|
Each week, the CMS Hybrid Cloud program provides a list of upcoming changes, maintenance windows, and updates to help customers build awareness and plan effectively and summarizes changes from the previous week.
This newsletter includes:
Completed change summary for the week of 1/8/2026
- 1/9/2026 - Restart Production, Non-Prod and GovCloud HEC Servers
To learn details about previous changes please go to the News and Updates section on cloud.cms.gov. (Secure Access required)
For Patching and Gold Image release schedule please view: Patching and Gold Image Release Calendar - 2026
1/17/2026 - Downscale Splunk Prod Indexers to 75
Summary:
The Logging Services team will scale down Splunk indexer infrastructure as part of post Open Enrollment (OE) activities.
Actions we are taking:
- Downscaling Splunk indexers using IAC
When is this happening?
Start Time: Saturday, 1/17/26 at 6:00 am ET
End Time: Saturday, 1/17/26 at 6:00 pm ET
Who will be impacted?
DRaaS ITSI, MITG MSI and EMM may have performance impacts when the Cloud Splunk indexers are being downscaled. Also, CCIC search heads peered to the Splunk environment might be impacted.
What is the impact?
There may be latency in adhoc searches that are performed by customers. Dashboards might also render slowly and have incomplete data while the changes are being propagated.
1/17/2026 - DevOps Services Maintenance
Summary:
CMS Hybrid Cloud will be performing maintenance updates on its DevOps tools.
Actions we are taking:
- Update node gold image AMIs for CloudBees , Jfrog & Sonarqube
- Upgrade EKS add-ons and supporting components for CloudBees & Jfrog
- Upgrade application versions for CloudBees Jenkins CI, managed controllers and SonarQube.
When is this happening?
Start Time: Saturday, 1/17/2026 at 9:00 p.m. ET
End Time: Sunday, 1/18/2026 at 1:00 a.m. ET
Who will be impacted?
All AWS Commercial and GovCloud customers of SonarQube, CloudBees, JFrog.
What is the impact?
Customers should expect a short downtime for each service as instances are restarted within the maintenance window.
1/21/2026 - Azure Update Manager Patching - Dev/Test/IMPL
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 1/21/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected MAG applications noted below.
Actions we are taking:
- MAG DEV/TEST/IMPL
- MAG Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 1/21/2026 at 6:00 p.m. ET
End Time: Wednesday, 1/21/2026 at 11:00 p.m. ET
Who will be impacted?
Subscription:
CMS.VDC-CCS.IUSG.SharedServices.001.AG
ScopeInfoTech-CM-HEDIS PLD-005
Resource Group with Reboot:
RG-SS-LDAP-PROXY-DEV
RG-SS-LDAP-PROXY-VAL
Resource Group with No Reboot:
RG-AZE-HEDISPLD-DEV
RG-AZE-HEDISPLD-VAL
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
1/21/2026 - Marketplace SSM Patching - Dev/Test
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 1/21/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST environment for the affected Marketplace applications noted below.
Actions we are taking:
- Marketplace DEV/TEST
- SSM Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 1/21/2026 at 6:00 p.m. ET
End Time: Wednesday, 1/21/2026 at 11:00 p.m. ET
Who will be impacted?
FFM_Opera, FFM_QAO XES - CyberArk, VAMS, TWS, XES - XOC Tools, SERVIS, FFM_Shared_Services, FFM MLMS, XES - MSI Tech Lab, FFM_FM, FFM_TWS, XES - Service Virtualization, CMS Cloud - Advanced Monitoring
DSRS, FFM, FFM DSH, FFM EDI, FFM EFT, FFM ESDCU, MCR, FLH, OC Base- FLH, OC Base PET, FFM_MNPS
What is the impact?
Patches will be applied to the affected areas, reboots may take places where tags are applied.
1/21/2026 - Non-Marketplace SSM Patching - Dev/Test/IMPL
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 1/21/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected Non-Marketplace applications noted below.
Actions we are taking:
- Non-Marketplace DEV/TEST
- SSM Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Wednesday, 1/21/2026 at 6:00 p.m. ET
End Time: Wednesday, 1/21/2026 at 11:00 p.m. ET
Who will be impacted?
CEDAR, Million Hearts, FFSDCS, RASS, OC Base- eLDAP, SC CLIA, NTP LMS, Spott MACBIS, MDP, OC Base- WNMG, NEIL/HRES, OC Base- EWST, MacFin, eAPD Hi-C, OC Base- CMS Cloud Legacy, OC Base- DevSecOps SecDevOps, iServ, MDP, PECOS2.0, SEI, OC Base- PWSS, TRA, CMS ARTS, MCIM, RAD Analysis Tools, MCIM, Perm, CMS Cloud - CRE, CMS Cloud - Enterprise Agile Tools, CMS Cloud tamer, CMS Cloud - CARD, CMS Cloud - ECS Fargate, CMS Cloud - Direct Connect, CMS Cloud - Jfrog SonarCube, CMS Cloud - DNS Prod, CMS Cloud - SRE, CMS Cloud - Governance 2.0, MEOWx, CMS Cloud - CloudBees Jenkins, CMS Cloud - CET, CMS Cloud - DevSecOps, CMS Cloud - Utilities, CMS Cloud - Testrail, CMS Cloud - CircleCI, CMS Cloud - Sam GSS Security GovCloud, SWIFT, AWS HEIDI, MDX, MSPSC, QMAC
MEPBS, EACMS, MacPro, PS&R, RDS, OC Base- APIM GEO, 1115 PMDA, CMS Cloud - Governance 2.0, CMS Cloud - QuickDNS, CMS Cloud - CMSNet, CMS Cloud - CCG Web Content, CMS Cloud - Network Arch, CMS Cloud - VPC Automation, CMS Cloud - Security Team, CMS Cloud - CCG Web Content, CMS Cloud Temporal, CMS Cloud - Splunk, CMS Cloud - CET, AWS GSS Security GC, occonfluence, ocjira, miniorange, ocsonarqube, MTF-PM, NDW, MacFin, MTF-DM
What is the impact?
Patches will be applied to the affected areas and reboots where tags are applied.
Need help? We are here to support you.
If you have any questions, don't hesitate to reach out to your assigned Hosting Coordinator. CMS IT Support can be reached via cloudsupport@cms.hhs.gov, or call (800) 562-1963, and is documented here at Support Page on cloud.cms.gov.
Reminder - Open Enrollment (OE13) - Moratorium
Summary:
To help ensure that we maintain good system performance and stability during CMS Healthcare Open Enrollment, an annual Moratorium period has been established to shift the scheduling of production changes into designated weekly maintenance windows which occurs on most Sundays.
Key Dates: (click to download the OE13 schedule and key dates file)
Start time: Wednesday, October 1st 2025 at 12:00 AM
End time: Friday, January 16th 2026 at 5:00 AM
November 1 – First Day of Open Enrollment (Saturday)
January 10 - 16 – High Volume/Maintenance Period – No Maintenance (Before the deadline for 2/1/2026 coverage which ends on 1/16/2026, 5:00 AM when OE Ends for the FFE due to Alaska/Hawaii Extension)
- No planned down-time – all Marketplace systems should be available
- No infrastructure changes should be implemented
- All the Security Scans should be paused 1/13/2026, 8:00 PM – 1/16/2026, 8:00 PM.
January 15 – Last Day of Open Enrollment **
January 16 (at 5:00 AM) – Open Enrollment closes; Last day of the Moratorium
**Should CMS extend the Marketplace Open Enrollment period, the Moratorium period may also be extended**
Who will be impacted:
Any Hybrid Cloud IT Operations team planning to make a change to a system supporting the CMS Healthcare Marketplace either directly or indirectly.
All Marketplace systems not subject to this moratorium guidance should continue to deploy Operating Systems patches during Open Enrollment. This includes:
- All patching cycles during Open Enrollment.
- Utilizing the CMS Hybrid Cloud managed patching service through AWS Systems Manager (SSM).
- If not subject to patching, the ADO will have to untag the instance as automation is not disabled.
You are subscribed to receive email messages about CMS Cloud Operations, Changes, and Outages from the Centers for Medicare & Medicaid Services (CMS).
|
