fedramp-20x

This repository is part of the Confluent organization on GitHub. It is public and open to contributions from the community.

Please see the LICENSE file for contribution terms. Please see the CHANGELOG.md for details of recent updates.

Description

This repository contains DBT models used to evaluate evidence that has been aggregated from various sources to determine compliance for the FedRAMP 20x framework. Although the macros and models in this repository is used by Confluent Inc., it can be modified to apply to any provider according to the terms in the LICENSE file.

Navigating this repository

Reference information in the following order:

1. Methodology
2. Model for FedRAMP 20x Low
3. From the model in 2., find the corresponding macros in the macros directory

Continue below if you are reviewing on behalf of the Program Management Office

1. Navigate to the private repository provided as part of our submission intake form.
2. The Artifacts directory contains everything related to our submission.
3. The 3PAO Assessment Files contains the human readable report: "SRTM" file.
4. The other subdirectories prefixed with "FRR" and "KSI" contains evidence and supporting documents.