FedRAMP limitations and supported government cloud regions

Review Cortex XSIAM FedRAMP feature limitations and supported AWS GovCloud and Azure Government regions for federal deployments.

Cortex XSIAM FedRAMP Government deployments support specific cloud services and regions. Review these service limitations before onboarding federal cloud environments.

FedRAMP service limitations

• Unsupported features: FedRAMP Government instances do not currently support these DSPM services:

  • AWS: RDS/Aurora scanning

  • DBaaS: Snowflake, Databricks

  • Microsoft 365

  • Azure: All services (this is not supported for both DSPM and AISPM services)

• Environmental restrictions: Multi-tenant or MSSP environments are not currently supported by FedRAMP.

• Permitted capabilities: Other capabilities, such as registry scanning, serverless scanning, and agentless disk scanning, are allowed.

Supported AWS GovCloud and Azure Government regions

Supported regions are limited to AWS GovCloud regions and Microsoft Azure government regions.

Provider	Supported regions
AWS GovCloud	AWS GovCloud (US-East) - us-gov-east-1 AWS GovCloud (US-West) - us-gov-west-1
Azure Government	US Gov Arizona - usgovarizona US Gov Texas - usgovtexas US Gov Virginia - usgovvirginia