The register providing contrast to the AWS infrastructure build out:
The Register is aware of government agencies building on-prem private clouds – sometimes on open source platforms – so they can scour code to soothe their security worries.
That’s just a local data center, guys. Like how everything was done before “the cloud” became a buzzword.
There is some difference I see in the management layer, with more dynamic resource allocation in a cloud infrastructure compared to traditional data center usage.
- refalo ( @refalo@programming.dev ) 3•3 days ago
AWS literally advertises an isolated “GovCloud” service.
Maybe it’s “AI” powered. I’m sure they could sell that concept.
“Top Secret” <> “AWS”
I can only laugh so much guys, careful.
AWS is an American company. If the US goes facist, Trump could order Amazon to give him a copy of everything they have in their TS cloud
That’s why you build it in Australia and only give Australian citizens with appropriate security clearances direct operational access.
Well I would think that if the customer, in this case the Australian Signals Directorate, encrypted all data prior to going to AWS, it would be protected from any data mining that Amazon does.
I am sure that the ASD isn’t just posting the information unencrypted on AWS or solely trusting Amazon’s encryption where Amazon also has a copy of the key.
I’m sure it’ll be airgapped and completely separate from the rest of AWS.
Well yes and no. For one there is lots of metadata like access times, the IPs that connect and their locations, traffic amount, etc.
But also like with all “cloud solutions” you are just outsourcing your uptime reliability issues. And for a system like that, im not sure outsourcing that is a great idea.
Yes that metadata can exist but can’t that be obscured if AWS isn’t connected to directly?
I think some of the technical details of how the ASD intends to ensure data protection/confidentiality/integrity are omitted for national security reasons.
It looks like it will be on prem, but then i dont even understand why they would involve amazon at all? Just use the existing public solutions. As soon as any major part of a system that is connected to the internet has proprietary code in it, you cant really trust it to protect secret information anymore.
It’s won’t be on-prem, but it will be dedicated data centres, built and run by Amazon, so almost the same as. Why? Because AWS runs better data centres than the gov ever could.
Gov is outsourcing the physical infrastructure risk, just like any other ocmpany that puts their stuff in the cloud.
Bahahahahaha ahhh fark that’s farkin hilarious the Australian government are gonna do what? I can tell you from experience it’s gonna be completely farked like the nbn along with anything technological they have a part in
They hand a shitload of money to Amazon, who then set up one of their AWS data centers complete with software and all, but only allow the government access. 8 don’t know what they’re gonna do with the data center, but the data center construction will probably be absolutely fine.
Cheers for the laugh mate. It’s funny coz it’s true.
🤖 I’m a bot that provides automatic summaries for articles:
Click here to see the summary
The so-called TS Cloud will apparently be “purpose-built for Australia’s Defence and National Intelligence Community agencies to securely host our country’s most sensitive information.”
The cloud is touted as giving Australia the chance to “improve our ability to securely share and analyze our nation’s most classified data at speed and at scale, and provides opportunities to harness leading technologies including artificial intelligence and machine learning.”
We understand that sum will cover the cost of building three dedicated datacenters, and establishing a local subsidiary of Amazon to run them and the cloud.
AWS declined to answer questions about arrangements in place to make this a sovereign cloud and referred us to the deputy PM, Richard Marles, who also serves as defence minister.
We asked his office for info on where the cloud will be housed, who will own the infrastructure, payment arrangements, and whether the job was put to open tender.
This deal won’t change that stance: The Register is aware of government agencies building on-prem private clouds – sometimes on open source platforms – so they can scour code to soothe their security worries.
Saved 60% of original text.
