Stackarmour

DOD – Cloud Migration and Security Services

Summary

The Vietnam War Commemoration (VWC) Office is an entity of the US Department of Defense and is responsible for the program to commemorate the 50th anniversary of the Vietnam War. The VWC office required a Drupal-based Content Management System (CMS) hosted on a DOD-compliant AWS GovCloud Virtual Private Cloud (VPC) along with Security Assessment & Authorization (SA&A) support services in compliance with DOD RMF requirements for an IL4 system.

Solution

stackArmor design and implemented the hosting solution in the AWS GovCloud in a fully managed Virtual Private Cloud (VPC) connected with the JSP security stack and compliant with various DOD and US Federal Security requirements. The developed solution included creating a highly-available environment using Multiple-Availability Zones (AZ) for the RHEL 6.x based Drupal servers and MySQL services. code management and deployment services were provided through Gitlab. A&A services provided included security scanning (using HP Fortify) and remediation in accordance with standard practices and guidance meeting DoD level 4 security requirements as identified in DISA STIGS and ACAS scan checks.