Government Cloud with FedRAMP Authorization
This topic contains information specific to Oracle Cloud Infrastructure Government Cloud with FedRAMP authorization.
Oracle Cloud Infrastructure Government Cloud has obtained the following authorizations:
- FedRAMP Moderate
- DISA Impact Level 2
For information about the Federal Government Cloud, see Federal Government Cloud with Impact Level 5 Authorization.
The region names and identifiers for the Government Cloud with FedRAMP authorization are shown in the following table:
|Region Name||Region Identifier||Region Location||Region Key||Realm Key||Availability Domains|
|US Gov East (Ashburn)||us-langley-1||Ashburn, VA||LFI||OC2||1|
|US Gov West (Phoenix)||us-luke-1||Phoenix, AZ||LUF||OC2||1|
After your tenancy is created in one of these regions, you can subscribe to the other region. Tenancies in the FedRAMP-authorized regions cannot subscribe to the commercial regions, or to the Federal Government Cloud regions. For information about subscribing to a region, see Managing Regions.
Console Sign-in URLs
To sign in to the FedRAMP-authorized Government Cloud, enter one of the following URLs in a supported browser:
When you're logged in to the Console for one of the Government Cloud regions, the browser times out after 15 minutes of inactivity, and you need to sign in again to use the Console.
Government Cloud API Reference and Endpoints
Oracle Cloud Infrastructure Government Cloud has these APIs and corresponding regional endpoints:
Use the Endpoint of Your Home Region for All IAM API Calls
When you sign up for Oracle Cloud Infrastructure, Oracle creates a tenancy for you in one region.
This is your home region. Your home region is where your IAM resources are defined.
When you subscribe to a new region, your IAM resources are replicated in the new region, however, the master definitions reside in your home region and can only be changed there. Make all IAM API calls against your home region endpoint. The changes automatically replicate to all regions. If you try to make an IAM API call against a region that is not your home region, you will receive an error.
In addition to these endpoints, each vault has a unique endpoint for create, update, and list operations for keys. This endpoint is referred to as the control plane URL or management endpoint. Each vault also has a unique endpoint for cryptographic operations. This endpoint is known as the data plane URL or the cryptographic endpoint.
Both Object Storage and Archive Storage are accessible with the following APIs:
See Understanding Object Storage Namespaces for information regarding how to find your Object Storage namespace.
Services Not Supported in Oracle Cloud Infrastructure Government Cloud
The following services are currently not available for tenancies in the Government Cloud:
Core Infrastructure services and features not available:
- Compute service features:
- Data Transfer service
- File Storage service
Database services not available:
- Autonomous Data Warehouse
- Autonomous Transaction Processing
- Data Safe
Data and AI services not available:
- Digital Assistant
Solutions and Platform services not available:
- Analytics Cloud
- Analytics for Applications
- Container Engine for Kubernetes
- Content and Experience
- DNS Zone Management
- Email Delivery
- Health Checks
- Resource Manager
- Traffic Management Steering Policies
Governance and Administration features not supported
- Auto-federation with Oracle Identity Cloud Service
- WAF service
- Oracle Cloud Infrastructure Terraform Provider
Integration with Oracle SaaS and PaaS services, including those listed here: Getting Started with Oracle Platform Services
Additional Information for Government Cloud Customers
- Shared Responsibilities
- Setting Up an Identity Provider for Your Tenancy
- Using a Common Access Card/Personal Identity Verification Card to Sign in to the Console
- IPv6 Support for Virtual Cloud Networks
- Setting Up Secure Access for Compute Hosts
- Enabling FIPS Mode for Your Operating System
- Required VPN Connect Parameters for Government Cloud
- Oracle's BGP ASN