While Cloud.gov had great fanfare years ago when introduced. Underneath it’s just Pivotal/CloudFoundry buildpacks and standardized security assurances. It’s exorbitantly costly for lower scale projects. Most three-letter agencies have their own security review processes on top of these assurances anyway. So the time-savings expected are quickly diminished.

Someone could do very well for our governments’ efficiency to STOP the redundant overhead in security controls currently. Preventing security teams becoming a gatekeeping police department and staffing/hiring with those more inclined to automate (SecOps) rather than to interpret policy inconsistently would be excellent.