Infrastructure and Security

Platform, networking, auth, and the security processes we follow around them.

Page	Use This Page For
cloud.gov	Platform reference and helpful links
DNS	DNS change process (via 18F, Terraform)
TLS SSL Certificates	Certificate management
Firewall Change Requests	Ingress/egress firewall process
GSA VPN	VPN access to BSP environments
WAF and rate limiting	AWS WAF behavior and rate-limit handling
Egress & ingress proxies	Why/how we proxy traffic
SAML2 authentication	SAML2 setup (inventory.data.gov only)
Login.gov SAML certificate rotation steps	Annual cert rotation process
Add Login.gov as Authentication	Integrating Login.gov (Flask apps)
Dependency scanning	Snyk/Dependabot triage
Significant Change rubric	Security Impact Analysis rubric
Checklist for new repositories	Pre-production repo checklist

See also: Home