FedRamp Installation

Overview

A FedRAMP Kloudfuse installation is deployed on AWS using the kfuse-fed Helm chart, designed for FIPS-compliant environments. Instead of bundled in-cluster services, it uses AWS managed services to meet FedRAMP High and Moderate baseline requirements:

  • Amazon RDS — managed relational database

  • Amazon ElastiCache — managed caching layer

  • Amazon MSK — managed Kafka streaming

All persistent data is encrypted at rest using AWS EBS volumes with customer-managed KMS keys (CMK), satisfying the FedRAMP SC-28 (Protection of Information at Rest) control family. EKS is used as the Kubernetes runtime.

Topics