FedRAMP limitations and supported government cloud regions ↗
Cortex XSIAM FedRAMP Government deployments support specific cloud services and regions. Review these service limitations before onboarding federal cloud environments.
FedRAMP service limitations
- Unsupported features: FedRAMP Government instances do not currently support these DSPM services:
- AWS: RDS/Aurora scanning
- DBaaS: Snowflake, Databricks
- Microsoft 365
- Azure: All services (this is not supported for both DSPM and AISPM services)
- Environmental restrictions: Multi-tenant or MSSP environments are not currently supported by FedRAMP.
- Permitted capabilities: Other capabilities, such as registry scanning, serverless scanning, and agentless disk scanning, are allowed.
Supported AWS GovCloud and Azure Government regions
Supported regions are limited to AWS GovCloud regions and Microsoft Azure government regions.
| Provider | Supported regions |
|---|---|
| AWS GovCloud | <ul><li>AWS GovCloud (US-East) - us-gov-east-1</li><li>AWS GovCloud (US-West) - us-gov-west-1</li></ul> |
| Azure Government | <ul><li>US Gov Arizona - usgovarizona</li><li>US Gov Texas - usgovtexas</li><li>US Gov Virginia - usgovvirginia</li></ul> |