Amazon and CIA ink cloud deal

http://fcw.com/articles/2013/03/18/amazon-cia-cloud.aspx

by rmah • 13 years ago

115 69 13 years ago

fcw.com

bitwize• 13 years ago

Well, there goes my trust for Amazon.

Also love how the GAO's IT director is named Dave Powner.

salman89• 13 years ago

Why? Because they gained enough clout to close a government contract? If anything, trust should go up.

rdl4• 13 years ago

I think he's assuming that since the CIA is now a big customer, Amazon will bend the rules and give the CIA access to data from other customers, or at the very least the CIA will now have better experience in how AWS works so they'll be able to attack AWS customers more effectively themselves.

tptacek• 13 years ago

It would be better if CIA just appropriated 3x as much money to build a cloud infrastructure that was 1/5th as good?

rdl4• 13 years ago

That's utterly unrealistic. There is no way there would ever be only a factor of 15 cost/performance difference in IT between a CIA contract and a leading commercial entity in a competitive market. :)

tibbon• 13 years ago

If you think the CIA wasn't able to get access to any information they wanted.... I mean, this doesn't change that. They were able to before, and can now. All major cloud providers work with various levels of government for law enforcement and anti-terrorism stuff.

If anything, this tells me that the CIA didn't actually have enough computing power and/or competency before to do it on their own.

jessaustin• 13 years ago

What did you trust Amazon to do or not to do before, that you no longer trust now?

hkmurakami• 13 years ago

Wow if there was one area where I thought the cloud would be the last to permeate, it was the federal intelligence and defense sectors.

I wonder what this means for Oracle/IBM/other on-site vendors over the next 2-3 decades.

derefr• 13 years ago

Look at it this way: the CIA/NSA are pretty much the only parts of the government who know enough about computer security to properly assess the risks of using something like AWS, and therefore declare it safe for them to use.

Any other department would just say "nope that sounds unsafe and I have no idea what to look into to decide otherwise", and so ignore AWS (or basically any other modern technology) completely.

rdl4• 13 years ago

The NSA's IT (overall, and security) has gone way downhill, by all accounts I've seen, in the past 20 years. It's no longer superior to good commercial practice in theory, just has more money for the same mission.

There have been lots of accounts of how badly they've botched acquisition problems, and it's all essentially run by contractors now.

dsl4• 13 years ago

You might be interested in Parallel Homomorphic Encryption [PDF: http://eprint.iacr.org/2011/596.pdf], a Microsoft Research paper covering MapReduce on encrypted data.

It's entirely possible to move encrypted data into the cloud, process it, retrieve the results, then decrypt. Welcome to the future.

bigiain2• 13 years ago

Yeah but… If you had a $600million budget, wouldn't you just call up Amazon and say "Hey, you know your Availability Zones and Regions? How much to build me a couple of them, along with all your management and accounting software, so we can run pretty much all of AWS (front and back end) inside our own data centers?"

It'd be much easier for recruitment, to be able to advertise for developers/data-scientists/sysadmins with AWS experience, than just about _any_ alternative…

vidarh3• 13 years ago

It's "possible". The problem is that the number of known operations that works with homomorphic encryption is so far so small as to be mostly useless. It'll take a lot of research before it becomes practical, if it ever does, for anything but very specialised operations.

vidarh3• 13 years ago

"The cloud" in this case is simply a private data centre with whatever management and provisioning tools Amazon can provide. It's not the CIA using public resources on AWS.

It means very little for Oracle/IBM etc. Oracle has their own virtualization solutions in Solaris support for Zones, KVM etc. (and other cloud vendors have built on that - see e.g. Joyent's "SmartOS") but might be more interested in selling application appliances that can run on these solutions. IBM would love to sell in expensive consulting services to build private clouds like these too and have a lot of experience at scale with massive systems (and have existing deployments of mainframes of theirs with 1000+ Linux VM's on a single mainframe, as well as plenty of smaller solutions, as well as hybrid setups).

Helianthus• 13 years ago

...It sounds like the CIA is being a secretive, but normal customer.

I came in here expecting firm proof that the CIA was using Amazon to spy on my Prime subscription.

(I guess I assume they can do that anyway.)

But where's my free outrage?

rhizome3• 13 years ago

The fox is inside the henhouse now.

sliverstorm3• 13 years ago

The fox was always inside the henhouse. The fox just agreed to pay discount prices for some of the chickens.

Kidding aside, doesn't this seem like exactly the sort of move you would want your government agencies to make? Take advantage of free-market services where appropriate, and not get all "NIH"?

devopstom• 13 years ago

I thought the fox was on the riverbank with the grain.

nonamegiven• 13 years ago

But which is which?

bigiain2• 13 years ago

Indeed.

"I came in here expecting firm proof that the CIA was using Amazon to spy on my Prime subscription."

While that's no doubt already happening, it's also abundantly obvious that Amazon is one of very few organisations that anyone, CIA or not, would go to for consulting/professional-services when setting up a large-scale in-house "cloud computing" infrastructure.

There's not a large pool of companies with demonstrated experience, apart from Amazon there's maybe Google, Facebook, Microsoft, Rackspace - I wouldn't add Apple to that list (since their "cloud" track record is pretty poor), from there you end up with vendor-lockin from options like IBM, Dell, and perhaps to a lesser extent Cisco.

Out of all of those options, Amazon seem to easily be the "best choice" if I were to be setting up a decade-long partnership to deploy a multi-data-center scale private cloud.

colechristensen• 13 years ago

Most of the time government hires (and has for a long time) the traditional defense contractors or government-specialized small contractors to do their IT work. It is actually mildly impressive that a 'normal business' IT provider like AWS has broken into the government field.

See http://www.lockheedmartin.com/isgs/

mml• 13 years ago

Pretty sure Apple's iCloud runs on a mix of azure and vmware vsphere clusters, fwiw.

michaelrhansen• 13 years ago

Not easy to be a vendor for Federal Intelligence with tremendous audit and compliance review, wonder how long it took for them to seal the deal?

epoxyhockey2• 13 years ago

Not easy to be a vendor for Federal Intelligence

I'm sure that a contract worth $600 million over 10 years would change one's tune.

The depressing thing, as a taxpayer, is that this AWS contract is probably just a fun $60M/year toy for TLA's to play around with.

jgross206• 13 years ago

TLA?

youngerdryas2• 13 years ago

Amazon is about to lose a lot of tin foil hat customers, but they are probably painful to have as customers anyway.

smokeyj• 13 years ago

The tin foil type already assumes their images and routers are backdoored. Not that.. I could relate..

youngerdryas2• 13 years ago

I am a bit of a recovering hatter, CSPAN junkie, misanthrope. It's pretty debilitating. Reality is too broad to fully grasp, just get a sense of it and filter if necessary.

theorique• 13 years ago

They probably fear the cloud anyway, and only run a server in a faraday cage in a bunker in their basement.

fitzpasd• 13 years ago

While they might lose the extreme tin foil hat customers, this deal will only serve to enhance their trustworthiness as a company. "The CIA trusts Amazon with THEIR data...heck, so should I." etc.

lignuist• 13 years ago

This might make access to the rest of the data stored by Amazon more effective.

skcin7• 13 years ago

BarackObama.com is hosted with Amazon Web Services as well. We can know by examining the domain servers when you look at the [whois record](http://whois.domaintools.com/barackobama.com) for that domain. (On a related note, the domain registrar used is GoDaddy)

It makes sense - government needs to host their files somehow, as we are moving into this digital age.

I don't see anything wrong with it, though it will further cement Amazon's standing as a big business superpower.

andreyf• 13 years ago

Off-topic: (foo)[url] syntax only works on reddit, on HN I usually put something like this [1]

1. url

Semaphor2• 13 years ago

It's markdown, a few more sites use that syntax. HN uses formatdoc which is a very small subset of markdown.

jlgaddis2• 13 years ago

That tells you that barackobama.com is using Amazon's Route 53 for DNS services.

This, however, shows that they are using AWS (EC2) for hosting:

    $ host -t a barackobama.com
    barackobama.com has address 50.19.226.77
    $ host 50.19.226.77
    77.226.19.50.in-addr.arpa domain name pointer ec2-50-19-226-77.compute-1.amazonaws.com.

thejosh• 13 years ago

There is a difference between a public facing website and what the CIA will use AWS for.

WestCoastJustin• 13 years ago

There is already a AWS GovCloud (US) Region [1], which is segregated from the conventional/general regions. This region is specific to US government agencies with improved security. Maybe the CIA would like something special for US intelligence agencies (i.e. an AWS GovCloud (classified/top secret) Region)? There is obvious advantages to the cloud when it comes to government procurement/life cycle management headaches. There is also an Introducing AWS GovCloud on YouTube [2], it's worth a watch if you are interested.

[1] http://aws.amazon.com/govcloud-us/

[2] http://www.youtube.com/watch?v=S0av2mvYq5I

batgaijin2• 13 years ago

Why was this announced?

aashaykumar92• 13 years ago

I think we'll start seeing more deals like this. It is no secret that the government(at least the Obama administration) is, rightfully so, moving in a forward and open direction regarding technology. They are starting to accept the fact that government solutions can be found externally, and many times through citizens' softwares/ideas. If you don't agree, look at these facts: President Obama hired a CTO, the CTO opened up a fellowship program that is an applied-to program which purely looks to solving government problems. Now a CIA deal with Amazon. To me, this is all positive and forward-thinking...they can use everyday citizens and companies to enhance their operations securely and quickly.

And yes, we just have to hope it is not used to spy but hey, I'd take the risk in trusting that they care more about our safety than spying on us all the time.

gknoy2• 13 years ago

> we just have to hope it is not used to spy but hey, I'd take the risk in trusting that they care more about our safety than spying on us all the time.

Given the federal government's past behavior regarding domestic communication, I think it might be more prudent to behave on the assumption that they ARE spying on us all the time. They tell us that they only look at the info they've collected about us if is connected with communications with overseas persons of interest -- but that implies that they will have already collected it. It's the only convenient way to have a well-populated history of activity for $Person.

dsl4• 13 years ago

> moving in a forward and open direction regarding technology

Don't confuse cloud and open. They refuse to even acknowledge it publicly, this is just another vendor contract for storage and compute resources.

telecuda• 13 years ago

We sell to many federal/intel agencies and are seeing customers choose Amazon GovCloud over on-site storage 3:1.

While security is of great importance, it has more to do with the trust in your business relationship than where bits are stored at the end of the day.

siculars• 13 years ago

Am I the only one who thinks this reads like an article in The Onion?

spoiler3• 13 years ago

I was thinking the same, actually.

ynniv2• 13 years ago

It must be nice to spend $600M of taxpayer money without having to tell them what you're spending it on.

spoiler3• 13 years ago

Frigging auto correct. I meant terrorist dicks.

jlgaddis2• 13 years ago

Once I got to the bottom, I finally realized what this was about: https://news.ycombinator.com/item?id=5404746

gojomo• 13 years ago

Something I find darkly humorous about cloud data centers marketed to certain government agencies is how prominently they advertise that they are "outside the 50-mile blast zone" from DC. Do they know something we don't?

For example: http://www.carpathiahosting.com/carpathia-hosting-announces-...

Amazon and CIA ink cloud deal

Related Stories