amazon Timestream is a fast, scalable, and serverless time series database service for AWS IoT Core and operational applications that can help you to store and analyze trillions of events per day up to 1,000 times faster and at as little as 1/10th the cost of relational databases.
These 20 services are now listed on the FedRAMP Marketplace and the AWS Services in Scope by Compliance Program page.
Service authorizations by AWS Region
The following table shows our most recent FedRAMP service authorizations by Region and authorization level:
| Service | FedRAMP Moderate in the AWS US East/West Region | FedRAMP High in the AWS GovCloud (US) Region |
| AWS App Mesh | ✓ | |
| AWS Audit Manager | ✓ | |
| AWS Chatbot | ✓ | |
| Amazon Chime SDK | ✓ | |
| AWS Cloud9 | ✓ | |
| Amazon Detective | ✓ | |
| EC2 Image Builder | ✓ | ✓ |
| Amazon FinSpace | ✓ | |
| AWS Firewall Manager | ✓ | ✓ |
| Amazon Forecast | ✓ | |
| Amazon Keyspaces (for Apache Cassandra) | ✓ | |
| Amazon Kinesis Data Analytics | ✓ | ✓ |
| Amazon Lex | ✓ | |
| Amazon Managed Streaming for Apache Kafka (Amazon MSK) | ✓ | ✓ |
| Amazon MQ | ✓ | |
| Amazon Neptune | ✓ | ✓ |
| AWS Network Firewall | ✓ | ✓ |
| Amazon Quantum Ledger Database (Amazon QLDB) | ✓ | |
| AWS Resource Access Manager (AWS RAM) | ✓ | ✓ |
| Amazon Timestream | ✓ |
AWS is continually expanding the scope of our compliance programs to help customers use authorized services for sensitive and regulated workloads. AWS now offers 123 AWS services authorized in the AWS US East/West Regions under FedRAMP Moderate Authorization, and 105 services authorized in the AWS GovCloud (US) Regions under FedRAMP High Authorization.
To learn what other public sector customers are doing on AWS, see our Government, Education, and Nonprofits Case Studies and Customer Success Stories. Stay tuned for future updates on our Services in Scope by Compliance Program page. Let us know how this post will help your mission by reaching out to your AWS Account Team. Lastly, if you have feedback about this blog post, let us know in the Comments section.
If you have feedback about this post, submit comments in the Comments section below. If you have questions about this post, contact AWS Support.
Want more AWS Security news? Follow us on Twitter.