Press Release

Coalfire Assists Amazon Web Services (AWS) US East/West Region in Achieving FedRAMP JAB Authorization

December 7, 2017

AWS East/West Region FedRAMP JAB Authorization Enables CSPs Access to the Full Suite of Services Previously Available Only Through AWS GovCloud (US)


Westminster, CO – December 7, 2017 –Coalfire, a leading provider of trusted, comprehensive cybersecurity assessment and advisory services, announced that is has performed a Federal Risk and Authorization Management Program (FedRAMP) Moderate Assessment of the Amazon Web Services (AWS) US East/West Region, validating that the Region’s systems and security controls meet the requirements for moderate impact systems.

Coalfire’s in-depth technical testing and inspection process culminated in its recommendation that the FedRAMP Joint Authorization Board (JAB) issue a Provisional Authority to Operate (P-ATO) to the AWS US East/West region and 20 of its associated AWS services. The AWS US East/West Region is a multi-tenant public cloud for Federal, State and Local Government customers, as well as commercial customers, designed to meet a wide range of regulatory requirements, to include government compliance and security requirements.

Prior to this announcement, Cloud Services Providers (CSPs) who wanted to leverage AWS services as well as pursue a JAB P-ATO were only able to utilize the AWS GovCloud (US) region. Now CSPs can leverage the services available in the AWS US East/West Region as well as the benefits provided by a FedRAMP JAB P-ATO. In addition to a higher level of validation for the inherent security of the AWS US East/West Region, this ATO also makes it easier for AWS partners and customers to achieve their unique security and compliance needs.

“We are excited to work with Amazon Web Services to help the company achieve this important milestone,” said James Leach, VP, Strategic Channel Partners for Coalfire. “Agencies and CSPs can now begin utilizing AWS services in the AWS US East/West Region within their own system boundaries while maintaining peace of mind that they have been properly validated to meet all of the necessary security requirements.”

This authorization also enables agencies to leverage the resources and expertise of the FedRAMP JAB, which comprises representatives from the General Services Administration (GSA), Department of Homeland Security (DHS), and Defense Information Systems Agency (DISA).

FedRAMP is a U.S. government-wide program that provides a standardized approach to security assessment, authorization and continuous monitoring for cloud products and services.

Coalfire is the leading FedRAMP Third Party Assessment Organization (3PAO) in the industry, providing FedRAMP advisory or assessment services for CSPs that are interested in expanding into government markets.

About Coalfire
Coalfire is the cybersecurity advisor that helps private and public sector organizations avert threats, close gaps and effectively manage risk. By providing independent and tailored advice, assessments, technical testing and cyber engineering services, we help clients develop scalable programs that improve their security posture, achieve their business objectives and fuel their continued success. Coalfire has been a cybersecurity thought leader for more than 16 years, and has offices throughout the United States and Europe.

Press Contact:
Mike Gallo
For Coalfire