--- title: Elastic FedRAMP authorized Cloud offerings description: Elastic users can take advantage of the FedRAMP authorized Cloud offerings to host sensitive data in a secure environment that meets their regulatory... url: https://www.elastic.co/elastic/docs-builder/docs/3016/deploy-manage/deploy/elastic-cloud/fedramp products: - Elastic Cloud Hosted applies_to: - Elastic Cloud Hosted: Generally available --- # Elastic FedRAMP authorized Cloud offerings Elastic users can take advantage of the FedRAMP authorized Cloud offerings to host sensitive data in a secure environment that meets their regulatory and compliance requirements. FedRAMP Moderate deployments are available to all users who have a Platinum or Enterprise subscription level. FedRAMP High deployments are available to United States federal, state, and local agencies as well as tribal groups that have an Enterprise subscription level. All FedRAMP deployments are hosted on AWS GovCloud (U.S.). Learn about the Elastic FedRAMP offerings: - [Comparison of available features](#ec-fedramp-comparison) - [Get started with FedRAMP](#ec-fedramp-get-started) - [Limitations](#ec-fedramp-limitations) - [FedRAMP FAQ](#ec-fedramp-faq) ## Comparison of available features This table provides a comparison of features and capabilities included in Elastic Cloud Hosted and all FedRAMP authorized Cloud offerings. | Feature | Elastic Cloud Hosted | FedRAMP Moderate | FedRAMP High | |-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------|----------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------| | Trial period | 14 days | 30 days | none | | Marketplace offering | AWS/GCP/Azure | AWS GovCloud | AWS GovCloud | | Cloud service provider | AWS/GCP/Azure | AWS GovCloud | AWS GovCloud | | [Required subscription level](https://www.elastic.co/pricing) | Standard, Gold, Platinum, Enterprise | Platinum, Enterprise | Enterprise | | [Available regions](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3016/reference/cloud-hosted/regions) | 50+ regions | `us-gov-east-1` | `us-gov-east-1` | | Allowed users | All | All | U.S. federal, state, and local agencies; tribal groups | | IPv6 support at the edge | No | Yes | Yes | | [Bring Your Own Key (BYOK)](https://www.elastic.co/elastic/docs-builder/docs/3016/deploy-manage/security/encrypt-deployment-with-customer-managed-encryption-key) | Yes | No | No | | [Support policy](https://www.elastic.co/support/welcome) | Global coverage | Global coverage or optional U.S. persons on U.S. soil support available | U.S. persons on U.S. soil support | | [Kibana connectors](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3016/reference/kibana/connectors-kibana) | All connector types | Email, Index, Webhook, Gen-AI, Bedrock, Gemini, Inference, Slack, Slack-API, PagerDuty | Email, Index, Webhook, Gen-AI, Bedrock, Gemini, Inference, Slack, Slack-API, PagerDuty | | [Cross-cluster search](https://www.elastic.co/elastic/docs-builder/docs/3016/explore-analyze/cross-cluster-search) and [cross-cluster replication](https://www.elastic.co/elastic/docs-builder/docs/3016/deploy-manage/tools/cross-cluster-replication) | Yes | Yes | Yes | | [Private connectivity](https://www.elastic.co/elastic/docs-builder/docs/3016/deploy-manage/security/private-connectivity) | Yes | Yes | No | | [AutoOps](https://www.elastic.co/elastic/docs-builder/docs/3016/deploy-manage/monitor/autoops) | Yes | No | No | | [Synthetic monitoring](https://www.elastic.co/elastic/docs-builder/docs/3016/solutions/observability/synthetics) | Yes | No | No | | [Elastic Inference Service](https://www.elastic.co/elastic/docs-builder/docs/3016/explore-analyze/elastic-inference/eis) | Yes | No | No | | [Managed OTLP Endpoint (mOTLP)](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3016/reference/opentelemetry/motlp) | Yes | No | No | | [Custom bundles and plugins](https://www.elastic.co/elastic/docs-builder/docs/3016/deploy-manage/deploy/elastic-cloud/upload-custom-plugins-bundles) | Yes | Yes | No | | [Elastic AI Assistant for Observability and Search](https://www.elastic.co/elastic/docs-builder/docs/3016/solutions/observability/ai/observability-ai-assistant), [Elastic AI Assistant for Security](https://www.elastic.co/elastic/docs-builder/docs/3016/solutions/security/ai/ai-assistant) | Yes | Elastic Managed LLM not available | Elastic Managed LLM not available | | [Attack Discovery](https://www.elastic.co/elastic/docs-builder/docs/3016/solutions/security/ai/attack-discovery) | Yes | Yes | TBD | | [Universal profiling](https://www.elastic.co/elastic/docs-builder/docs/3016/solutions/observability/infra-and-hosts/universal-profiling) | Yes | No | No | ## Get started with FedRAMP FedRAMP Moderate deployments are available for self-serve setup. Refer to the [Elastic FedRAMP authorized cloud offerings](https://www.elastic.co/industries/public-sector/fedramp) page to get started with a free trial. To get started on FedRAMP High, [contact our support team](/elastic/docs-builder/docs/3016/troubleshoot#contact-us). ## Limitations There are some limitations to note for using the FedRAMP authorized Cloud offerings. ### TLS **Applies to:** FedRAMP Moderate, FedRAMP High Only FIPS 140-2 compliant TLS protocols, ciphers, and curve types are allowed to be used as listed below. - The supported TLS versions are `TLS v1.2` and `TLS v1.3`. - The supported cipher suites are: - `TLS v1.2`: `ECDHE-RSA-AES-128-GCM-SHA256`, `ECDHE-RSA-AES-256-GCM-SHA384`, `ECDHE-ECDSA-AES-128-GCM-SHA256`, `ECDHE-ECDSA-AES-256-GCM-SHA384` - `TLS v1.3`: `TLS-AES-128-GCM-SHA256`, `TLS-AES-256-GCM-SHA384` - The supported curve types are `P-256`, `P-384` and `P-521`. Support for encrypted private keys is not available, as the cryptographic modules used for decrypting password protected keys are not FIPS validated. If an output or any other component with an SSL key that is password protected is configured, the components will fail to load the key. When running in FIPS mode, you must provide non-encrypted keys. Be sure to enforce security in your FIPS environments through other means, such as strict file permissions and access controls on the key file itself, for example. ### Elastic Defend **Applies to:** FedRAMP Moderate, FedRAMP High The Elastic Defend integration that runs on hosts being protected has various features that require data to be sent directly to Elastic-managed cloud services. The data sent is not sourced from within the secure enclave on the host. However, you may still want to adjust the configuration for your FedRAMP Moderate and FedRAMP High environments. You can use the [advanced setting](https://www.elastic.co/elastic/docs-builder/docs/3016/reference/security/defend-advanced-settings) `[linux,mac,windows].advanced.allow_cloud_features` to activate or deactivate each Elastic Defend feature individually. ### Custom plugins **Applies to:** FedRAMP High Custom plugins are currently not supported in FedRAMP High deployments. ## FedRAMP FAQ Find answers here to some common questions about using the FedRAMP authorized Cloud offerings. - [Who can use FedRAMP?](#who-can-use-fedramp) - [Where is FedRAMP hosted?](#where-is-fedramp-hosted) The FedRAMP authorized Cloud offerings are intended for users who require their Elastic Cloud services to meet special security and compliance requirements: - FedRAMP Moderate is available to all users having a Platinum or Enterprise subscription level. - FedRAMP High is available to United States federal, state, and local agencies as well as tribal groups. An Enterprise subscription level is required. FedRAMP Moderate and FedRAMP High Elastic Cloud deployments are hosted on [AWS GovCloud (US)](https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/whatis.html) in the `us-gov-east-1` region.