2013 AWS Worldwide Public Sector Summit Washington, D.C.

Transcription

1 Washington, D.C. Web Mapping and Security A View From Esri Bonnie Stayer Solutions Engineer Dan O Leary Director, D.C. Software Development Center

2 Introduction Cloud security affected by many moving parts Cloud security standards evolving FISMA/FedRAMP Cloud First initiative Advancing ArcGIS security capabilities Evolution of cloud provider capabilities Mobilization of workforce

3 Introduction Choosing an appropriate cloud deployment Not just technical issues/concerns Political push/pull issues Cloud First vs. We don t trust cloud providers, yet No silver bullet for all cloud security concerns Esri provides a roadmap of options and best practices, not just a Safe button to push

4 Esri A Global Company US Regional Offices US Satellites International Satellites International Distributors

5 ArcGIS A Complete Platform Desktop Web Device ArcGIS Online Data Management Visualization Analysis Dissemination Online Content and Services

6 Cloud Implementation Options Service Non-Cloud IaaS SaaS Model AGS Your Location AGS in AWS ArcGIS Online Deployment On-Premises Community Hybrid Public Model Your location AWS GovCloud Your Loc+AWS AWS/Azure Management Self-Managed Managed Model You Esri On-premises Cloud

7 ArcGIS Security

8 Architecture

9 Deploying ArcGIS in AWS Pre-built AMIs Windows, Linux Include RDBMS Launch instance, authorize license, create site Cloud Builder Desktop application Simplifies assembly and administration

10 ArcGIS IaaS Security Question If my cloud IaaS is FISMA/FedRAMP accredited and I deploy my app into that cloud, is the overall implementation FISMA/FedRAMP equivalent? Answer No Question Part 2 Okay, so it s not FISMA/FedRAMP equivalent, but the IaaS by itself ensures the solution is secure enough, right? Answer No IaaS FISMA Default ArcGIS

11 Security Responsibility Data Customer Managed Platform, Applications, Identity & Access Management Operating System, Network, & Firewall Cloud Provider Managed Infrastructure (s, Storage, Racks) Network Infrastructure (Switches, Routers, Cables, SAN) Data Center (Physical facility, UPS, Cooling)

12 ArcGIS Online Security

13 How is it used? Knowledge Workers Executive Access Public Engagement Work Anywhere Enterprise Integration ArcGIS Online Professional GIS

14 Security Responsibility Application Customer Configured Web Admin App (Org-wide settings, Management) End-User Org Portal (Create maps, Share, Discover) Application Esri Managed ArcGIS Online Application (Portal, Map Services, Account Management) Data (Portal, Index, Hosted) OS & Middleware Esri & Cloud Provider Managed Middleware Operating System Infrastructure Cloud Provider Managed Infrastructure (s, Storage, Racks) Network Infrastructure (Switches, Routers, Cables, SAN) Data Center (Physical facility, UPS, Cooling)

15 Deployment Options Online Online Intranet Intranet Intranet Portal Online Read-only Basemaps Intranet Intranet Portal Cloud On-premises

16 Hybrid Deployment ArcGIS Online Web Map Web/Mobile View Geodatabase Desktop Desktop View

17 Assessment & Authorization

18 Federal A&A Roadmap Product Cloud Provider Planned Federal A&A Q Q Q Q ArcGIS Online Amazon Web Services Amazon Web Services & MS Azure FISMA Low FedRAMP Mod Implement ATO FISMA USDA Alignment FedRAMP SaaS Reviews Started Implement ATO ArcGIS CSP or AWS GovCloud Esri Managed AWS,CSP FISMA Mod FedRAMP Mod Facilitate ATO FISMA Incorporate Lessons Learned Alignment Establish AGS Fed Image Implement ATO

19 ArcGIS Online Security Certification Efforts In Place Esri Data Center Operations - SSAE 16 Type 1 Expanded to Managed Services in 2012 Safe Harbor Self-Certification Currently Pursuing FISMA Low Accreditation Includes 3 rd party assessment Expected completion over next several months Future FedRAMP Moderate Incorporates more advanced security controls

20

21 Thank You