{"id":20704,"date":"2021-08-30T06:00:05","date_gmt":"2021-08-30T13:00:05","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/azuregov\/?p=20704"},"modified":"2021-08-30T07:44:43","modified_gmt":"2021-08-30T14:44:43","slug":"announcing-private-preview-of-authorized-dod-cloud-infrastructure-as-code-for-azure","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/azuregov\/announcing-private-preview-of-authorized-dod-cloud-infrastructure-as-code-for-azure\/","title":{"rendered":"Announcing private preview of authorized DoD Cloud Infrastructure as Code for Azure"},"content":{"rendered":"<p>In our continued commitment to help Department of Defense (DoD) customers keep pace with mission demands, we\u2019re announcing the private preview of DoD Cloud Infrastructure as Code (IaC) for Azure \u2013 a set of preauthorized baselines that build standard environments in Azure Government to accelerate DoD adoption of cloud services.<\/p>\n<p>With a 3-year authority to operate (ATO) issued by the Defense Information Systems Agency (DISA) Risk Management Executive (RME), DoD IaC for Azure was developed under a Collaborative Research and Development Agreement (CRADA) where Microsoft assisted the <a href=\"https:\/\/www.ccpo.mil\/Programs\/DOD-Cloud-IaC\/\">DISA Cloud Computing Program Office (CCPO)<\/a>.<\/p>\n<p>DoD Cloud IaC for Azure enables developer teams to focus more on the mission by leveraging automation to deliver preconfigured, preauthorized Platform as a Service (PaaS)-focused environments that come with 135 common control inheritance in eMASS (Enterprise Mission Assurance Support Service) to expedite application assessment and authorization with your authorization official.<\/p>\n<p>For DoD customers moving to cloud, there\u2019s significant complexity in the upfront design and engineering to secure cloud services, including cloud virtual networking environment, auditing, least privilege access, and authentication.<\/p>\n<p>DoD Cloud IaC for Azure helps to overcome these challenges and is expected to decrease deployment timelines from 30 weeks down to potentially as little as 2 hours, while providing real-time continuous monitoring and compliance and supporting architecture standardization across all unclassified data classifications (up to DoD Impact Level 5).<\/p>\n<p>As a pilot customer of the DISA CCPO for DoD Cloud IaC for Azure, the US Army Engineer Research and Development Center (ERDC), Construction Engineering Research Laboratory (CERL) team was able to accelerate their assessment and authorization.<\/p>\n<p>\u201cRather than worrying about networks, identity, and operating systems, the Department of Defense Cloud Infrastructure as Code for Azure allows the Sustainment Management System team to focus on the application and delivering our capabilities into our partners\u2019 hands,\u201d said Eric Mixon, Computer Scientist, ERDC, CERL, US Army Corps of Engineers.<\/p>\n<p>Customers also gain greater visibility and ease of management with built-in dashboard that provide real-time continuous monitoring. And, for ease of use, secure configuration, and to help avoid environment drift, DoD Cloud IaC for Azure currently includes 400+ Azure policies pre-mapped to NIST 800-53 controls with new policies added regularly.<\/p>\n<p>Additionally, DoD Cloud IaC for Azure streamlines enterprise identity and authentication; integrating with DISA\u2019s Global Directory for both privileged users and application-level CAC users. Trusted certificate authorities are also inherited, and Office 365 works without separate setup.<\/p>\n<p><strong>How does it work?<\/strong><\/p>\n<p><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/devops\/learn\/what-is-infrastructure-as-code\">Infrastructure as Code<\/a> is the management of infrastructure (networks, virtual machines, load balancers, and connection topology) in a descriptive model, using the same versioning as DevOps teams use for source code. A key DevOps practice used in conjunction with continuous delivery, IaC evolved to help solve the problem of environment drift and brings automation to rapidly build the same cloud environments verses building manually.<\/p>\n<p>DoD Cloud IaC for Azure deploys the following to help teams accelerate accreditation and do more for the mission:<\/p>\n<ul>\n<li>Development and test environment: Supports the development of software code, unit and integration testing, and pilots using mission test data. Available for use by those without a specific mission customer authorization.<\/li>\n<li>Production environment: For workloads with live mission data and customers. Requires an Interim Authority to Test (IATT) or Authority to Operation (ATO) from your local authorization official, which is accelerated through inheritance with the Azure shared responsibility model (SRM).<\/li>\n<li>Security and other common services: Include Virtual Datacenter Security Services (VDSS) and Virtual Datacenter Management Services (VDMS) using Azure-native security services to meet the Cloud Computing Security Requirements Guide (SRG). Policies to improve account security and real-time compliance dashboards with automated response mechanisms are also included.<\/li>\n<\/ul>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/azuregov\/wp-content\/uploads\/sites\/43\/2021\/08\/DoD-Cloud-IaC-for-Azure.png\"><img decoding=\"async\" class=\" wp-image-20705 aligncenter\" src=\"https:\/\/devblogs.microsoft.com\/azuregov\/wp-content\/uploads\/sites\/43\/2021\/08\/DoD-Cloud-IaC-for-Azure-294x300.png\" alt=\"Image DoD Cloud IaC for Azure\" width=\"574\" height=\"586\" srcset=\"https:\/\/devblogs.microsoft.com\/azuregov\/wp-content\/uploads\/sites\/43\/2021\/08\/DoD-Cloud-IaC-for-Azure-294x300.png 294w, https:\/\/devblogs.microsoft.com\/azuregov\/wp-content\/uploads\/sites\/43\/2021\/08\/DoD-Cloud-IaC-for-Azure-768x784.png 768w, https:\/\/devblogs.microsoft.com\/azuregov\/wp-content\/uploads\/sites\/43\/2021\/08\/DoD-Cloud-IaC-for-Azure-24x24.png 24w, https:\/\/devblogs.microsoft.com\/azuregov\/wp-content\/uploads\/sites\/43\/2021\/08\/DoD-Cloud-IaC-for-Azure-48x48.png 48w, https:\/\/devblogs.microsoft.com\/azuregov\/wp-content\/uploads\/sites\/43\/2021\/08\/DoD-Cloud-IaC-for-Azure.png 791w\" sizes=\"(max-width: 574px) 100vw, 574px\" \/><\/a><\/p>\n<p style=\"text-align: center;\"><em><strong>DoD Cloud Infrastructure as Code for Azure<\/strong><\/em><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Available services and support<\/strong><\/p>\n<p>New services for DoD Cloud IaC for Azure will be released regularly. Here are some of the PaaS services available. For the complete list, visit <a href=\"http:\/\/www.aka.ms\/AzureDoDCloudIaCBaselines\">aka.ms\/AzureDoDCloudIaCBaselines<\/a>.<\/p>\n<table style=\"height: 221px; width: 94.1613%; border-collapse: collapse; border-style: none; background-color: #ffffff; border-color: #ffffff;\">\n<tbody>\n<tr style=\"height: 221px;\">\n<td style=\"width: 46.1795%; height: 221px;\">\n<ul>\n<li>Azure App Service<\/li>\n<li>Azure Cosmos DB (NoSQL)<\/li>\n<li>Azure Database<\/li>\n<li>Azure Functions<\/li>\n<li>Azure Kubernetes Service (AKS)<\/li>\n<li>Azure Data Lake<\/li>\n<li>Azure Machine Learning<\/li>\n<li>Azure IoT Hub<\/li>\n<\/ul>\n<\/td>\n<td style=\"width: 105.152%; height: 221px;\">\n<ul>\n<li>Azure Event Hub<\/li>\n<li>Azure Virtual Machines<\/li>\n<li>Azure Defender<\/li>\n<li>Azure Active Directory*<\/li>\n<li>Azure Firewall*<\/li>\n<li>Azure Sentinel*<\/li>\n<li>Azure Security Center*<\/li>\n<li>Azure Monitor*<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong><em style=\"font-size: 10pt;\">*Supporting services<\/em><\/strong><\/p>\n<p>Support resources and DISA CCPO are also available to provide guidance for your success.<\/p>\n<p><strong>Next steps<\/strong><\/p>\n<ul>\n<li><span style=\"font-size: 12pt;\">To get started with our private preview, complete this <a href=\"https:\/\/www.ccpo.mil\/Contact-Us\/Product-Questions\/\">DISA CCPO form<\/a>.<\/span><\/li>\n<li><span style=\"font-size: 12pt;\">Visit the <a href=\"https:\/\/www.ccpo.mil\/Programs\/DOD-Cloud-IaC\/\">DISA CCPO website<\/a> to learn more<\/span><\/li>\n<li><span style=\"font-size: 12pt;\"><a href=\"https:\/\/www.youtube.com\/watch?v=YsLBNiMoL-I&amp;list=PLOONVrYRytUi3bw-4BbpA3DpZuII1dOu3&amp;index=2\">Watch a DISA CCPO pilot customer<\/a> share their team\u2019s experience with DoD Cloud IaC for Azure with the <a href=\"http:\/\/www.meetup.com\/DCAzureGov\">Azure Government user community<\/a><\/span><\/li>\n<li><span style=\"font-size: 12pt;\">Download the <a href=\"http:\/\/www.aka.ms\/AzureDoDCloudIaCDatasheet\">DoD Cloud IaC for Azure datasheet<\/a><\/span><\/li>\n<li><span style=\"font-size: 12pt;\">Check out the <a href=\"https:\/\/www.ccpo.mil\/Programs\/DOD-Cloud-IaC\/\">FAQs<\/a><\/span><span style=\"font-size: 12pt;\"> and <a href=\"https:\/\/azuremarketplace.microsoft.com\/en-us\/marketplace\/apps\/microsoftcorporation1610498633236.dod-cloud-iac-overview?tab=Overview\">Azure Marketplace<\/a> for more information<\/span><\/li>\n<li><span style=\"font-size: 12pt;\">Questions? Email <a style=\"background-color: #f7f7f9;\" href=\"mailto:dodcloudiac_support@ccpo.mil?subject=DoD%20Cloud%20IaC%20for%20Azure\">dodcloudiac_support@ccpo.mil\u00a0<\/a><\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>To help Department of Defense (DoD) customers keep pace with mission demands, we\u2019re announcing the private preview of DoD Cloud Infrastructure as Code (IaC) for Azure \u2013 a set of preauthorized baselines that build standard environments in Azure Government to accelerate DoD adoption of cloud services. <\/p>\n","protected":false},"author":1751,"featured_media":20719,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2,1],"tags":[95,240,2379,253,262,3435,448],"class_list":["post-20704","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-announcements","category-azuregov","tag-azure-government","tag-department-of-defense","tag-developer","tag-disa","tag-dod","tag-infrastructure-as-code","tag-paas"],"acf":[],"blog_post_summary":"<p>To help Department of Defense (DoD) customers keep pace with mission demands, we\u2019re announcing the private preview of DoD Cloud Infrastructure as Code (IaC) for Azure \u2013 a set of preauthorized baselines that build standard environments in Azure Government to accelerate DoD adoption of cloud services. <\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/posts\/20704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/users\/1751"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/comments?post=20704"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/posts\/20704\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/media\/20719"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/media?parent=20704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/categories?post=20704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/tags?post=20704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}