Articles

News about Cloud

<hr /> <a target="_blank" href="https://www.fedramp.gov/">FedRAMP</a> is one of those squashed-together government acronyms that most laypeople will never be privy to. It stands for the Federal Risk and Authorization Management Program, which empowers agencies to use modern cloud technologies to securely handle federal information – which, as you can imagine, is some of the most sensitive data in the world. FedRAMP has been somewhat of an enigma for CMS and DXP software solutions and how they’re hosted. Don’t get me wrong, there are a plethora of compliance requirements platforms already wrestle with satisfying (think about the rise of <a target="_blank" href="https://oag.ca.gov/privacy/ccpa">CCPA</a> or <a target="_blank" href="https://www.hhs.gov/hipaa/index.html">HIPAA</a>). However, as more federal agencies are requiring FedRAMP for specific applications, platforms are having to weigh the challenges of attaining this benchmark against the potential rewards of serving federal customers. Speaking of rewards, it’s worth noting that the U.S. federal government is the <a target="_blank" href="https://www.epa.gov/greenerproducts/selling-greener-products-and-services-federal-government">world's largest single purchaser of goods and services</a>, clocking in at almost $700 billion. IT represents a big piece of that pie, <a target="_blank" href="https://www.statista.com/statistics/605501/united-states-federal-it-budget/">almost $80 billion</a> (not including the DoD). And it’s growing rapidly, particularly as more agencies modernize and digitize their legacy systems with cloud-based technologies. Earning FedRAMP status is an exceedingly arduous process, requiring meticulous documentation, third-party audits and assessments, and continuous monitoring once achieved. From an investment perspective, the cost of compliance can range from tens of thousands to millions of dollars – and take up to a year or more to complete. Ugh. Not for the faint of heart.So what’s driving this drift to FedRAMP? It’s simple: federal agencies want the same best-of-breed solutions and access to cutting-edge services. Sure, the goals might differ from commercial entities; the public sector’s motive is to support critical functions for constituents like emergency response in the aftermath of a hurricane. But the opportunity is huge, particularly as federal agencies build applications that leverage open source technologies like <a target="_blank" href="https://www.docker.com/">Docker</a>, <a target="_blank" href="https://kubernetes.io/">Kubernetes</a>, and other scalable frameworks.Here's a quick primer on FedRAMP, and you can find a library of resources from the agency on its <a target="_blank" href="https://www.youtube.com/@FedRAMP">YouTube channel</a>:<figure class="media"><div data-oembed-url="https://www.youtube.com/watch?v=I_3YFkmGTt4"><div style="position:relative;padding-bottom:100%;height:0;padding-bottom:56.2493%"><iframe src="https://www.youtube.com/embed/I_3YFkmGTt4" style="position:absolute;width:100%;height:100%;top:0;left:0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe></div></div></figure>FedRAMP’s requirements might seem draconian to some, but there’s a lot at stake. Just ask the Department of Defense about its security clearance protocols. It’s a perilous world with lots of bad actors, so cloud solutions trusted by the federal government have to be put through the wringer – things like 3PAO readiness and <a target="_blank" href="https://csrc.nist.gov/pubs/fips/199/final">FIPS 199 assessments</a> that govern how data is stored and transmitted. It’s not very glamorous stuff, but nonetheless crucial to safeguarding government data and maintaining operations.With such high expectations – and potentially high costs – it’s no wonder that enterprise vendors are typically the platforms to achieve FedRAMP status. There are certainly a few methods for fast-tracking the journey, but larger DXPs are in a class that enables them to attain these standards. Consequently, it creates a smaller pool of available options, making it a key differentiator for winning long-term contracts that can be, in a word, lucrative. To meet these opportunities head-on, <a target="_blank" href="http://www.acquia.com/">Acquia</a> just announced that its <a target="_blank" href="https://www.acquia.com/blog/introducing-acquia-cloud-next-kubernetes-native-drupal-hosting-platform">Acquia Cloud Next</a> has achieved FedRAMP Authorized status. With this benchmark, the open digital experience platform has reinforced its commitment to serve the public sector as the only commercial <a target="_blank" href="https://cmscritic.com/products/drupal">Drupal</a> hosting company to meet U.S. federal government security standards.“Acquia is fully committed to delivering the industry’s strongest assurances around Drupal security, scalability, and performance for our federal customers,” said <a target="_blank" href="https://www.linkedin.com/in/robertformer/">Robert Former</a>, Chief Information Security Officer at Acquia. “At the same time, upholding the industry’s most stringent information security and reliability standards benefits all organizations who operate on Acquia technologies, whether in the public or private sector, that require the highest levels of security.”<h3 id="enterprise-grade,-kubernetes-native-drupal-hosting">Enterprise-grade, Kubernetes-native Drupal hosting</h3>Acquia Cloud Next is an enhanced, Kubernetes-powered version of <a target="_blank" href="https://www.acquia.com/products/acquia-cloud-platform">Acquia Cloud Platform</a>, a market-leading Drupal hosting platform. It synthesizes Acquia’s innovation with key technologies powered by <a target="_blank" href="https://cmscritic.com/products/aws">Amazon Web Services (AWS)</a>. Built for speed, security, and resilience, Acquia Cloud Next sports a self-healing infrastructure that continuously and automatically monitors application uptime and performance. No matter the size or breadth of an enterprise's demands, Acquia Cloud Next provides a number of key benefits, including fast dynamic auto-scaling to handle traffic spikes. It also detects failures, reroutes traffic, and dynamically scales experiences to deliver optimal application performance – with no need for human intervention.With Kubernetes in the mix, Acquia Cloud Next leverages container orchestration that enables maximum scalability, security, and resilience to mitigate unexpected risks. By partnering with AWS security experts, the Cloud Next infrastructure is automatically patched and routinely scanned to maintain the highest levels of protection for applications – a key requirement for FedRAMP. <h3 id="now-available-in-the-fedramp-marketplace">Now available in the FedRAMP Marketplace</h3>One of the benefits of achieving FedRAMP status is being listed on the exclusive <a target="_blank" href="https://marketplace.fedramp.gov/#/products?sort=productName">FedRAMP Marketplace</a>, a browsable repository of approved cloud services available for federal government use. FedRAMP Marketplace supports the operational resilience needs of dozens of federal agencies, giving buyers a portal to confidence when evaluating software solutions. You can now find Acquia Cloud Next in the Marketplace, joining a fraternity of authorized solutions. Since its founding in 2011, an adage has emerged within the FedRAMP lexicon: “Do once, use many times.” In the spirit of this axiom, the FedRAMP framework strives to provide a standardized approach to security assessment – meaning that once an organization has been authorized, other federal agencies can use the same assessment results for rapid and cost-effective procurement of information systems and services.Acquia has long invested in the concerns of modern security practices, working diligently to stay ahead of threats and give content ops teams greater confidence in their technology. In addition to FedRAMP, Acquia’s information security program also helps customers operate in a cloud environment that complies with a wide array of industry standards and regulations. This includes ISO 27001, HIPAA, SSAE18/SOC 1/ISAE-3402, SOC 2, and PCI-DSS.<h3 id="why-it-matters">Why it matters</h3>Government agencies are notorious for implementing regulatory and compliance hurdles, often in reaction to a crisis (vis-à-vis <a target="_blank" href="https://en.wikipedia.org/wiki/Sarbanes%E2%80%93Oxley_Act">Sarbanes Oxley</a>). These hurdles create headaches for vendors but also opportunities. As security and data privacy continue to be weak links in the chain for technologies of every kind – including <a target="_blank" href="https://cmscritic.com/what-is-a-content-management-system-cms">content management</a> and DXP platforms – reinforcing standards and best practices is critical.While <a target="_blank" href="https://cmscritic.com/products/wordpress">WordPress</a> certainly has a footprint within the U.S. public sector, Drupal is <a target="_blank" href="https://www.webfirst.com/blogs/why-drupal-10-optimal-platform-federal-websites">more widely used</a> among federal agencies. There are several reasons for this, like an abundance of highly performant modules or security designed to protect personally identifiable information. Above all, it’s open source, meaning the licensing is free and flexible. These have all made it an attractive go-to for websites and applications. Of course, it needs to be hosted somewhere reliable, and using highly scalable solutions is a basic tenet in a world where traffic can spike on a dime during a crisis. This is where Acquia has excelled, partnering with a trusted cloud provider like AWS – which has invested heavily in federal compliance around its own services – to provide an innovative hosting environment to meet this mission-critical benchmark.And by embracing a container-based framework powered by Kubernetes, Acquia is meeting the needs of agencies <a target="_blank" href="https://www.cncf.io/blog/2020/05/07/with-kubernetes-the-u-s-department-of-defense-is-enabling-devsecops-on-f-16s-and-battleships/">like the U.S. Navy</a>, which has been hyper-focused on leveraging cloud solutions with an open source stack built on Kubernetes, Docker, and other highly scalable services. In fact, they're using this mix to power other exotic initiatives like DevSecOps on F-16s and battleships. I'd say that's as mission-critical as you can get.   Government data can be just as vulnerable as commercial, and solutions with a FedRAMP status bring peace of mind to the evaluation and purchasing process for agencies. In a competitive field, offering FedRAMP solutions has also become a key differentiator, one where a DXP like Acquia can establish a stronger case for hosting Drupal workloads and accessing its services. At the end of the day, it also reinforces the core federal policy foundation of achieving efficiency, transparency, and innovation through reusable and open source software.To learn more about Acquia’s solutions for government agencies, <a target="_blank" href="https://www.acquia.com/solution-by-industry/government.">click here</a>. <hr /> <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-2025"><a href=" https://www.boye-co.com/conferences/cmskickoff25">CMS Kickoff 2025</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, <a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">so secure your tickets today.</a>

Acquia Cloud Next Achieves FedRAMP Authorized Status

matt-garrepy

As generative AI continues to march its way across the digital experience stack, platforms are looking to public cloud providers like <a target="_blank" href="https://cmscritic.com/aws-joins-mach-alliance-as-enabler-member-reflects-growth-of-cloud-native-solutions">AWS</a>, <a target="_blank" href="https://cmscritic.com/contentstack-offers-microsoft-azure-becomes-only-multi-cloud-saas-cms-qa-with-cto-nishant-patel">Azure</a>, and GCP to help scale their innovation and get AI-powered products to market faster. Now, <a target="_blank" href="https://cmscritic.com/optimizely-brings-real-magic-to-opticon-2022-in-san-diego-kicks-off-tour-in-london-and-stockholm">Optimizely </a>– a leading digital experience platform (DXP) provider – has announced a new integration with <a target="_blank" href="https://cmscritic.com/optimizely-partners-with-google-cloud-to-take-experimentation-to-the-next-level">Google Cloud’s</a> large language models (LLMs) via <a target="_blank" href="https://cloud.google.com/vertex-ai?utm_source=google&amp;utm_medium=cpc&amp;utm_campaign=na-US-all-en-dr-bkws-all-all-trial-e-dr-1605212&amp;utm_content=text-ad-none-any-DEV_c-CRE_665735422037-ADGP_Hybrid%20%7C%20BKWS%20-%20MIX%20%7C%20Txt_AI%20and%20ML%20General-KWID_43700077225650913-kwd-553582750299&amp;utm_term=KW_vertex%20ai-ST_vertex%20ai&amp;gclid=CjwKCAjw6eWnBhAKEiwADpnw9u2BMXURvDZHFlNL_A4gB-a8YkjypIddWQ1nMdG43MWUdp4TY1E6cxoCg-gQAvD_BwE&amp;gclsrc=aw.ds">Vertex AI</a>, with the goal of building and launching new generative AI features. With this integration, Optimizely’s customers and product engineering teams will gain direct access to Google Cloud’s cutting-edge foundational models, which will dramatically increase the pace of innovation in a rapidly emergent field.<h3>Sowing the AI seeds in Optimizely's model garden </h3>According to the company's press release, Google’s PaLM 2 models from Vertex AI will be used in Optimizely’s internal model garden, supporting rapid prototyping and development of generative AI features. This pairing will span the entire portfolio of Optimizely’s products, including content, commerce, and experimentation.Coupled with Feature Experimentation, Optimizely engineers can strike the perfect balance between cost, quality, and response time across Google Cloud’s growing family of models, which are rooted in a 20-year legacy and commitment to responsibility, security and compliance. “As AI is adopted at an unprecedented clip, Google’s LLMs and Vertex AI ensure that we can innovate and implement the functionalities that our customers need to scale and deliver the best digital experiences,” said <a target="_blank" href="https://www.linkedin.com/in/anielsud/">Aniel Sud</a>, CTO at Optimizely. “With these models, we can quickly and consistently add new AI features that will greatly enhance our product suite. We are excited to highlight some of these new features at Opticon in October and we look forward to continually strengthening our partnership with Google.” Optimizely customers can expect upcoming features powered by Google Vertex AI to be far more fine-tuned for the intended use cases. <h3>Focusing on high-value AI use cases</h3>On the AI front, Optimizely is exploring high-value use cases to bring generative AI to marketing and digital teams, empowering them to transform digital experiences for customers. These use cases include: <ul><li>A knowledge bot trained specifically on Optimizely’s technical documentation, so customers can utilize a chat interface to get instant answers to questions during implementation and use </li><li>A variation generator for brainstorming, allowing Optimizely customers to utilize AI to generate new ideas when designing a test </li></ul>This innovative partnership builds upon the success of leveraging Google Cloud for Optimizely Web Experimentation and Feature Experimentation, as well as the availability of both products on <a target="_blank" href="https://console.cloud.google.com/marketplace/product/optimizely-public/optimizely-gcp-marketplace">Google Cloud Marketplace</a>.  “Users of Optimizely’s digital experience platform will benefit from new capabilities, powered by Google Cloud’s Vertex AI,” said <a target="_blank" href="https://www.linkedin.com/in/rodrigoprocha/">Rodrigo Rocha</a>, Head of Global AI &amp; ISV App Partnerships at Google Cloud. “By building with Vertex AI and expanding access to Google Cloud’s powerful models, Optimizely will enable its customers to build new online experiences and products that add real value with generative AI.” <h3>Partnering to power experimentation with AI</h3>Optimizely and Google have already cemented a strong partnership. In February of 2022, the companies jointly <a target="_blank" href="https://cmscritic.com/optimizely-partners-with-google-cloud-to-take-experimentation-to-the-next-level">announced a strategic initiative</a> to move Optimizely's experimentation to the Google Cloud, leveraging a secure and scalable infrastructure for investments in AI and analytics. In 2022, Optimizely also achieved over $1B in incremental revenue for its customers. This partnership with Google Cloud and innovation with Vertex AI will continue to allow businesses to make data-driven decisions and scale their digital experiences.

Optimizely Partners with Google Cloud to Expand Generative AI Capabilities 

cms-critic-staff

Explore a wide range of informative articles on Cloud, insights, and industry updates. Stay informed and ahead of the curve with our diverse collection of news and posts covering the latest trends and developments in the industry. 