HOW TO GET FEDRAMP CERTIFIED IN AWS CLOUD
Cloud Security Podcast14 Helmi 2023

HOW TO GET FEDRAMP CERTIFIED IN AWS CLOUD

Cloud Security Podcast - This month we are talking about "Building on the AWS Cloud" and next up on this series, we spoke to Alexis Robinson (Alexis's Linkeidn), Senior Manager, Regulatory Compliance at AWS. FEDRAMP AWS environment can be made easy with the right security assessment framework for your organization. Alexis shared lessons and talk about How AWS Customers can prepare to increase their chances of getting FedRamp certified.

Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv

Host Twitter: Ashish Rajan (@hashishrajan)

Guest Twitter: Alexis Robinson (Alexis's Linkeidn)

Podcast Twitter - @CloudSecPod @CloudSecureNews

If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:

- Cloud Security News

- Cloud Security BootCamp

Spotify TimeStamp for Interview Questions

(00:00) Introduction

(05:35) A bit about Alexis

(08:20) What is FedRAMP and why people care about it?

(11:05) Scope of companies included in FedRAMP?

(13:12) Zero Trust Architecture and FedRAMP

(14:07) The concept of Controlled Inheritance

(15:43) Working with Authorising Officials

(16:44) Working with Security Control Officers

(17:46) AO Checklist to full compliance

(20:42) Conflicts in FedRAMP

(25:59) Common pitfalls to avoid on FedRAMP Journey

(31:38) The anti-patterns in getting FedRAMP Compliant

(35:34) FedRAMP is not just GovCloud

(38:12) Requirements with FedRAMP

(39:48) Where do people fall short with FedRAMP?

(41:26) How to make FedRAMP more developer friendly?

(44:17) How is FedRAMP different for Govcloud?

(47:21) What skillsets do you require in a team for FedRAMP?

(49:07) How to learn about FedRAMP

(53:09) Fun Questions

See you at the next episode!

Jaksot(345)

Azure Security Best Practices for Cloud Architects - John Savill

Azure Security Best Practices for Cloud Architects - John Savill

In this episode of the Virtual Coffee with Ashish edition, we spoke with John Savill (Linkedin_John Savill) is the Principal Cloud Architect, Author and YouTuber. Host: Ashish Rajan - Twitter @hashi...

21 Maalis 202157min

WHAT IS INFRASTRUCTURE AS CODE SECURITY? - Barak Schoster

WHAT IS INFRASTRUCTURE AS CODE SECURITY? - Barak Schoster

In this episode of the Virtual Coffee with Ashish edition, we spoke with Barak Schoster Goihman (@barakschoster) is the Co-Founder and CTO of Bridgecrew (@Bridgecrewio). Host: Ashish Rajan - Twitter...

14 Maalis 202138min

INCIDENT RESPONSE IN AWS CLOUD

INCIDENT RESPONSE IN AWS CLOUD

In this episode of the Virtual Coffee with Ashish edition, we spoke with Toni de la Fuente (@toniblyx) is the Senior Security Consultant at AWS (@AWSCloud) and author of Prowler - AWS Security Tool. ...

7 Maalis 202145min

How to become a CLOUD SECURITY ENGINEER IN 2021?

How to become a CLOUD SECURITY ENGINEER IN 2021?

In this episode of the Virtual Coffee with Ashish edition, we spoke with Nicholas McLaren (Linkedin - nmclarencys) is the Cloud Security Engineer, ByteChek(@Bytechek). Host: Ashish Rajan - Twitter @...

28 Helmi 202147min

Kubernetes Security at Scale in A CI/CD Pipeline - Michael Fraser

Kubernetes Security at Scale in A CI/CD Pipeline - Michael Fraser

In this episode of the Virtual Coffee with Ashish edition, we spoke with Michael Fraser (@itascode) is the Chief Architect, Co-Founder at refactr (@RefactrIT). Host: Ashish Rajan - Twitter @hashishr...

21 Helmi 202156min

Container Security in AWS at Scale - Ben Tomhave

Container Security in AWS at Scale - Ben Tomhave

In this episode of the Virtual Coffee with Ashish edition, we spoke with Ben Tomhave (Linkedin - @btomhave) is the Principal, Falcon’s View Consulting (@FalconsView). Host: Ashish Rajan - Twitter @h...

14 Helmi 202153min

CISO Challenges in 2021 - Zane Lackey Signal Sciences, Fastly

CISO Challenges in 2021 - Zane Lackey Signal Sciences, Fastly

In this episode of the Virtual Coffee with Ashish edition, we spoke with Zane Lackey, CISO & Co-Founder Signal Sciences, which is now owned by Fastly. Host: Ashish Rajan - Twitter @hashishrajan Gue...

10 Helmi 202151min

Cloud Security in $25 Billion dollar Company - Siemens USA

Cloud Security in $25 Billion dollar Company - Siemens USA

In this episode of the Virtual Coffee with Ashish edition, we spoke with Kurt John, Chief CyberSecurity Officer CISO at Siemens USA Host: Ashish Rajan - Twitter @hashishrajan Guest: Kurt John - Lin...

7 Helmi 202154min