Autodesk’s journey to FedRAMP compliance
summary
Autodesk describes building a dedicated FedRAMP region on AWS commercial using GitOps templates and deployment automation so a new region deploys in one month or less (previously six months–a year). Platform changes embed FIPS via an NGINX sidecar and turn on 60 services with a flip of a switch, and documentation/diagrams are templated. An audit ran six months ago but authorization is still pending; enabling FIPS required direct AWS support and ongoing change management.
AI-written summary · about
chapters (7)
- 0:00Introduction and agenda
- 1:25Understanding Autodesk
- 2:28The necessity of FedRAMP
- 4:07Developing the strategy
- 5:35Platform and deployment model
- 9:07Lessons learned in the journey
- 13:42Future steps and conclusion
related talks
20mPlatform Driven Compliance with Sigstore at Autodesk
26mAutomating FedRAMP Security Compliance with Terraform
22mAutomate security for FedRAMP compliance in the cloud
44mAchieve your identity, security, and compliance goals on
31mAssess your security foundation with AWS Security Onramp
35mRunning Cloud Foundry in a Compliance and Security Focused Environment
12mDoD FedRAMP Equivalency on AWS
15mA Diary of Change in the Dusty Financial Sector