Difference between revisions of "Cloud Configuration and Tool kits"
(Created page with "{{GC-Cloud information centre template}} {{GC Cloud Information Centre Footer}}") |
|||
| (2 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{GC-Cloud information centre template}} | {{GC-Cloud information centre template}} | ||
| + | GC Cloud Security Risk Management Approach for Adopting Cloud | ||
| + | Multiple Security breaches from companies known for their reputations on protecting personal information, lead the Government of Canada to take and hard look at security risks and the develop the appropriate mitigating factors. This will required a structured approach to managing risks associated with the protection of government data and infrastructure in public cloud. GC Cloud Security Risk Management Approach for adopting Cloud is one of the initiative developed by TBS to provide the necessary direction to GC departments. | ||
| + | GC Cloud Operationalization Framework | ||
| + | With the needs of securing protected B data in a Public cloud, the office of GC Chief Technology Officer developed an operationalization framework which was approved by GC Enterprise Architecture Review Board (EARB). | ||
| + | |||
| + | |||
| + | |||
| + | GC Event Logging Guidance | ||
| + | |||
| + | GC Accelerator | ||
| + | Conscious of the fact that wide adoption in GC will require enabling GC department to effectively and rapidly deploy application, computing etc. in public could environment. TBS in collaboration with SSC and other departments had developed GC accelerator for Microsoft Azure and AWS cloud. | ||
| + | CG Accelerators - Azure | ||
| + | To access the Azure accelerator, consult canada-ca/accelerators_accelerateurs-azure | ||
| + | CG Accelerators – Amazon Web Services | ||
| + | To access the AWS accelerator, consult canada-ca/accelerators_accelerateurs-aws | ||
| + | Secure Cloud Connectivity | ||
| + | The establishment of secure cloud connections to cloud services and trusted interconnection points will: | ||
| + | • Improve resiliency of the GC infrastructure with dedicated and private connections to cloud; | ||
| + | • thereby ensuring continued access to GC information systems and solutions hosted in the cloud; | ||
| + | • Help the GC to mitigate direct attacks from the Internet against cloud-based GC resources; and | ||
| + | • Enhance the protection of on-premise networks from compromised GC resources in the cloud. | ||
| + | Below are the link to the GC Secure Cloud Connectivity Requirements. | ||
| + | • GC Secure Cloud Connectivity Requirements | ||
| + | o GC Cloud Access Use Cases | ||
| + | o GC Connection Patterns - DRAFT for Consultation | ||
| + | GC Guardrails | ||
| + | The purpose of the guardrails is to ensure that departments and agencies are implementing a preliminary baseline set of controls within their cloud-based environments. These minimum guardrails are to be implemented within the GC-specified initial period (e.g. 30 days) upon receipt of an enrollment under the GC Cloud Services Framework Agreement. | ||
| + | • GC Cloud Guardrails - DRAFT for Consultation | ||
| + | o Cloud Guardrails - Initial 30 Days | ||
| + | o Standard Operating Procedure for Validating Cloud Guardrails | ||
| + | https://github.com/canada-ca/cloud-guardrails | ||
| + | GC Cloud Guardrails – AZURE | ||
| + | https://github.com/canada-ca/cloud-guardrails-azure | ||
| + | GC Cloud Guardrails – Amazon Web Service | ||
| + | https://github.com/canada-ca/cloud-guardrails-aws | ||
| + | GC Cloud reference Architecture | ||
| + | TBD | ||
| + | Naming and Tagging | ||
| + | To effectively manage GC cloud Resources, Shared Services Canada had developed a Cloud Resources Naming and Tagging Convention which was approved and ready to be used by GC departments deploying GC IT resources using approved public cloud services. | ||
| + | |||
| + | |||
| + | == '''GC Guardrails''' == | ||
| + | * GC Cloud Guardrails | ||
| + | * <nowiki>https://github.com/canada-ca/cloud-guardrails</nowiki> | ||
| + | * <nowiki>https://github.com/canada-ca/cloud-guardrails-azure</nowiki> | ||
| + | * <nowiki>https://github.com/canada-ca/cloud-guardrails-aws</nowiki> '''The GC AWS Accelerator main page is on GitHub''': <nowiki>https://github.com/canada-ca/accelerators_accelerateurs-aws/blob/master/HOWTOs/GC_AWS_LZ_Package/README.md</nowiki> '''The UTM Firewall VPC Overlay templates and scripts are also on GitHub and can be found here''': <nowiki>https://github.com/canada-ca/accelerators_accelerateurs-aws/tree/master/templates</nowiki> '''The GC AWS Accelerator documentation including build books, etc., is currently stored in GCCode''': <nowiki>https://gccode.ssc-spc.gc.ca/GCCloudEnablement/AWS/tree/master/GC%20Accelerator%20-%20AWS%20Landing%20Zone%20Package%20(July%202019)</nowiki> '''Terraform modules on github''': <nowiki>https://github.com/canada-ca-terraform-modules</nowiki> '''ARM templates on github:''' <nowiki>https://github.com/canada-ca-azure-templates</nowiki> '''Azure accelerators on github:''' | ||
| + | <nowiki>https://github.com/canada-ca/accelerators_accelerateurs-azure</nowiki> | ||
| + | |||
| + | '''''*** This page is under construction. *** '''''<br> | ||
{{GC Cloud Information Centre Footer}} | {{GC Cloud Information Centre Footer}} | ||
Latest revision as of 23:26, 20 January 2020
GC Cloud Security Risk Management Approach for Adopting Cloud Multiple Security breaches from companies known for their reputations on protecting personal information, lead the Government of Canada to take and hard look at security risks and the develop the appropriate mitigating factors. This will required a structured approach to managing risks associated with the protection of government data and infrastructure in public cloud. GC Cloud Security Risk Management Approach for adopting Cloud is one of the initiative developed by TBS to provide the necessary direction to GC departments. GC Cloud Operationalization Framework With the needs of securing protected B data in a Public cloud, the office of GC Chief Technology Officer developed an operationalization framework which was approved by GC Enterprise Architecture Review Board (EARB).
GC Event Logging Guidance
GC Accelerator Conscious of the fact that wide adoption in GC will require enabling GC department to effectively and rapidly deploy application, computing etc. in public could environment. TBS in collaboration with SSC and other departments had developed GC accelerator for Microsoft Azure and AWS cloud. CG Accelerators - Azure To access the Azure accelerator, consult canada-ca/accelerators_accelerateurs-azure CG Accelerators – Amazon Web Services To access the AWS accelerator, consult canada-ca/accelerators_accelerateurs-aws Secure Cloud Connectivity The establishment of secure cloud connections to cloud services and trusted interconnection points will: • Improve resiliency of the GC infrastructure with dedicated and private connections to cloud; • thereby ensuring continued access to GC information systems and solutions hosted in the cloud; • Help the GC to mitigate direct attacks from the Internet against cloud-based GC resources; and • Enhance the protection of on-premise networks from compromised GC resources in the cloud. Below are the link to the GC Secure Cloud Connectivity Requirements. • GC Secure Cloud Connectivity Requirements o GC Cloud Access Use Cases o GC Connection Patterns - DRAFT for Consultation GC Guardrails The purpose of the guardrails is to ensure that departments and agencies are implementing a preliminary baseline set of controls within their cloud-based environments. These minimum guardrails are to be implemented within the GC-specified initial period (e.g. 30 days) upon receipt of an enrollment under the GC Cloud Services Framework Agreement. • GC Cloud Guardrails - DRAFT for Consultation o Cloud Guardrails - Initial 30 Days o Standard Operating Procedure for Validating Cloud Guardrails
https://github.com/canada-ca/cloud-guardrails
GC Cloud Guardrails – AZURE https://github.com/canada-ca/cloud-guardrails-azure GC Cloud Guardrails – Amazon Web Service https://github.com/canada-ca/cloud-guardrails-aws GC Cloud reference Architecture TBD Naming and Tagging To effectively manage GC cloud Resources, Shared Services Canada had developed a Cloud Resources Naming and Tagging Convention which was approved and ready to be used by GC departments deploying GC IT resources using approved public cloud services.
GC Guardrails
- GC Cloud Guardrails
- https://github.com/canada-ca/cloud-guardrails
- https://github.com/canada-ca/cloud-guardrails-azure
- https://github.com/canada-ca/cloud-guardrails-aws The GC AWS Accelerator main page is on GitHub: https://github.com/canada-ca/accelerators_accelerateurs-aws/blob/master/HOWTOs/GC_AWS_LZ_Package/README.md The UTM Firewall VPC Overlay templates and scripts are also on GitHub and can be found here: https://github.com/canada-ca/accelerators_accelerateurs-aws/tree/master/templates The GC AWS Accelerator documentation including build books, etc., is currently stored in GCCode: https://gccode.ssc-spc.gc.ca/GCCloudEnablement/AWS/tree/master/GC%20Accelerator%20-%20AWS%20Landing%20Zone%20Package%20(July%202019) Terraform modules on github: https://github.com/canada-ca-terraform-modules ARM templates on github: https://github.com/canada-ca-azure-templates Azure accelerators on github:
https://github.com/canada-ca/accelerators_accelerateurs-azure
*** This page is under construction. ***
