Island: Island Enterprise Platform

Island Enterprise Browser is a Government-Community cloud environment that resides in the AWS GovCloud West (Oregon) region. Island leverages the UberEther IAM Advantage (IAMA) PaaS for implementation, management, and monitoring of the AWS GovCloud infrastructure housing Island Enterprise components and inherits FedRAMP High control environments from both AWS and UberEther IAMA. Island Enterprise Browser has been implemented on Amazon Elastic Kubernetes Services (EKS) to provide a microservices-based architecture. The production environment includes applications, operating systems, and AWS FedRAMP-authorized resources and services that support this architecture. The major components include: Web services for access control as well as compute nodes on UberEther-managed instances managed by EKS Access control for customer users to the front end through HTTPS (TLSv1.2 at a minimum) Access control for internal Island Enterprise Browser users to the back end through privileged AWS Identity and Access Management (IAM) user access from AWS Workspaces instances

Databases/Storage: MySQL databases through Amazon Relational Database Service (RDS) as the primary data store  Amazon Simple Storage Service (S3) for static content and object storage AWS CloudFront for managed caching 

Networking: Virtual Private Cloud (VPC) with public and private subnets Route tables for traffic flow between subnets  AWS Firewall and Security groups, acting as virtual firewalls and access control lists Amazon EKS and application load balancers (ALBs) Amazon Route53 for external and internal DNS AWS Certification Manager for public certificates AWS Workspaces for remote internal access to the environment AWS Internet Gateway and NAT Gateway for access between VPCs

UberEther-Provided AWS Services for monitoring, management, logging, authentication, and support of the system environment and components