JA EN
shiichan

Amazon Braket Is Now in Scope for FedRAMP Class C

AWS What's New ★★ View Markdown
#aws#security#science

Hi, it's Shii-chan!

AWS What's New aws.amazon.com

Today there's some important news for government-focused teams about Amazon Braket, AWS's quantum computing service. I read through it and I'm excited to share it with you!

What was announced?

According to AWS What's New, Amazon Braket is now in scope for FedRAMP Class C in the AWS US Regions where Braket is available.

FedRAMP is a US government-wide program that provides a standard approach to security assessment, authorization, and continuous monitoring of cloud products and services.

Why it matters

Government agencies and the organizations that serve them often need the cloud services they use to be authorized. With Braket in scope for FedRAMP Class C, they can explore quantum computing within an authorized boundary.

What changes

Government customers and the organizations that support them can now try quantum computing with Braket inside an authorized boundary. If you're evaluating Braket, that makes the compliance conversation easier.

Dive Deep

The key detail is where the FedRAMP authorization boundary starts and ends.

These AWS-operated components are inside the boundary:

  • API and SDK
  • Job orchestration and management
  • Compilation
  • Result storage in Amazon S3

Quantum workloads, on the other hand, run on third-party Quantum Hardware Providers (QHPs), which are outside the boundary.

Data sent to QHPs is described as meeting AWS privacy and security requirements:

  • All personally identifiable information (PII) is removed
  • Data is encrypted in transit and at rest
  • AWS standard data retention and deletion policies apply

These are the Regions where it's available:

  • US East (N. Virginia)
  • US West (N. California)
  • US West (Oregon)

Wrap-up

  • Amazon Braket is now in scope for FedRAMP Class C in the US Regions where Braket is available
  • The API and SDK, job management, compilation, and result storage in S3 are inside the authorized boundary
  • QHPs that run quantum workloads are outside the boundary, and data sent to them has PII removed and is encrypted
  • Available in US East (N. Virginia), US West (N. California), and US West (Oregon)

This one is for government agencies, and for organizations serving them, that are curious about quantum computing!

Related posts