Enable FIPS 140-3 Compliance for RDS API

docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.23.4-alpine as gobuff
+FROM golang:1.24-alpine as gobuff
 
 EXPOSE 3000
 
@@ -37,6 +37,10 @@ COPY go.sum .
 RUN go mod download
 ADD . .
 RUN go version
+
+# Enable FIPS 140-3 compliant cryptography
+ENV GOFIPS140=v1.0.0
+
 RUN buffalo build --static -o /bin/api --ldflags "-X github.com/YaleSpinup/rds-api/rdsapi.Version=$version -X github.com/YaleSpinup/rds-api/rdsapi.VersionPrerelease=$prerelease -X github.com/YaleSpinup/rds-api/rdsapi.GitHash=$githash -X github.com/YaleSpinup/rds-api/rdsapi.BuildStamp=$buildstamp"
 
 

docker/Dockerfile.local

@@ -1,4 +1,4 @@
-FROM golang:1.23.4-alpine AS gobuff
+FROM golang:1.24-alpine AS gobuff
 
 EXPOSE 3000
 
@@ -31,6 +31,10 @@ COPY go.sum .
 RUN go mod download
 ADD . .
 RUN go version
+
+# Enable FIPS 140-3 compliant cryptography
+ENV GOFIPS140=v1.0.0
+
 RUN buffalo build --static -o /bin/api
 
 FROM alpine

go.mod

@@ -1,8 +1,8 @@
 module github.com/YaleSpinup/rds-api
 
-go 1.23
+go 1.24
 
-toolchain go1.23.4
+toolchain go1.24.0
 
 require (
 	github.com/YaleSpinup/apierror v0.1.5

pkg/session/session.go

@@ -29,8 +29,9 @@
 	}
 
 	config := aws.Config{
-		Credentials: s.credentials,
-		Region:      aws.String(s.region),
+		Credentials:     s.credentials,
+		Region:          aws.String(s.region),
+		UseFIPSEndpoint: aws.FIPSEndpointStateEnabled,
 	}
 
 	sess := session.Must(session.NewSession(&config))