I am wondering if anyone has used RMQ in a government environment. If so, you would have had to ATO RabbitMQ and part of that process would be to comply with a specified Security Technical Implementation Guide (STIG) located here:
https://public.cyber.mil/stigs/compilations/https://public.cyber.mil/stigs/downloads/To ease any link clicking concerns, the downloads endpoint does not automatically download anything. It simply provides a list of downloadable STIGs.
We waited to find a compliant version of RMQ located up on Iron Bank, but of course that can change with the wind, and that still doesn't do anything for "STIG-ing" RMQ in our environment.
Has anyone else utilized RMQ in a government controlled environment? I would be curious to know your process.