Each week, the CMS Cloud program provides a list of upcoming changes, maintenance windows, and updates to help customers build awareness and plan effectively and summarizes changes from the previous week.
This newsletter includes:
Completed change summary for the week of 8/28/2025
- 8/30/2025 - Enterprise Testing Services Maintenance
- 8/30/2025 - Lambda runtime upgrade version to NodeJS 22.x on all AWS Gov Cloud accounts
- 8/31/2025 - Restart Production and Non-Prod HEC Servers
To learn details about previous changes please go to the News and Updates section on cloud.cms.gov. (Secure Access required)
For Patching and Gold Image release schedule please view :Patching and Gold Image Release Calendar - 2025
9/6/2025 - Splunk Universal Forwarder Agent Upgrade to 9.4.2
Summary:
Splunk Universal Forwarder (UF) agents installed and patched via SSM will be updated to version 9.4.2. This will not require a reboot or any action by customers, and all failures will be tracked and reported to the Splunk team by Patching team.
Actions we are taking:
- Marketplace PROD
- Splunk UF Forwarder Agent upgrade to 9.4.2
When is this happening?
Start Time: Saturday, 9/6/2025 at 11:00 p.m. ET
End Time: Sunday, 9/7/2025 at 12:00 a.m. ET
Who will be impacted?
All customers with Splunk UF installed and managed by CMS OIT Hybrid Cloud team in the environments noted above will have their agents updated via SSM. All other environments will be updated in the next change cycle.
FFM_Opera, FFM_QAO XES - CyberArk, OCEAN, VAMS, TWS, XES - XOC Tools, SERVIS, FFM_Shared_Services, FFM MLMS, XES - MSI Tech Lab, FFM_FM, FFM_TWS, FFM_PM, XES - Service Virtualization
DSRS, FFM, FFM DSH, FFM EDI, FFM EFT, FFM ESDCU, MCR, FLH, OC Base- FLH, OC Base PET, FFM_MNPS
What is the impact?
There is no expected impact to customers.
9/6/2025 - DevOps Services Maintenance
Summary:
CMS Hybrid Cloud will be performing maintenance updates on its DevOps tools.
Actions we are taking:
- Update Node Gold Image AMIs for CloudBees, Jfrog, & Sonarqube
- Upgrade EKS add-ons and supporting components for CloudBees & Jfrog
- Upgrade application versions for CloudBees Jenkins CI and managed controllers
When is this happening?
Start time: Saturday, 9/6/2025 at 9:00 p.m. ET
End time: Sunday, 9/7/2025 at 1:00 a.m. ET
Who will be impacted?
All AWS Commercial and GovCloud customers of Sonarqube, CloudBees, and JFrog.
What is the impact?
Customers should expect a short downtime for each service as instances are restarted within the maintenance window.
9/7/2025 - Marketplace SSM patching - PROD
Summary:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Sunday, 9/7/2025 at 12:00 a.m. ET. The week's patches will impact the PROD environment for the affected Marketplace applications noted below.
Actions we are taking:
- Marketplace PROD
- SSM Linux & Windows Vulnerability Patching
When is this happening?
Start Time: Sunday, 9/7/2025 at 12:00 a.m. ET
End Time: Sunday, 9/7/2025 at 4:00 a.m. ET
Who will be impacted?
FFM_Opera, XES - CyberArk, OCEAN, VAMS, TWS, XES - XOC Tools, SERVIS, FFM_Shared_Services, FFM MLMS, XES - MSI Tech Lab, FFM_FM, FFM_TWS, FFM_PM, XES - Service Virtualization
DSRS, FFM, FFM DSH, FFM EDI, FFM EFT, FFM ESDCU, MCR, FLH, OC Base- FLH, OC Base PET, FFM_MNPS
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending on tags.
9/7/2025 - Restart Production and Non-Prod HEC Servers
Summary:
The CMS Hybrid Cloud Splunk team will perform a rolling restart of the HEC Splunk Services. This will be performed weekly as part of Open Enrollment activities.
Actions we are taking:
- Restarting the Prod and Non-Prod HEC Forwarders
When is this happening?
Start Time: Sunday 9/7/2025 at 8:00 a.m. ET
End Time: Sunday, 9/7/2025 at 11:00 a.m. ET
Who will be impacted?
MITG and MSI
What is the impact?
This change has low impact. We have 45 prod HEC services and 18 Non-Prod and we only restart 5 at a time. The majority of load balanced HEC servers will be available as the restarts progress and they have sufficient capacity to handle all ingest streams.
Need help? We are here to support you.
If you have any questions, don't hesitate to reach out to your assigned Hosting Coordinator. CMS IT Support can be reached via cloudsupport@cms.hhs.gov, or call (800) 562-1963, and is documented here at Support Page on cloud.cms.gov.
Urgent Reminder - New DLTA Version v3.2.5a Now Available!
Summary:
The new version of DLTA (v3.2.5a), now using Node.js 20, is available in the AWS Service Catalog.
This update ensures compatibility with AWS Lambda, as Node.js 18 will be deprecated on September 1st 2025. We recommend updating to this version to maintain support and avoid disruptions.
Actions:
The DLTA v3.2.5a version was released to AWS Service Catalog on August 14. It upgrades Lambda NodeJS version from 18 to 20.
Reference:
|