cloud-one-dod-compliant.pdf

22 July 2024

Version 7.4

Version Number Changes

6.7 created baseline from October 2023 PPT

6.8.1 added Azure App service, IL6

6.8.2 added the following services:

AWS

- AWS Elastic Block Store

- AWS Batch Service

- AWS Cognito

Azure

- Azure SQL for PostgreSQL – Flexible Server -Azure Purview – IL2 only

OCI

- Certificate Bundle

- Oracle Container Engine for Kubernetes (OKE)

6.8.3 Added the following approved Impact Levels

Azure -Azure Cognitive Search IL6 -Azure Sentinel IL6

6.8.4 Common Services TAB:

-Removed the column on Tab 4 referencing On Prem capability.

Cloud One -Firewalls and ACLs - " (Ingress), Barracuda Egress Firewalls"

Azure -IPS/IDS - "Azure Firewall with Threat Intelligence" -SIEM & Log Analy cs – “Defender for Cloud” -Endpoint Protec on - Microso Defender for “Endpoint” -Container Security - Defender for “Containers”

AWS

-Email Protec on – “Simple Email Service (SES)” -Privileged Access Management (PAM) – “Iden ty and Access Management (IAM)”

OCI

-IPS/IDS – "Virtual Test Access Points (VTAP)” -Cer ficate Management " Cer ficate Service” -Privileged Access Management (PAM) – “OCI Iden ty & Access Management (IAM)” -Backup and Recovery – “& Object Storage”

Cloud One Responsibility:

-Endpoint Security, Trend Micro - Shared -Virtual Desktop (VDI); Guacamole – Cloud One

DPaaS Tab Added Data Transport section.

- MiniFi (IL4/5 for AWS and Azure) -Interface Monitoring (IL4/5 AWS, Azure, OCI)

7.0 new format release, 9 Nov 2023

7.1 Added Amazon SES and removed duplicate AWS Cognito and removed AWS Batch from Azure

Version Number Changes 7.2

Added Azure Machine Learning.

Removed coming soon entries from AWS.

Updated AWS Patch Manager to reflect IL6 approval and noted that it is a function of AWS System Manager.

Added AWS Secrets IL6 Aproval Added OCI Certificate Authority Added OCI Netwrok Firewall Service Major Update to Common Services for AWS, Azure, Google and Oracle after full review of listed services Updated Central Billing Appito to Appito Cloudability Updated Introduction page

7.2.1 Removed CodeBuild and CodeDeploy from C1 Common Services Capability as not currently approved.

7.3 Added Amazon Inspector 2 (Inspector Classic is EOL in 18 Dec 24)

Added AWS Neptune Updated CSSP for AWS to reflect C5ISR/C1 AWS CS ACAS Integration Updated Azure Monitor and Log Analytics to reflect IL6 availability Removed Amazon App Stream IL6 approval Removed Azure Policy from the Azure tab it is only avaialble in Common Services Added Azure Synaps Analytics IL6 Aproval Added Azure Red Hat OpenShift IL2 and IL4 only

7.4 Updated Azure Data Factory to reflect IL6 Approval

Added Amazon Comprehend IL2 - IL5 Added Amazon Guard Duty IL2 - IL5 Added Amazon Data Firehose IL2 - IL6 Added AWS Cloud Map IL2 - IL5 Added AWS CodeBuild IL2 - IL5 Added AWS CodePipeline IL2 - IL5 Added AWS Private CA IL2 - IL5 Added AWS Step Functions IL2 - IL6 Updated Amazon Workspaces to Reflect IL6 Approval Added AWS QuiclSight CA IL2 - IL5 Added Amazon MKS (Apache Kafka) IL2 - IL5

The TAB below - C1 Common Services Capability (covered on pages 5-9 when printed as PDF) is intended to show how Cloud One complements and extends CSP offerings to meet all DoD IL- 4/5 requirements.

How to read the chart on the following tab - C1 Common Services Capability:

Page 5 (Services / Capability): This criteria represents all the things an application needs to do or consider to run a DoD workload. Please note that the actual services used are dependent on the mission application's requirements and all offerings may not be applicable for all mission apps.

Page 5: The Cloud One column shows how we leverage the CSP offerings and extend them with our scripts, automation & tools to deliver the full need.

Pages 6, 7, 8, and 9: The AWS, Azure, GCP, OCI columns show the CSP native service offerings that apply to each, and the impact level they are certified for.

Cloud One complements and extends CSP offerings to meet all DoD IL-4/5 requirements.

Services / Capability Cloud One

Firewall & ACLs Internal inherited from AWS/Azure/GCP/OCI, external WAF GCDS (Ingress), Barracuda Egress Firewalls

IPS/IDS Combo of external GCDS and Trend Micro internal

Web App Firewall (WAF) GCDS / Akamai Commercial at the edge (Native offerings limited and not available in gov)

SIEM & Log Analytics CSP options are confined to their account micro-perimeter

Antimalware Trend Micro Deep Security (TMDS advises not to turn Windows Defender on, as the two can conflict)

Data Loss Prevention (DPM) Inherited from AWS/Azure/GCP/OCI , pre-configured by Cloud One automation

Key Management Inherited from AWS/Azure/GCP/OCI , pre-configured by Cloud One automation ,keys provisioned Cloud One

Encryption At Rest Inherited from AWS/Azure/GCP/OCI , pre-configured by Cloud One automation DDoS Protection Akamai Commercial, GCDS Email Protection O365 and other GOTS SSL Decryption Reverse Proxy GCDS Endpoint Protection Trend Micro Deep Security Certificate Management Cloud One Managed, fully supported Process Container Security Inherited from AWS/Azure/GCP/OCI Identity and Access Management GCDS SSO (using AAD)

Privileged Access Management (PAM) Cloud One Configured services leveraging GCDS SSO, Apache Guacamole and zone specific AD

Centralized Logging / Auditing GCDS , AWS/Azure/GCP/OCI services configured by Cloud One Automation

Load Balancer External GCDS, Internal Inherited from AWS/Azure/GCP/OCI configured by Mission App Team

LAN Inherited from AWS/Azure/GCP/OCI , pre-configured by Cloud One automation

Governance Risk and Compliance Monitoring Inherited from AWS/Azure/GCP/OCI , pre-configured by Cloud One automation Backup and Recovery Inherited by AWS/Azure/GCP/OCI, configured by Mission App Team Vulnerability Assessment Inherited by AWS/Azure + Cloud One Provisioned ACAS

Change Management Inherited from AWS/Azure/GCP/OCI , pre-configured by Cloud One automation

CSSP

CERDEC, with feeds configured and maintained by MSP. C5ISR is the CSSP for Cloud One

BCAP: VDSS GCDS and other internal CSP configured services by MSP BCAP: VDMS Internal CSP tools configured by MSP BCAP: TCCM Cloud One Internal Roles Help Desk Production enclave ServiceNow facilitating the ‘secure box’ ATO Inheritance Cloud One Security Team (shared Mission App Owner)

Central Billing Central Billing through Appito Cloudability (SS)

MaaS Migration as a Service; Bringing in C1 expertise to ensure Mission App migration success.

Incident Management Accurate Incident Tracking & Metric Reporting

Change Audit & Control Artifactory /TFS/Jenkins pre-configured configured by Cloud One ; Continuous Integration & Continuous Delivery

Services / Capability

Firewall & ACLs

IPS/IDS

Web App Firewall (WAF) SIEM & Log Analytics

Antimalware

Data Loss Prevention (DPM)

Key Management

Encryption At Rest DDoS Protection Email Protection SSL Decryption Reverse Proxy Endpoint Protection Certificate Management Container Security Identity and Access Management

Privileged Access Management (PAM) Centralized Logging / Auditing

Load Balancer

LAN

Governance Risk and Compliance Monitoring Backup and Recovery Vulnerability Assessment

Change Management

CSSP

BCAP: VDSS

BCAP: VDMS

BCAP: TCCM

Help Desk ATO Inheritance

Central Billing

MaaS Incident Management

Change Audit & Control

AWS

Security Groups AWS Network ACLs 3rd Party Only

AWS WAF / AWS Firewall Manager Amazon GuardDuty

3rd Party Only

NOT AVAILABLE

Key Management Service (KMS)

Key Management Service (KMS)

NOT AVAILABLE

Simple Email Service (SES) EC2 (Function -Elastic Load Balancer) 3rd Party Only AWS Certificate Manager Elastic Container Service (ECS) Identity and Access Management (IAM)

Identity and Access Management (IAM) CloudWatch / S3 Bucket

Elastic Load Balancer

EC2 (Function - Virtual Private Cloud (VPC))

AWS CloudTrail / IAM Access Analyzer AWS Backup / Amazon S3 Glacier Amazon Inspector / AWS Trusted Advisor (limited)

AWS Config, AWS CloudFormation ACAS Agent Based Scanning in Common Services Interrated with C5ISR IL5 / IL5 Zones A, B and Prod.

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

AWS Organizations (supports Apptio cost aggregation)

NOT AVAILABLE

NOT AVAILABLE

AWS Code build tools (CodeCommit), Config, CloudFormation

Services / Capability

Firewall & ACLs

IPS/IDS

Web App Firewall (WAF) SIEM & Log Analytics

Antimalware

Data Loss Prevention (DPM)

Key Management

Encryption At Rest DDoS Protection Email Protection SSL Decryption Reverse Proxy Endpoint Protection Certificate Management Container Security Identity and Access Management

Privileged Access Management (PAM) Centralized Logging / Auditing

Load Balancer

LAN

Governance Risk and Compliance Monitoring Backup and Recovery Vulnerability Assessment

Change Management

CSSP

BCAP: VDSS

BCAP: VDMS

BCAP: TCCM

Help Desk ATO Inheritance

Central Billing

MaaS Incident Management

Change Audit & Control

Azure

Network Security Groups (NSG) Trend Micro

Application Gateway Microsoft Defender for Cloud

Microsoft Defender for Cloud

Microsoft Defender for Cloud

Key Vault

Inherited from Microsoft Microsoft Defender for Cloud Managed by DAF O365 Application Gateway Microsoft Defender for Cloud Key Vault Microsoft Defender for Cloud Microsoft Entra ID Microsoft Entra ID Privileged Identity Management (P2) Azure Monitor

Azure Load Balancer

Virtual Network

Azure Policy Azure Backup / Azure Site Recovery Microsoft Defender for Cloud

Azure Automation (Change Tracking)

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

Services / Capability

Firewall & ACLs

IPS/IDS

Web App Firewall (WAF) SIEM & Log Analytics

Antimalware

Data Loss Prevention (DPM)

Key Management

Encryption At Rest DDoS Protection Email Protection SSL Decryption Reverse Proxy Endpoint Protection Certificate Management Container Security Identity and Access Management

Privileged Access Management (PAM) Centralized Logging / Auditing

Load Balancer

LAN

Governance Risk and Compliance Monitoring Backup and Recovery Vulnerability Assessment

Change Management

CSSP

BCAP: VDSS

BCAP: VDMS

BCAP: TCCM

Help Desk ATO Inheritance

Central Billing

MaaS Incident Management

Change Audit & Control

GCP

Virtual Private Cloud (VPC) 3rd Party Only

3rd Party Only Cloud Monitor / Cloud Logging

3rd Party Only

Cloud DLP

Cloud KMS

Cloud Storage Cloud Load Balancing 3rd Party Only Cloud Load Balancer 3rd Party Only 3rd Party Only Google Kubernetes Engine (GKE) Identity and Access Management (IAM)

Identity Platform Cloud Monitoring

Cloud Load Balancer

Virtual Private Cloud (VPC) Identity and Access Management (IAM) / Assured Workloads Cloud Storage 3rd Party Only

Cloud Compute Engine

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

Services / Capability

Firewall & ACLs

IPS/IDS

Web App Firewall (WAF) SIEM & Log Analytics

Antimalware

Data Loss Prevention (DPM)

Key Management

Encryption At Rest DDoS Protection Email Protection SSL Decryption Reverse Proxy Endpoint Protection Certificate Management Container Security Identity and Access Management

Privileged Access Management (PAM) Centralized Logging / Auditing

Load Balancer

LAN

Governance Risk and Compliance Monitoring Backup and Recovery Vulnerability Assessment

Change Management

CSSP

BCAP: VDSS

BCAP: VDMS

BCAP: TCCM

Help Desk ATO Inheritance

Central Billing

MaaS Incident Management

Change Audit & Control

OCI

Security Lists (SLs) & Network Security Groups (NSG)

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

Cloud Guard

Object Storage / Blocl Storage (Finction - Block Volume)

Vault

Object Storage

NOT AVAILABLE

DAF O365

Generic Load Balancing 3rd Party Only Certificate Service Oracle Kubernetes Engine (OKE) OCI Identity & Access Management (IAM)

OCI Identity & Access Management (IAM) OCI Logging

OCI Generic Load Balancing

Virtual Cloud Networks (VCN)/Subnets

Cloud Guard Block Storage (Function - OCI Block Volume) & Object Storage

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

NOT AVAILABLE

Cloud One Services Responsibility Artifact Management; Artifactory Cloud One Application Promotion Pipeline; Jenkins Cloud One AWS, OCI Application Promotion Pipeline; ADO Cloud One Azure Service Desk; Service Now Cloud One Data Transport - ESB; Jboss Fuse Cloud One Data Transport - EAI; NiFi Cloud One Account Processing; AAA Cloud One Migration Support; MaaS Cloud One Scanning Support; ACAS Shared Data Repository; Data Lake Cloud One Endpoint Security; TrendMicro Shared Virtual Desktop (VDI); Guacamole Cloud One

The following services are enabled in a government cloud for AWS https://aws.amazon.com/compliance/services-in-scope/DoD_CC_SRG/

CSP Enabled Services IL2 IL4 IL5 IL6 Notes Amazon API Gateway ✓ ✓ ✓ Amazon AppStream ✓ ✓ ✓ Amazon CloudWatch ✓ ✓ ✓ ✓ Amazon CloudWatch Events ✓ ✓ ✓ ✓ Amazon CloudWatch Logs ✓ ✓ ✓ ✓ Amazon Comprehend ✓ ✓ ✓ Amazon Data Firehose ✓ ✓ ✓ ✓ Amazon DynamoDB ✓ ✓ ✓ ✓ Amazon EC2 Auto Scaling ✓ ✓ ✓ Amazon EC2 Container Registry ✓ ✓ ✓ ✓ Amazon EC2 Container Service ✓ ✓ ✓ ✓ Amazon Elastic Compute Cloud ✓ ✓ ✓ ✓ Amazon Elastic File System ✓ ✓ ✓ Amazon Elastic MapReduce ✓ ✓ ✓ ✓ Amazon ElastiCache ✓ ✓ ✓ ✓ Amazon Fargate ✓ ✓ ✓ Amazon Glacier ✓ ✓ ✓ ✓ Amazon Guard Duty ✓ ✓ ✓ Amazon Inspector Classic (EOL 12/18/24) ✓ ✓ ✓ Amazon Inspector 2 ✓ ✓ ✓ Amazon MKS ✓ ✓ ✓ Amazon Kinesis Streams ✓ ✓ ✓ ✓ Amazon Patch Manager (function of AWS Sys MGR) ✓ ✓ ✓ ✓ Amazon Redshift ✓ ✓ ✓ ✓ Amazon Relational Database Service ✓ ✓ ✓ ✓ Amazon Route 53 ✓ ✓ ✓ ✓ Amazon Simple Email Service (SES) (MSO must request due to cost of VPC Endpoint) ✓ ✓ ✓ Amazon Simple Storage Service ✓ ✓ ✓ ✓ Amazon Simple Workflow Service ✓ ✓ ✓ ✓ Amazon SNS ✓ ✓ ✓ ✓ Amazon SQS ✓ ✓ ✓ ✓ Amazon WorkSpaces ✓ ✓ ✓ ✓ AWS Artifact ✓ ✓ ✓ AWS Athena ✓ ✓ ✓ AWS Backup ✓ ✓ ✓ AWS Batch Service ✓ ✓ ✓ AWS Certificate Manager ✓ ✓ ✓ AWS Cloud Map ✓ ✓ ✓ AWS CloudFormation ✓ ✓ ✓ ✓ AWS CloudTrail ✓ ✓ ✓ ✓ AWS CodeBuild ✓ ✓ ✓ AWS Code Commit ✓ ✓ ✓ AWS CodePipeline ✓ ✓ ✓ AWS Cognito ✓ ✓ ✓ AWS Config ✓ ✓ ✓ ✓ AWS Data Lifecycle Manager ✓ ✓ ✓ AWS Database Migration Service ✓ ✓ ✓ ✓ AWS DataSync ✓ ✓ ✓ AWS DirectConnect ✓ ✓ ✓ ✓ AWS Directory Service ✓ ✓ ✓ AWS EC2 Instance Connect ✓ ✓ ✓ AWS Elastic Beanstalk ✓ ✓ ✓ AWS Elastic Block Storage ✓ ✓ ✓ AWS Glue ✓ ✓ ✓ AWS Identity and Access Management ✓ ✓ ✓ ✓

The following services are enabled in a government cloud for AWS https://aws.amazon.com/compliance/services-in-scope/DoD_CC_SRG/

CSP Enabled Services IL2 IL4 IL5 IL6 Notes AWS Key Management Service ✓ ✓ ✓ ✓ AWS Kubernetes Service ✓ ✓ ✓ AWS Lambda ✓ ✓ ✓ ✓ AWS Neptune ✓ ✓ ✓ AWS OpenSearch ✓ ✓ ✓ ✓ AWS Organizations ✓ ✓ ✓ AWS Personal Health Dashboard ✓ ✓ ✓ ✓ AWS Private CA ✓ ✓ ✓ AWS QuickSight ✓ ✓ ✓ AWS Resource Access Manager(RAM) ✓ ✓ ✓ ✓ AWS SageMaker ✓ ✓ ✓ AWS Secrets Manager ✓ ✓ ✓ ✓ AWS Security Token Service ✓ ✓ ✓ AWS Snowball ✓ ✓ ✓ ✓ AWS Step Functions ✓ ✓ ✓ ✓ AWS Storage Gateway ✓ ✓ ✓ AWS Systems Manager ✓ ✓ ✓ ✓ AWS Textract ✓ ✓ ✓

CNAP ✓

Elastic Load Balancing ✓ ✓ ✓ ✓ FSX for WFS & AWS Workspaces ✓ ✓ ✓

The following services are enabled in a government cloud for Azure https://learn.microsoft.com/en-us/azure/azure-government/compliance/azure-services-in-fedramp-auditscope#azure-government-services-by-audit-scope

CSP Enabled Services IL2 IL4 IL5 IL6 Notes API Management ✓ ✓ ✓ ✓ Application Gateway ✓ ✓ ✓ ✓ Azure Advisor ✓ ✓ ✓ Azure Automation ✓ ✓ ✓ Azure Backup ✓ ✓ ✓ ✓ Azure Bastion ✓ ✓ ✓ Azure Blueprints ✓ ✓ ✓ Azure Cache for Redis ✓ ✓ ✓ ✓ Azure Cloud Shell ✓ ✓ ✓ Azure Cognitive Search ✓ ✓ ✓ ✓ Azure Cognitive Services ✓ ✓ ✓ Azure Container Instances ✓ ✓ ✓ Azure Container Registry ✓ ✓ ✓ Azure Data Box ✓ ✓ ✓ ✓ Azure Data Explorer ✓ ✓ ✓ ✓ Azure Data Factory ✓ ✓ ✓ ✓ Azure Databricks ✓ ✓ ✓ Azure DNS ✓ ✓ ✓ ✓ Azure Event Grid ✓ ✓ ✓ Azure Event Hubs ✓ ✓ ✓ ✓ AZURE Form Recognizer ✓ ✓ ✓ Azure Functions ✓ ✓ ✓ ✓ Azure IoT Hub ✓ ✓ ✓ Azure Key Vault ✓ ✓ ✓ ✓ Azure Kubernetes Service (AKS) ✓ ✓ ✓ ✓ Azure Load Balancer ✓ ✓ ✓ ✓ Azure Log Analytics ✓ ✓ ✓ ✓ Azure Logic Apps ✓ ✓ ✓ ✓ Azure Machine Learning ✓ ✓ ✓ Azure Monitor ✓ ✓ ✓ ✓ Azure Network Watcher ✓ ✓ ✓ ✓ Azure Peering ✓ ✓ ✓ Azure Portal ✓ ✓ ✓ Azure Private Link ✓ ✓ ✓ Azure Purview ✓ Azure red Hat OpenShift ✓ ✓ Azure Resource Graph ✓ ✓ ✓ ✓ Azure Resource Manager ✓ ✓ ✓ Azure Sentinel ✓ ✓ ✓ ✓ Azure Service Bus ✓ ✓ ✓ ✓ Azure Service Health ✓ ✓ ✓ Azure Site Recovery ✓ ✓ ✓ Azure SQL Database ✓ ✓ ✓ ✓ Azure SQL for PostgreSQL - Flexible Server ✓ ✓ ✓ Azure Stack Edge ✓ ✓ ✓ ✓ Azure Stack Hub for Skyborg ✓ ✓ ✓ ✓ Azure Storage ✓ ✓ ✓ ✓ Azure Synapse Analytics ✓ ✓ ✓ ✓ Azure Traffic Manager ✓ ✓ ✓ ✓ Azure Virtual Machines ✓ ✓ ✓ ✓ Azure Virtual Network ✓ ✓ ✓ ✓ Azure VM Scale Sets ✓ ✓ ✓ ✓ Azure VPN Gateway ✓ ✓ ✓ ✓ Azure Web Apps (App Service) ✓ ✓ ✓ ✓ Microsoft Defender for Cloud ✓ ✓ ✓ ✓ MS Power BI ✓

The following services are enabled in a government cloud for Google Cloud (GCP).

https://cloud.google.com/security/compliance/fedramp

CSP Enabled Services IL2 IL4 IL5 IL6 Notes AI Platform Training & Prediction ✓ Apigee ✓ App Engine ✓ Auto ML ✓ BigQuery ✓ Cloud Bigtable ✓ Cloud Build ✓ Cloud Composer ✓ Cloud Data Fusion ✓ Cloud Debugger ✓ Cloud Deployment Manager ✓ Cloud DLP ✓ Cloud DNS ✓ Cloud Filestore ✓ Cloud Functions ✓ Cloud HSM ✓ Cloud Identity ✓ Cloud Life Sciences ✓ Cloud Load Balancing ✓ Cloud Logging ✓ Cloud Monitoring ✓ Cloud Profiler ✓ Cloud Run ✓ Cloud Shell ✓ Cloud Source Repositories ✓ Cloud Spanner ✓ Cloud SQL ✓ Cloud Storage ✓ Cloud Trace ✓ Compute Engine ✓ Container Registry ✓ Data Catalog ✓ Dataflow ✓ Dataproc ✓ Datastore ✓ Google Cloud IAP ✓ Google Cloud Marketplace ✓ Google Kubernetes Engine ✓ Identity Platform ✓ Memorystore ✓ Pub/Sub ✓ Resource Manager ✓ Web Security Scanner ✓

The following services are enabled in a government cloud for Oracle Cloud Platform (OCI).

https://www.oracle.com/government/federal/fedramp/

CSP Enabled Services IL2 IL4 IL5 IL6 Notes Announcements ✓ ✓ ✓ API Gateway ✓ ✓ ✓ Audit ✓ ✓ ✓ Block Volume ✓ ✓ ✓ Certificate Authority ✓ ✓ ✓ Certificate Bundle ✓ ✓ ✓ Cloud Shell ✓ Compartment Quota ✓ ✓ ✓ Compute – Auto-Scaling ✓ ✓ ✓ Compute – Bare Metal (BM) ✓ ✓ ✓ Compute – Compute Monitoring ✓ ✓ ✓ Compute – GPU ✓ ✓ ✓ Compute – HPC ✓ ✓ ✓ Compute – Linux/YUM Repository ✓ ✓ ✓ Compute – Virtual Machine ✓ ✓ ✓ Console Dashboard ✓ ✓ ✓ Database – Autonomous Database ✓ ✓ ✓ Database – DB Systems ✓ ✓ ✓ Database – Exadata Cloud Service ✓ ✓ ✓ Functions ✓ ✓ ✓ Load Balancing ✓ ✓ ✓ Monitoring ✓ ✓ ✓ Newtork Firewall Service ✓ ✓ ✓ Network Security Groups ✓ ✓ ✓ Notifications ✓ ✓ ✓ Oracle Container Engine for Kubernetes (OKE) ✓ ✓ ✓ Resource Manager ✓ ✓ ✓ Service Connector ✓ ✓ ✓ Storage – Block Storage ✓ ✓ ✓ Storage – Archive Storage ✓ ✓ ✓ Storage – File Storage ✓ ✓ ✓ Storage – Object Storage ✓ ✓ ✓ Streaming ✓ ✓ ✓ Tagging ✓ ✓ ✓ Vault ✓ ✓ ✓ VmWare Solution ✓ ✓ ✓

DPaaS Enabled Services IL2 IL4 IL5 IL6 Notes Dassault Systemes

Cameo tools ✓ ✓ Enterprise Architecture ✓ ✓ System Modeler ✓ ✓ Teamwork Cloud ✓ ✓ Collaborator for Teamwork Cloud ✓ ✓ DataHub Plugin ✓ ✓ Merge Plugin ✓ ✓ Simulation Toolkit Plugin ✓ ✓ Collaborator Publisher ✓ ✓ Development Tools ✓ ✓ Enterprise Architect Import ✓ ✓ Strict UML XMI Exporter ✓ ✓ UML2 Metamodel with attributes ✓ ✓ SolidWorks ✓ ✓ 3D Experience ✓ ✓

IBM

DOORS ✓

MathWorks

MATLAB ✓ ✓

Fixed Point Designer Toolbox ✓ ✓ Database Toolbox ✓ ✓ Parallel Computing Toolbox ✓ ✓ Sparx

Enterprise Architect ✓ ✓ Pro Cloud Server ✓ ✓ Prolaborate ✓ ✓

AGI

Ansys ✓ ✓ Integration ✓ ✓ Analysis Workbench ✓ ✓ Coverage ✓ ✓ Comm/Radar ✓ ✓

TIREM ✓ ✓

Urban Propagation ✓ ✓ Parallel Computing ✓ ✓ ModelCenter ✓ ✓ Model Based Simulation Environment with MagicDraw/Cameo Connector ✓ ✓ Integrate ✓ ✓ Explore ✓ ✓ SBE Vision

Sematic Data Broker ✓ ✓ Microsoft

Visual Studio Code ✓ Excel v16.x ✓ Word v16.x ✓ PowerPoint v16.x ✓

GOTS

AFSIM ✓ ✓

CNAP / AppGate ✓

Mission Systems need to purchase licenses for the selected software tool.

For additional questions: AFLCMC.HNII.DEPaaS@us.af.mil

Data Transport

MiniFi -AWS and Azure ✓ ✓ Interface Monitoring - Aws, Azure & OCI ✓ ✓

For additional questions: jessica.a.mallak@saic.com

The following managed services are enabled in a government cloud for Digital Engineering for Cloud One managed.