|
Each week, the CMS Hybrid Cloud program provides a list of upcoming changes, maintenance windows, and updates to help customers build awareness and plan effectively and summarizes changes from the previous week.
This newsletter includes:
Completed change summary for the week of 8/6/2026
- 8/7/2026 - Splunk GovCloud Upgrade
- 8/9/2026 - Marketplace SSM Patching - Prod
To learn details about previous changes please go to the News and Updates section on cloud.cms.gov. (Secure Access required)
For Patching and Gold Image release schedule please view: Patching and Gold Image Release Calendar - 2026
AWS Patch Tag Naming Update
*Update on patch tag naming after new finding. No space or _ to be used.
Beginning July, AWS team converted patch tags naming from
· Patch Group to PatchGroup
· Patch Window to PatchWindow
The tag name change in AWS will "Allow tags in metadata" setting to be enabled on instances, to align with the system requirement and avoid metadata-related issues. The updated tag format will be used going forward.
The patching team completed all ITC changes according to the following schedule:
· Lower Environments: July 20-21, 2026 (Completed)
· Production: July 29, 2026 (Completed)
· Marketplace Production: August 9, 2026 (Completed)
As this is a behavioral change in the patching process, Technical Advisors are requested to coordinate with their respective ADOs and hosting coordinators to ensure the new tag format is updated and adopted in all future deployments. This change is specific to AWS patches only.
Please contact Enterprise Patching Team for questions / concerns.
8/14/2026 - Splunk MAG & OBH update to version 10.2.5
Summary:
The CMS Hybrid Cloud logging services team will perform maintenance patching to update Splunk Enterprise to version 10.2.5. These patches will be applied to Splunk servers in Splunk - MAG & OBH production environments.
Actions we are taking:
- Microsoft Azure (MAG) Splunk prod environment
- OBH Splunk prod environment
- Splunk version update
When is this happening?
Start Time: Friday, 8/14/2026 at 5:00 p.m. ET
End Time: Sunday, 8/16/2026 at 11:00 p.m. ET
Who will be impacted?
All customers using Splunk tool in Splunk MAG & OBH.
What is the impact?
Users of the Splunk tool could experience brief periods where search performance is slow or degraded while servers are being restarted after the patch is applied.
8/14/2026 - Splunk DC/ADC/KDC/BDC update to version 10.2.5
Summary:
The CMS Hybrid Cloud logging services team will perform maintenance patching to update Splunk Enterprise to version 10.2.5. in DC/ADC/KDC/BDC environments.
Actions we are taking:
- Splunk DC/ADC/KDC/BDC
- Splunk version update
When is this happening?
Start Time: Friday, 8/14/2026 at 5:00 p.m. ET
End Time: Sunday, 8/16/2026 at 5:00 p.m. ET
Who will be impacted?
All customers using Splunk DC environments.
What is the impact?
Users of the Splunk tool could experience brief periods where search performance is slow or degraded while servers are being restarted after the patch is applied.
8/14/2026 - Cloud Splunk Prod and OC environments update to version 10.2.5
Summary:
The CMS Hybrid Cloud logging services team will perform maintenance patching to update Splunk Enterprise to version 10.2.5. in Cloud Splunk Prod and OC environments.
Actions we are taking:
- Cloud Splunk Prod
- OC
- Splunk version update
When is this happening?
Start Time: Friday, 8/14/2026 at 5:00 p.m. ET
End Time: Sunday, 8/16/2026 at 5:00 p.m. ET
Who will be impacted?
All customers using Splunk tool in Cloud Splunk Prod and OC.
What is the impact?
Users of the Splunk tool could experience brief periods where search performance is slow or degraded while servers are being restarted after the patch is applied.
8/14/2026 - Splunk Prod - Increase indexer instances for OE14 to 66 indexers
Summary:
The CMS Cloud team will scale up Splunk indexers infrastructure as part of Open Enrollment (OE) readiness based on this year's game day exercise. This change is scheduled for Friday, 8/14/26 at 9:00 PM.
Actions we are taking:
- Upscaling Splunk indexers using IAC
- Splunk and ITSI will be placed in maintenance mode
When is this happening?
Start Time: Friday, 8/14/26 at 9:00 p.m. ET
End Time: Monday, 8/17/26 at 6:00 a.m. ET
Who will be impacted?
DRaaS ITSI, MITG MSI and EMM may have performance impacts when the Cloud Splunk indexers are being configured. Also, CCIC search heads peered to the Splunk environment might be impacted.
What is the impact?
There will be latency in adhoc searches that are performed by customers. Dashboards might also render slowly and have incomplete data while the changes are being propagated.
This is part of OE14 preparation work to meet the performance requirements.
8/15/2026 - DevOps Services Maintenance
Summary:
CMS Hybrid Cloud will be performing maintenance updates on its DevOps tools.
Actions we are taking:
When is this happening?
Start Time: Saturday, 8/15/2026 at 9:00 p.m. ET
End Time: Sunday, 8/16/2026 at 1:00 a.m. ET
Who will be impacted?
All AWS Commercial and GovCloud customers of SonarQube, CloudBees, JFrog.
What is the impact?
Customers should expect a short downtime for each service as instances are restarted within the maintenance window.
|
8/19/2026 - Non-marketplace SSM Patching - DEV/TEST/IMPL
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 8/19/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected Non-marketplace applications noted below.
Actions we are taking:
- Non-marketplace DEV/TEST/IMPL
- SSM Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 8/19/2026 at 6:00 p.m. ET
End Time: Wednesday, 8/19/2026 at 11:00 p.m. ET
Who will be impacted?
CEDAR, Million Hearts, FFSDCS, RASS, OC Base- eLDAP, SC CLIA, NTP LMS, Spott MACBIS, OC Base- WNMG, NEIL/HRES, OC Base- EWST, MacFin, eAPD Hi-C, OC Base- CMS Cloud Legacy, OC Base- DevSecOps SecDevOps, iServ, MDP, PECOS2.0, SEI, OC Base- PWSS, TRA, CMS ARTS, MCIM, RAD Analysis Tools, MCIM, Perm, CMS Cloud - CRE, CMS Cloud - Enterprise Agile Tools, CMS Cloud tamer, CMS Cloud - CARD, CMS Cloud - ECS Fargate, CMS Cloud - Direct Connect, CMS Cloud - Jfrog SonarCube, CMS Cloud - DNS Prod, CMS Cloud - Governance 2.0, MEOWx, CMS Cloud - CloudBees Jenkins, CMS Cloud - CET, CMS Cloud - DevSecOps, CMS Cloud - Utilities, CMS Cloud - Testrail, CMS Cloud - CircleCI, CMS Cloud - Sam GSS Security GovCloud, SWIFT, AWS HEIDI, MDX, MSPSC, QMAC, ESS-TOOLS, QCOR
MEPBS, EACMS, MacPro, PS&R, RDS, OC Base- APIM GEO, 1115 PMDA, CMS Cloud - Governance 2.0, CMS Cloud - QuickDNS, CMS Cloud - CMSNet, CMS Cloud - CCG Web Content, CMS Cloud - Network Arch, CMS Cloud - VPC Automation, CMS Cloud - Security Team, CMS Cloud - CCG Web Content, CMS Cloud Temporal, CMS Cloud - Splunk, CMS Cloud - CET, AWS GSS Security GC, occonfluence, ocjira, miniorange, ocsonarqube, MTF-PM, NDW, MacFin, MTF-DM, PECOS-OM, NGD
What is the impact?
Patches will be applied to the affected systems. For some customers, reboots may occur depending upon the tags applied.
8/19/2026 - Marketplace SSM Patching - DEV/TEST
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 8/19/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST environment for the affected Marketplace applications noted below.
Actions we are taking:
- Marketplace DEV/TEST
- SSM Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 8/19/2026 at 6:00 p.m. ET
End Time: Wednesday, 8/19/2026 at 11:00 p.m. ET
Who will be impacted?
FFM_Opera, FFM_QAO, VAMS, TWS, XES - XOC Tools, SERVIS, FFM_Shared_Services, FFM MLMS, XES - MSI Tech Lab, FFM_FM, FFM_TWS, XES - Service Virtualization, CMS Cloud - Advanced Monitoring
DSRS, FFM, FFM DSH, FFM EDI, FFM EFT, FFM ESDCU, MCR, FLH, OC Base- FLH, OC Base PET, FFM_MNPS
What is the impact?
Patches will be applied to the affected systems. For some customers, reboots may occur depending upon the tags applied.
8/19/2026 - MAG - Azure Update Manager Patching - DEV/TEST/IMPL
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 8/19/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected MAG applications noted below.
Actions we are taking:
- MAG DEV/TEST/IMPL
- MAG Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 8/19/2026 at 6:00 p.m. ET
End Time: Wednesday, 8/19/2026 at 11:00 p.m. ET
Who will be impacted?
Subscription:
CMS.VDC-CCS.IUSG.SharedServices.001.AG
ScopeInfoTech-CM-HEDIS PLD-005
Resource Group with Reboot:
RG-SS-LDAP-PROXY-DEV
RG-SS-LDAP-PROXY-VAL
Resource Group with No Reboot:
RG-AZE-HEDISPLD-DEV
RG-AZE-HEDISPLD-VAL
What is the impact?
Patches will be applied to the affected systems. For some customers, reboots may occur depending upon the tags applied.
8/19/2026 - Azure Commercial - Azure Update Manager Patching - DEV/TEST/IMPL
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 8/19/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected Azure commercial applications noted below.
Actions we are taking:
- Azure Commercial DEV/TEST/IMPL
- Azure Commercial Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 8/19/2026 at 6:00 p.m. ET
End Time: Wednesday, 8/19/2026 at 11:00 p.m. ET
Who will be impacted?
Subscription:
azure-comm-ea-cms-iusg-gss-patching-prod
azure-comm-ea-cms-iusg-gss-goldimage-prod
azure-comm-ea-cms-iusg-gss-smtp-nonprod
azure-comm-ea-cms-iusg-gss-smtp-prod
azure-comm-ea-cms-iusg-gss-vdi-nonprod
azure-comm-ea-cms-iusg-gss-vdi-prod
azure-comm-ea-cms-iusg-gss-securitycomp-prod
azure-comm-ea-cms-iusg-gss-logging-nonprod
azure-comm-ea-cms-iusg-gss-logging-prod
azure-comm-ea-cms-iusg-gss-nerdio-prod
azure-comm-ea-cms-iusg-gss-security-prod
azure-comm-ea-cms-iusg-gss-security-nonprod
azure-comm-ea-cms-iusg-gss-identity-prod
azure-comm-ea-cms-iusg-gss-securityauto-prod
azure-comm-ea-cms-iusg-gss-bigfix-prod
azure-comm-ea-cms-iusg-gss-connectivity-prod
azure-comm-ea-cms-iusg-gss-dataprotect-dev
azure-comm-ea-cms-iusg-gss-zscaler-prod
azure-comm-ea-cms-iusg-gss-dataprotect-prod
azure-comm-ea-cms-iusg-gss-dataprotect-test
azure-comm-ea-cms-iusg-gss-infoblox-prod
azure-comm-ea-cms-iusg-gss-c4testing1-dev
azure-comm-ea-cms-iusg-gss-ccgchatbot-dev
azure-comm-ea-cms-iusg-gss-ccgchatbot-test
azure-comm-ea-cms-iusg-gss-finops-prod
azure-comm-ea-cms-iusg-iam-workloads-prod
What is the impact?
Patches will be applied to the affected systems. For some customers, reboots may occur depending upon the tags applied.
8/19/2026 - GCP- VM Manager Patching - DEV/TEST/IMPL
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 8/19/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected GCP applications noted below.
Actions we are taking:
- GCP DEV/TEST/IMPL
- GCP Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 8/19/2026 at 6:00 p.m. ET
End Time: Wednesday, 8/19/2026 at 11:00 p.m. ET
Who will be impacted?
Project Name:
cms-cpt-workload1
FinOps-Tooling
gcp-cms-iusg-match-nonprod
gcp-cms-iusg-smtp-nonprod
gcp-cms-iusg-sharedvpc-prod
gcp-cms-iusg-security-nonprod
gcp-cms-iusg-ccsm-sandbox
gcp-cms-iusg-c4-nonprod
gcp-cms-iusg-helix-prod
gcp-cms-iusg-smtp-prod
gcp-cms-iusg-connectivity-prod
gcp-cms-iusg-sharedvpc-nonprod
gcp-cms-eadg-kmp-nonprod
gcp-cms-iusg-security-prod
gcp-cms-iusg-logging-nonprod
gcp-cms-iusg-goldimage-nonprod
gcp-cms-eadg-kmp-prod
gcp-cms-qmvig-eqrs-pa-nonprod
gcp-cms-iusg-logging-prod
gcp-cms-iusg-bigfix-prod
gcp-cms-iusg-goldimage-prod
gcp-cms-iusg-dprotect-nonprod
gcp-cms-iusg-infoblox-prod
gcp-cms-iusg-ad-prod
gcp-cms-iusg-dprotect-prod
gcp-cms-iusg-zscaler-prod
gcp-cms-iusg-patching-prod
gcp-cms-iusg-match-prod
gcp-cms-qmvig-eqrs-sf-nonprod
Master-Billing-Export
What is the impact?
Patches will be applied to the affected systems. For some customers, reboots may occur depending upon the tags applied.
8/19/2026 - AWS Outpost SSM Patching - DEV/TEST/IMPL
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 8/19/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected AWS Outpost applications noted below.
Actions we are taking:
- AWS Outpost DEV/TEST/IMPL
- SSM Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 8/19/2026 at 6:00 p.m. ET
End Time: Wednesday, 8/19/2026 at 11:00 p.m. ET
Who will be impacted?
IDM, ECISWebservers-Outposts, AGX - Outpost, FM Interact/FM Systems, SWIFT - Outposts, Druva-Outposts
What is the impact?
Patches will be applied to the affected systems. For some customers, reboots may occur depending upon the tags applied.
Need help? We are here to support you.
If you have any questions, don't hesitate to reach out to your assigned Hosting Coordinator. CMS IT Support can be reached via cloudsupport@cms.hhs.gov, or call (800) 562-1963, and is documented her | 
