Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Plugin should allow using the FIPS AWS endpoint for FedRAMP compliance #80

Open
eyal-mor opened this issue Jul 7, 2021 · 3 comments
Open
Labels
enhancement New feature or request

Comments

@eyal-mor
Copy link

eyal-mor commented Jul 7, 2021

For FedRAMP compliance with AWS, it's required to use the FIPS endpoints provided by AWS to create the lambda resources.

Currently there is no way to deploy a FedRAMP compliant AWS Lambda.

Context:

  1. https://aws.amazon.com/compliance/fips/
  2. https://github.com/spinnaker/clouddriver/blob/master/clouddriver-lambda/src/main/java/com/netflix/spinnaker/clouddriver/lambda/deploy/ops/AbstractLambdaAtomicOperation.java (not way to provide endpoint)
@eyal-mor eyal-mor changed the title Plugin should allow using the FIPS AWS endpoint for FedRAMP Plugin should allow using the FIPS AWS endpoint for FedRAMP compliance Jul 7, 2021
@nimakaviani
Copy link
Collaborator

I don't think it is a plugin issue. This appears to require a fix in how the Lambda driver is implemented in clouddriver.

@gsapkal
Copy link
Collaborator

gsapkal commented Jul 15, 2021

This is not lambda specific . The clouddriver needs a way to configure AWS API to use FIPS endpoints for all communication in case of FedRAMP compliant deployments .

@nimakaviani
Copy link
Collaborator

agreed. I think we should raise this as an issue in clouddriver repo.

@nimakaviani nimakaviani added the enhancement New feature or request label Jul 28, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants