Hacker News new | ask | show | jobs
by onesmalldrop 1477 days ago
Public clouds are separated from their gov versions, with gov versions using older, modified versions of what everyone else uses. public clouds ARE NOT fedramp compliant
2 comments
rrdharan 1477 days ago
This is not true. Google Cloud ‘s FedRAMP offering uses the same regions, zones and binaries and configurations as the regular public cloud offering.

Source: I work on FedRAMP compliance for GCP Databases.

link
my123 1477 days ago
For reference, this is also the same case for AWS: https://aws.amazon.com/compliance/services-in-scope/

AWS US East-West (Northern Virginia, Ohio, Oregon, Northern California) is FedRAMP compliant at moderate impact level.

link
Spooky23 1477 days ago
Not necessarily. Lots and lots of .gov operates in commercial clouds. Google doesn’t even have a distinct offering - just support add-ons for things like CJIS compliance. Microsoft’s footprint is a lot more complex.

Outside of the DoD space, the main distinctions between these offerings is where data can be stored and where and to what level of vetting vendor employees are.

link