Demystification of the FedRAMP Authorization Boundary Diagrams (with Template)
Under FedRAMP, CSPs using external services must document them, include them in their authorization boundary for federal data, and get official approval.