Security

4980 readers

3 users here now

Confidentiality Integrity Availability

founded 4 years ago

MODERATORS

[email protected]

483

Amazon storing classified US government documents improperly (lemmy.ml)

submitted 6 months ago by [email protected] to c/[email protected]

70 comments fedilink hide all child comments

https://wetdry.world/@ari/112230288896956003

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 18 points 6 months ago (8 children)

Okay, the question I have, is why any government from a developed country would ever use something like AWS or something that everyone can obtain access to rather than making their own private solutions to these problems?

[–] [email protected] 38 points 6 months ago (1 children)

It's easier to hire someone who knows aws than to train someone on your custom thing. I don't really agree, but that's mostly the reasoning.

[–] [email protected] 5 points 6 months ago

Not to mention in house solutions are basically guaranteed to cost more than AWS to get something even close to as comparable. A basic service like Lambda is complex as fuck and has had billions of dollars poured into making it what it is today.

[–] [email protected] 25 points 6 months ago

Amazon has a government cloud offering https://aws.amazon.com/govcloud-us/

[–] [email protected] 6 points 6 months ago

Another question could be : which developed country is not yet using the popular AWS already and why ?

For example : https://press.aboutamazon.com/2023/10/amazon-web-services-to-launch-aws-european-sovereign-cloud

Customers, AWS Partners, and regulators welcoming the new AWS European Sovereign Cloud include the German Federal Office for Information Security (BSI), German Federal Ministry of the Interior and Community (BMI), German Federal Ministry for Digital and Transport, Finland Ministry of Finance, National Cyber and Information Security Agency (NÚKIB) in the Czech Republic, National Cyber Security Directorate of Romania, SAP, Dedalus, Deutsche Telekom, O2 Telefónica in Germany, Heidelberger Druckmaschinen AG, Raisin, Scalable Capital, de Volksbank, Telia Company, Accenture, AlmavivA, Deloitte, Eviden, Materna, and msg group

[–] psmgx 5 points 6 months ago

Cloud presents several advantages,and GovCloud is a thing.

Like, Amazon has SCIF cloud offerings. These leaks were cuz some dumbass contractor exposed a repo to the internet

[–] [email protected] 4 points 6 months ago (1 children)

In Portuguese: https://www.serpro.gov.br/menu/noticias/noticias-2023/serpro-lanca-nuvem-de-governo

Brazillian government launched its own cloud service to support the government agencies, everything stored and administer in Brazilian territory, making it independent from private companies and international governments.

[–] [email protected] 1 points 6 months ago

🎉 Hooray!

[–] [email protected] 4 points 6 months ago

I expect the same reasons they're mostly all using Microsoft Office, Windows, and Active Directory. Because it's cheaper than doing it yourself.

[–] capital 1 points 6 months ago (1 children)

This comment makes it clear you've never worked in government IT.

[–] [email protected] 1 points 6 months ago (1 children)

Hell, I'm still in college for an IT degree, so no I haven't worked in government IT.

[–] capital 1 points 6 months ago

The US government fucking sucks at it.

I really wish it wasn’t the case.