(U) Annex_D_Enterprise_Services_v5.2.pdf
PDF 835 KB Posted
- Solicitation number
- HM047625R0016_Bidder_Library
About this file
This is an appendix providing guidance on Cloud Enterprise Services for the National Geospatial-Intelligence Agency (NGA) cloud environment, Version 5.2 dated May 31, 2018.
The document outlines services and tools available to help secure, monitor, and enhance cloud operations across NGA's cloud domains. Enterprise Services are provided by IT/IS, the Agency for Innovative Technology (AIT), and Amazon Web Services (AWS) via Commercial Cloud Services (C2S). The complete service catalog is maintained in the Enterprise Services Catalog within ATLAS and includes: Base Services (Cloud Access Portal, Amazon Machine Images, configuration management, license and patch management, VPC management); Data Services (OpenDataStore, data transfer services); GEOAxIS Services (authentication and entitlement management); Enterprise Management Services (asset management, monitoring, auditing, visualization); AWS services (data transfer, computation, storage, performance management); Platform Services (Chargeback Financial Model, PCF, NDAAS); API Management Services; DEVOPS Services (Continuous Integration/Continuous Development, Redmine, Gitlab, Jenkins); Security Protection Services; Transport Services (firewalls, logs, virus protection); IC GovCloud Services provided by NSA; and Additional Services for supplemental capabilities.
The guidance requires that all C2S services must be funded with "Certified" funding for the entire performance period when operating in the cloud environment. Activities must complete Air Force Form 9 (AF9) that passes PRISM/GEO-F validation and receive approval from the NGA Cloud Program Management Office. Enterprise services are ordered through the Cloud Adoption Template (CAT) or AWS Management Console, with detailed procedures and workflow documentation available on the NGA Cloud Information Portal.
View the file
Other files
Show 40 more
50 files listed here. See the rest on GovTribe.
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
UNCLASSIFIED
ANNEX D:
CLOUD ENTERPRISE
SERVICES GUIDANCE
Version 5.2
31 May 2018
Annex D: Cloud Enterprise Services Guidance i
TABLE OF CONTENTS
Section Description Page
Revision Summary .............................................................................................................................................................. ii
1.0 Introduction
2.0 Guidance
ii
REVISION SUMMARY
Version Revision Date Revision Summary
1.0 2/26/2016 Initial Release
4.1 8/5/2016 Updated classification/portion marking to support push to SBU
5.0 9/30/2016 Changed title to clarify role with Enterprise Services Catalog
5.2 5/31/2018 Changed Enterprise Services Catalog information
Annex D: Cloud Enterprise Services
1.0 INTRODUCTION
NGA is making available a selection of services and tools to help secure, monitor and enhance activities’ cloud operations. Examples of these services include: host based security, hardened Amazon Machine Images (AMI), software configuration management, and audit and logging. These Enterprise Services are provided by IT/IS, AIT and Amazon Web Services (AWS) via Commercial Cloud Services (C2S) across the cloud domains. The NGA cloud environment offers potential efficiencies through consolidation of these services.
A complete list of current NGA Cloud Enterprise Services can be found in the Enterprise Services Catalog within the ATLAS. C2S provided service descriptions are available through AWS and ordered through the AWS Management Console. Additionally, the roadmap for future C2S services that can be used by activities for planning purposes is available on the C2S Services and Feature Roadmap. Note that not all AWS products currently available in the commercial space on the unclassified domain are available on C2S. Activities should establish service commonality across all domains, to maintain uniformity of services and customer experience.
Detailed procedures specifically for implementation of services within the NGA enclave of C2S or a vendor specific best practice is available on the Cloud Information Portal. This portal page will be updated as new services are released and procedures are revised.
The Enterprise Services Catalog contains sections with notations for mandatory services and availability across all three domains; which are:
Base Services identifies the Infrastructure Service Provider (ISP) services available to users as they deploy their cloud environments. Mandatory services include: Cloud Access Portal (CAP), AMIs, configuration management (i.e., Chef, Puppet), license, IP and patch management, and VPC management services.
Data Services provided to store and manage enterprise data for ingest, conditioning, access and lifecycle management, including OpenDataStore (ODS) and data transfer services (e.g., Snowball).
GEOAxIS Services provided by ASPs/ISPs for authentication services to NGA throughout all domains, including CAP, Entitlement Management Support, and Secure Token Services
(STS).
Enterprise Management Services provides end-to-end service delivery and performance of mission capabilities, including asset management, monitoring, auditing, and visualization tools.
AWS provided by the Cloud Solution Provider (CSP) for data transfer, computation, storage, performance management, and authentication services throughout the cloud environment.
Platform Services provide a platform and suite of tools for application employment, including a Chargeback Financial Model (CFM), PCF and NDAAS.
http://ndegsnarwvapp02.titanium.rttitanium.nima.ic.gov/ibmcognos/cgi-bin/cognosisapi.dll?b_action=cognosViewer&ui.action=run&ui.object=%2fcontent%2ffolder%5b%40name%3d%27NEAR%27%5d%2ffolder%5b%40name%3d%27Domains%27%5d%2ffolder%5b%40name%3d%27ESC%27%5d%2freport%5b%40name%3d%27ESC%20Cloud%20Services%27%5d&ui.name=ESC%20Cloud%20Services&run.outputFormat=PDF&run.prompt=true http://ndegsnarwvapp02.titanium.rttitanium.nima.ic.gov/ibmcognos/cgi-bin/cognosisapi.dll?b_action=cognosViewer&ui.action=run&ui.object=%2fcontent%2ffolder%5b%40name%3d%27NEAR%27%5d%2ffolder%5b%40name%3d%27Domains%27%5d%2ffolder%5b%40name%3d%27ESC%27%5d%2freport%5b%40name%3d%27ESC%20Cloud%20Services%27%5d&ui.name=ESC%20Cloud%20Services&run.outputFormat=PDF&run.prompt=true http://ndegsnarwvapp01.titanium.rttitanium.nima.ic.gov:8082/ee/request/folder?id=59305 http://www.c2shome.ic.gov/ https://intelshare.intelink.ic.gov/sites/icite/iccloud/c2s/SitePages/Roadmap.aspx https://intelshare.intelink.ic.gov/sites/icite/iccloud/c2s/SitePages/Roadmap.aspx https://intelshare.intelink.ic.gov/sites/nga-cloud/SitePages/Home.aspx?AjaxDelta=1&isStartPlt1=1460117327449 http://ndegsnarwvapp02.titanium.rttitanium.nima.ic.gov/ibmcognos/cgi-bin/cognosisapi.dll?b_action=cognosViewer&ui.action=run&ui.object=%2fcontent%2ffolder%5b%40name%3d%27NEAR%27%5d%2ffolder%5b%40name%3d%27Domains%27%5d%2ffolder%5b%40name%3d%27ESC%27%5d%2freport%5b%40name%3d%27ESC%20Cloud%20Services%27%5d&ui.name=ESC%20Cloud%20Services&run.outputFormat=PDF&run.prompt=true
API Management Services provide services for the management of Application Programming Interfaces (APIs).
DEVOPS Services provide lifecycle development and test services for Continuous Integration (CI) and Continuous Development (CD) operations, including the Redmine, Gitlab and Jenkins services.
Security Protection Services provide a suite of tools to ensure end-to-end service delivery and mission support, including security monitoring and alerting.
Transport Services provide a suite of tools to ensure end-to-end service delivery and mission support, including firewalls, logs, and computer virus protection.
IC GovCloud Services are provided by the government CSP (i.e., NSA) for data ingest, content query and metadata services, analytic computation, storage, platform services, and authentication services throughout the cloud environment.
Additional Services are provided by CSPs and ASPs as supplemental capabilities or services considered for future implementation into the cloud environment.
AWS UC Services are services provided by Amazon for the commercial cloud environment.
2.0 GUIDANCE
Guidance: The C2S contract shall require “Certified” funding for all C2S services for the entire period of performance when operating within the cloud environment.
Each activity is required to complete an Air Force Form 9 (AF9). The AF9 must pass PRISM/GEO-F validation and be routed in PRISM for review/approval by the NGA Cloud PMO. Instructions and an example of a completed AF9 can be found on the NGA Cloud Information Portal within Phase One of the process.
Guidance: Activities shall order enterprise services throughout the C2S Activity Process using the Cloud Adoption Template (CAT) or the AWS Management Console inside the cloud environment.
The NGA’s phased cloud adoption process, workflow, documentation (i.e. CAT), and procedural guidance for deploying to the cloud environment can be found on the NGA Cloud Information Portal.
https://intelshare.intelink.ic.gov/sites/nga-cloud/SitePages/Home.aspx?AjaxDelta=1&isStartPlt1=1460117327449 https://intelshare.intelink.ic.gov/sites/nga-cloud/SiteAssets/CAT%20Form/CAT%20Form%2020170731.docx https://intelshare.intelink.ic.gov/sites/nga-cloud/SitePages/Home.aspx?AjaxDelta=1&isStartPlt1=1460117327449 https://intelshare.intelink.ic.gov/sites/nga-cloud/SitePages/Home.aspx?AjaxDelta=1&isStartPlt1=1460117327449
File details come from the government source that posted it. Updated .