Federal Usage of Cloud Services / FedRAMP explainer

[cschroedl-gov]

I have spent a lot of time explaining to folks individually why we can/can't use certain cloud services. I haven't found great resources elsewhere. Would this be a good place to try to explain it?

[krusynth]

That sounds great! You should feel free to propose a draft in a PR, or just provide some notes here of what you think needs to be included and I can make an attempt at it.

I've got a fedramp section here:

https://digitalpolicy.us/policies/cybersecurity/#FedRAMP

which pulls from this:

https://github.com/krusynth/digitalpolicy/blob/ghpages/content/_policies/cybersecurity.md

[cschroedl-gov]

Thanks for pointing that out! I missed the FedRAMP section somehow. It's pretty great already! I will try to add a bit about the journey from a feature being released by a CSP to it being available for government use.

[krusynth]

Bumping this back up my queue to update for the new FedRAMP memo