|
Each week, the CMS Hybrid Cloud program provides a list of upcoming changes, maintenance windows, and updates to help customers build awareness and plan effectively and summarizes changes from the previous week.
This newsletter includes:
Completed change summary for the week of 7/16/2026
- 7/18/2026 - DevOps Services Maintenance
- 7/22/2026 - Marketplace SSM Patching - DEV/TEST
- 7/22/2026 - Non-Marketplace SSM Patching - DEV/TEST/IMPL
- 7/22/2026 - MAG - Azure Update Manager Patching - DEV/TEST/IMPL
- 7/22/2026 - Azure Commercial - Azure Update Manager Patching - DEV/TEST/IMPL
- 7/22/2026 - GCP - VM Manager Patching - DEV/TEST/IMPL
To learn details about previous changes please go to the News and Updates section on cloud.cms.gov. (Secure Access required)
For Patching and Gold Image release schedule please view: Patching and Gold Image Release Calendar - 2026
AWS Patch Tag Naming Update
*Update on patch tag naming after new finding. No space or _ to be used.
Beginning July, AWS team will convert patch tags naming from
· Patch Group to PatchGroup
· Patch Window to PatchWindow
The tag name change in AWS will "Allow tags in metadata" setting to be enabled on instances, to align with the system requirement and avoid metadata-related issues. The updated tag format will be used going forward.
The patching team will create the ITC changes starting July 20, 2026, according to the following schedule:
· Lower Environments: July 20-21, 2026
· Production: July 29, 2026
· Marketplace Production: August 9, 2026
As this is a behavioral change in the patching process, Technical Advisors are requested to coordinate with their respective ADOs and hosting coordinators to ensure the new tag format is updated and adopted in all future deployments. This change is specific to AWS patches only.
Please contact Enterprise Patching Team for questions / concerns.
7/25/2026 - Enterprise Testing Services Maintenance
Summary:
In order to stay up to date with the latest versions and security advisories, the CMS Hybrid Cloud team will be performing maintenance updates on Enterprise Testing tools.
Actions we are taking:
- Upgrade Selenium Box to v6.0.1
- Upgrade Selenium Box Hub and Executors with the latest Amazon Linux 2023 Gold Image for CMS Cloud
When is this happening?
Start time: Saturday, 7/25/2026 at 8:00 a.m. ET
End time: Saturday, 7/25/2026 at 11:59 a.m. ET
Who will be impacted?
All AWS Commercial and GovCloud customers of Selenium Box.
What is the impact?
Customers should expect downtime for the service as instances are restarted within the maintenance window.
7/25/2026 - Enterprise JIRA Maintenance
Summary:
Enterprise JIRA (https://jiraent.cms.gov) maintenance activity to address a security vulnerability on July 25th, 2026 beginning at 8:00 a.m. ET.
Actions we are taking:
- Upgrade to Jira version 10.3.23
When is this happening?
Start Time: Saturday, 7/25/2026 at 8:00 a.m. ET
End Time: Saturday, 7/25/2026 at 3:00 p.m. ET
Who will be impacted?
All Enterprise JIRA Users.
What is the impact?
Enterprise JIRA (https://jiraent.cms.gov/) production instance will be unavailable during the maintenance window outlined above.
Support / Questions:
During the maintenance window, please send an email for any urgent requests/issues.
7/26/2026 - Enterprise TestRail Maintenance
Summary:
Enterprise TestRail (https://testrailent.cms.gov/) maintenance activity on July 26th, 2026 beginning at 8:00 a.m. ET.
Actions we are taking:
- Upgrade the Enterprise TestRail RDS MySQL database to version 8.4.10
When is this happening?
Start Time: Sunday, 7/26/2026 at 8:00 a.m. ET
End Time: Sunday, 7/26/2026 at 11:00 a.m. ET
Who will be impacted?
All Enterprise TestRail Users.
What is the impact?
Enterprise TestRail (https://testrailent.cms.gov/) production instance will be unavailable during the maintenance window outlined above.
Support / Questions:
During the maintenance window, please send an email for any urgent requests/issues.
7/29/2026 - Marketplace SSM Patching - IMPL
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 7/29/2026 at 9:00 p.m. ET. The week's patches will impact the IMPL environment for the affected Marketplace applications noted below.
Actions we are taking:
- Marketplace IMPL
- SSM Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 7/29/2026 at 9:00 p.m. ET
End Time: Thursday, 7/30/2026 at 2:00 a.m. ET
Who will be impacted?
FFM_Opera, VAMS, TWS, XES - XOC Tools, SERVIS, FFM_Shared_Services, FFM MLMS, XES - MSI Tech Lab, FFM_FM, FFM_TWS, XES - Service Virtualization
DSRS, FFM, FFM DSH, FFM EDI, FFM EFT, FFM ESDCU, MCR, FLH, OC Base- FLH, OC Base PET, FFM_MNPS, CMS Cloud - Advanced Monitoring
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
7/29/2026 - Non-marketplace SSM Patching -
PROD
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 7/29/2026 at 9:00 p.m. ET. The week's patches will impact the PROD environment for the affected Non-marketplace applications noted below.
Actions we are taking:
- Non-marketplace PROD
- SSM Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 7/29/2026 at 9:00 p.m. ET
End Time: Thursday, 7/30/2026 at 2:00 a.m. ET
Who will be impacted?
Reboot - CEDAR, FFSDCS, RASS, OC Base- eLDAP, SC CLIA, NTP LMS, Spott MACBIS, OC Base- WNMG, NEIL/HRES, OC Base- EWST, MacFin, eAPD Hi-C, OC Base- CMS Cloud Legacy, OC Base- DevSecOps SecDevOps, iServ, MDP, PECOS2.0, SEI, OC Base- PWSS, TRA, CMS ARTS, MCIM, RAD Analysis Tools, MCIM, Perm, CMS Cloud - CRE, CMS Cloud - Enterprise Agile Tools, CMS Cloud tamer, CMS Cloud - CARD, CMS Cloud - ECS Fargate, CMS Cloud - Direct Connect, CMS Cloud - Jfrog SonarCube, CMS Cloud - DNS Prod, CMS Cloud - Governance 2.0, MEOWx, CMS Cloud - CloudBees Jenkins, CMS Cloud - CET, CMS Cloud - DevSecOps, CMS Cloud - Utilities, CMS Cloud - Testrail, CMS Cloud - CircleCI, CMS Cloud - Sam GSS Security GovCloud, SWIFT, AWS HEIDI, MDX, MSPSC, QMAC, ESS-TOOLS, QCOR
No reboot - MEPBS, EACMS, MacPro, PS&R, RDS, OC Base- APIM GEO, 1115 PMDA, CMS Cloud - Governance 2.0, CMS Cloud - QuickDNS, CMS Cloud - CMSNet, CMS Cloud - CCG Web Content, CMS Cloud - Network Arch, CMS Cloud - VPC Automation, CMS Cloud - Security Team, CMS Cloud - CCG Web Content, CMS Cloud Temporal, CMS Cloud - Splunk, CMS Cloud - CET, AWS GSS Security GC, occonfluence, ocjira, miniorange, ocsonarqube, MTF-PM, NDW, MacFin, MTF-DM, PECOS-OM, NGD
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
7/29/2026 - MAG - Azure Update Manager Patching - PROD
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 7/29/2026 at 9:00 p.m. ET. The week's patches will impact the PROD environment for Azure.
Actions we are taking
- MAG Prod
- MAG Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 7/29/2026 at 9:00 p.m. ET
End Time: Thursday, 7/30/2026 at 2:00 a.m. ET
Who will be impacted?
Subscriptions:
CMS.VDC-CCS.IUSG.SharedServices.001.AG
ScopeInfoTech-CM-HEDIS PLD-005
Resource Groups with Reboot:
RG-SS-LDAP-PROXY-PROD
rg-splunk-prod
Resource Groups with No reboot:
RG-AZE-HEDISPLD-PROD
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
7/29/2026 - Azure Commercial - Azure Update Manager Patching - PROD
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 7/29/2026 at 6:00 p.m. ET. The week's patches will impact the PROD environment for the affected Azure commercial applications noted below.
Actions we are taking:
- Azure Commercial PROD
- Azure Commercial Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 7/29/2026 at 9:00 p.m. ET
End Time: Thursday, 7/30/2026 at 2:00 a.m. ET
Who will be impacted?
Subscription:
azure-comm-ea-cms-iusg-gss-patching-prod
azure-comm-ea-cms-iusg-gss-goldimage-prod
azure-comm-ea-cms-iusg-gss-smtp-nonprod
azure-comm-ea-cms-iusg-gss-smtp-prod
azure-comm-ea-cms-iusg-gss-vdi-nonprod
azure-comm-ea-cms-iusg-gss-vdi-prod
azure-comm-ea-cms-iusg-gss-securitycomp-prod
azure-comm-ea-cms-iusg-gss-logging-nonprod
azure-comm-ea-cms-iusg-gss-logging-prod
azure-comm-ea-cms-iusg-gss-nerdio-prod
azure-comm-ea-cms-iusg-gss-security-prod
azure-comm-ea-cms-iusg-gss-security-nonprod
azure-comm-ea-cms-iusg-gss-identity-prod
azure-comm-ea-cms-iusg-gss-securityauto-prod
azure-comm-ea-cms-iusg-gss-bigfix-prod
azure-comm-ea-cms-iusg-gss-connectivity-prod
azure-comm-ea-cms-iusg-gss-dataprotect-dev
azure-comm-ea-cms-iusg-gss-zscaler-prod
azure-comm-ea-cms-iusg-gss-dataprotect-prod
azure-comm-ea-cms-iusg-gss-dataprotect-test
azure-comm-ea-cms-iusg-gss-infoblox-prod
azure-comm-ea-cms-iusg-gss-c4testing1-dev
azure-comm-ea-cms-iusg-gss-ccgchatbot-dev
azure-comm-ea-cms-iusg-gss-ccgchatbot-test
azure-comm-ea-cms-iusg-gss-finops-prod
azure-comm-ea-cms-iusg-iam-workloads-prod
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
7/29/2026 - GCP - VM Manager Patching - PROD
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 7/29/2026 at 9:00 p.m. ET. The week's patches will impact the PROD environment for the affected GCP applications noted below.
Actions we are taking:
- GCP PROD
- GCP Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 7/29/2026 at 9:00 p.m. ET
End Time: Thursday, 7/30/2026 at 2:00 a.m. ET
Who will be impacted?
Project Name:
cms-cpt-workload1
FinOps-Tooling
gcp-cms-iusg-match-nonprod
gcp-cms-iusg-smtp-nonprod
gcp-cms-iusg-sharedvpc-prod
gcp-cms-iusg-security-nonprod
gcp-cms-iusg-ccsm-sandbox
gcp-cms-iusg-c4-nonprod
gcp-cms-iusg-helix-prod
gcp-cms-iusg-smtp-prod
gcp-cms-iusg-connectivity-prod
gcp-cms-iusg-sharedvpc-nonprod
gcp-cms-eadg-kmp-nonprod
gcp-cms-iusg-security-prod
gcp-cms-iusg-logging-nonprod
gcp-cms-iusg-goldimage-nonprod
gcp-cms-eadg-kmp-prod
gcp-cms-qmvig-eqrs-pa-nonprod
gcp-cms-iusg-logging-prod
gcp-cms-iusg-bigfix-prod
gcp-cms-iusg-goldimage-prod
gcp-cms-iusg-dprotect-nonprod
gcp-cms-iusg-infoblox-prod
gcp-cms-iusg-ad-prod
gcp-cms-iusg-dprotect-prod
gcp-cms-iusg-zscaler-prod
gcp-cms-iusg-patching-prod
gcp-cms-iusg-match-prod
gcp-cms-qmvig-eqrs-sf-nonprod
Master-Billing-Export
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
Need help? We are here to support you.
If you have any questions, don't hesitate to reach out to your assigned Hosting Coordinator. CMS IT Support can be reached via cloudsupport@cms.hhs.gov, or call (800) 562-1963, and is documented here at Support Page on cloud.cms.gov.
You are subscribed to receive email messages about CMS Cloud Operations, Changes, and Outages from the Centers for Medicare & Medicaid Services (CMS).
|
