[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-656324-105":59,"doc-detail-656324-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","secure-cloud-computing-architecture-on-aws-govcloud-reference-architecture","Secure Cloud Computing Architecture on AWS GovCloud - Reference Architecture","","This technical reference architecture delineates the framework for constructing a Defense Information Systems Agency (DISA) compliant landing zone within AWS GovCloud regions. Specifically designed to support U.S. Department of Defense workloads, the architecture addresses the rigorous security requirements for storing Impact Level 4 and 5 data. It details a multi-account strategy that integrates critical components such as the Virtual Data Center Security Stack for boundary protection, the Virtual Data Center Management Stack for essential shared services like HBSS and ACAS, and specialized Mission App accounts for core deployment. Furthermore, the document explains how AWS Transit Gateway, Virtual Private Gateways, and centralized logging accounts collectively ensure high availability, scalability, and robust compliance within the defense information network ecosystem.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/secure-cloud-computing-architecture-on-aws-govcloud-reference-architecture/656324/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/secure-cloud-computing-architecture-on-aws-govcloud-reference-architecture/656324.png","ImageObject",300,407,{"name":92,"@type":93},"Taylor Morgan","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-02","2026-10-25",true,{"@type":102,"interactionType":103,"userInteractionCount":24},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"What is the purpose of the VDSS account in this architecture?","Question",{"text":112,"@type":113},"The Virtual Data Center Security Stack (VDSS) account serves as a protective boundary for mission owner applications, ensuring secure communication flow.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"How are shared services handled in the SCCA framework?",{"text":117,"@type":113},"Shared services such as Host Based Security System (HBSS) and Assured Compliance Assessment Solution (ACAS) are centralized within the Virtual Data Center Management Stack (VDMS) account.",{"name":119,"@type":110,"acceptedAnswer":120},"What AWS service is used to control traffic routing between connected networks?",{"text":121,"@type":113},"AWS Transit Gateway acts as the central hub that manages and controls traffic routing among all connected spoke networks.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},656324,1792967702,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":24,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":8,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":129,"read_time":81},1099523885336,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","Secure Cloud Computing Architecture (SCCA) on AWS GovCloud Build a Defense Information Systems Agency (DISA) Compliant Landing Zone on AWS  \nThis architecture provides the prerequisite framework for securely running U.S. Department of Defense workloads and storing Impact Level 4 and 5 data on AWS GovCloud regions, according to DISA standards.  \nReviewed for technical accuracy June 20, 2022 AWS Reference Architecture  \n© 2022, Amazon Web Services, Inc. or its affiliates. All rights reserved.  \n1  \n 5   \n 3   \n 7   \n1  \n2  \n3  \n4  \n5  \n6  \n7  \nVirtual Data Center Security Stack (VDSS) Account acts as boundary used for protection of mission owner applications.  \nAWS Transit Gateway acts as a hub that controlshow traffic is routed among all the connected networks which act like spokes.  \nVirtual Data Center Management Stack (VDMS) Account includes capabilities such as Host Based Security System (HBSS), Assured Compliance Assessment Solution (ACAS), authentication systems, and other common services.  \nMission App Account is where core workloads are deployed. All communications to and from the Mission App VPC transit the VDSS and consume shared services from the VDMS.  \nConnectivity to the Department of Defense Information Network (or other agency networks) is achieved through a Virtual Private Gateway (VGW) .  \nTypical multi-tier mission workloads use Elastic Load Balancing, AWS Auto Scaling Groups and multiple Availability Zones for high availability and scalability.  \nThe Logging Account represents the immutable location where logs are aggregated and stored.","cbCairGGkTAb5DAI","https://ap.wps.com/l/cbCairGGkTAb5DAI","pdf",559543,"English","# Architecture Overview\n## Core Account Components\n## Security and Management Stacks\n## Network Connectivity and Traffic Routing","[{\"question\":\"What is the purpose of the VDSS account in this architecture?\",\"answer\":\"The Virtual Data Center Security Stack (VDSS) account serves as a protective boundary for mission owner applications, ensuring secure communication flow.\"},{\"question\":\"How are shared services handled in the SCCA framework?\",\"answer\":\"Shared services such as Host Based Security System (HBSS) and Assured Compliance Assessment Solution (ACAS) are centralized within the Virtual Data Center Management Stack (VDMS) account.\"},{\"question\":\"What AWS service is used to control traffic routing between connected networks?\",\"answer\":\"AWS Transit Gateway acts as the central hub that manages and controls traffic routing among all connected spoke networks.\"}]","Secure Cloud Computing Architecture on AWS GovCloud - Reference Architecture | PDF"]