SANS CloudSecNext Summit & Training Talk by Michael Greenlaw, Principal Security Consultant

​From AFT to ATO, AWS native FedRAMP through Terraform:

​The process of obtaining a FedRAMP ATO in the AWS cloud, often begins with a separation of federal and commercial resources. This separation, or sometimes a move to a new AWS account, is a long and tedious process when starting from zero. We can simplify and automate this process using Terraform with AWS Control Tower via AFT.

​In this talk we'll look at how Terraform, AFT, and Control tower can be used to create an AWS Native, FedRAMP moderate landing zone. We'll then use the AFT managed pipeline to satisfy a NIST 800-53 control, demonstrating Terraform's FedRAMP automation capabilities.