Reference
FedRAMP High Managed Landing Zone glossary
Terms used in FedRAMP High Managed Landing Zone and its documentation.
Applies to FedRAMP High Managed Landing Zone as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.
Terms used in FedRAMP High Managed Landing Zone and its documentation.
| Term | Meaning |
|---|---|
| Landing zone | The shared foundation of accounts, network, identity, logging and guardrails that applications are built on. |
| Guardrail | A preventive policy that stops accounts doing something unapproved. |
| Hub network | The central network that controls traffic in and out of the landing zone. |
| Customer responsibility matrix | A document showing which controls the cloud provider, landing zone and application team each provide. |
| Control inheritance | Relying on a control provided by the landing zone or cloud provider instead of implementing it again. |
| ISSO | Information System Security Officer, who approves the baseline, changes and exceptions. |
| TIC 3.0 | The federal Trusted Internet Connections approach for agency network connections. |
| Drift | A difference between the approved baseline and the running configuration. |
| Environment | An account or subscription for one application, such as development, test or production. |
| Exception | An approved, time-limited permission to do something a guardrail would block. |
Was this page helpful?
Report a problem with this page
Need help with your own setup rather than this page? Raise a support ticket.