Oracle Cloud Infrastructure US Government Cloud with FedRAMP Authorization

This topic contains information specific to Oracle Cloud Infrastructure US Government Cloud with FedRAMP High Joint Authorization Board.

Authorizations

Oracle Cloud Infrastructure US Government Cloud has obtained the following authorizations:

  • FedRAMP High
  • DISA Impact Level 4

For information about the US Government Cloud, see For All US Government Cloud Customers.

Regions

The region names and identifiers for the US Government Cloud with FedRAMP High Joint Authorization Board are shown in the following table:

Region Name Region Identifier Region Location Region Key Realm Key Availability Domains
US Gov East (Ashburn) us-langley-1 Ashburn, VA LFI OC2 1
US Gov West (Phoenix) us-luke-1 Phoenix, AZ LUF OC2 1

After your tenancy is created in one of these regions, you can subscribe to the other region. Tenancies in the FedRAMP-authorized regions cannot subscribe to the commercial regions, or to the US Federal Cloud regions. For information about subscribing to a region, see Managing Regions.

US Government Cloud with FedRAMP Authorization API Reference and Endpoints

US Government Cloud with FedRAMP High Joint Authorization Board has these APIs and corresponding regional endpoints:

Announcements API

API reference

  • https://announcements.us-langley-1.oraclegovcloud.com
  • https://announcements.us-luke-1.oraclegovcloud.com
API Gateway API

API reference

  • https://apigateway.us-langley-1.oci.oraclegovcloud.com
  • https://apigateway.us-luke-1.oci.oraclegovcloud.com
Autoscaling API

API reference

  • https://autoscaling.us-langley-1.oci.oraclegovcloud.com
  • https://autoscaling.us-luke-1.oci.oraclegovcloud.com
Core Services (covering Networking, Compute, and Block Volume)

The Networking, Compute, and Block Volume services are accessible with the following API:

Core Services API

API reference

  • https://iaas.us-langley-1.oraclegovcloud.com
  • https://iaas.us-luke-1.oraclegovcloud.com
Container Engine for Kubernetes API

API reference

  • https://containerengine.us-langley-1.oci.oraclegovcloud.com
  • https://containerengine.us-luke-1.oci.oraclegovcloud.com
Database API

API reference

  • https://database.us-langley-1.oraclegovcloud.com
  • https://database.us-luke-1.oraclegovcloud.com

You can track the progress of long-running Database operations with the Work Requests API.

Digital Assistant API

API reference

  • https://digitalassistant.us-langley-1.oci.oraclegovcloud.com
  • https://digitalassistant.us-luke-1.oci.oraclegovcloud.com
Email Delivery API

API reference

  • https://ctrl.email.us-langley-1.oci.oraclegovcloud.com
  • https://ctrl.email.us-luke-1.oci.oraclegovcloud.com
Events API

API reference

  • https://events.us-langley-1.oci.oraclegovcloud.com
  • https://events.us-luke-1.oci.oraclegovcloud.com
File Storage API

API reference

  • https://filestorage.us-langley-1.oraclegovcloud.com
  • https://filestorage.us-luke-1.oraclegovcloud.com
Functions API

API reference

  • https://functions.us-langley-1.oci.oraclegovcloud.com
  • https://functions.us-luke-1.oci.oraclegovcloud.com
IAM API

API reference

  • https://identity.us-langley-1.oraclegovcloud.com
  • https://identity.us-luke-1.oraclegovcloud.com
Note

Use the Endpoint of Your Home Region for All IAM API Calls

When you sign up for Oracle Cloud Infrastructure, Oracle creates a tenancy for you in one region. This is your home region. Your home region is where your IAM resources are defined. When you subscribe to a new region, your IAM resources are replicated in the new region, however, the master definitions reside in your home region and can only be changed there. Make all IAM API calls against your home region endpoint. The changes automatically replicate to all regions. If you try to make an IAM API call against a region that is not your home region, you will receive an error. See How do I find my tenancy home region?

Key Management API (for the Vault service)

API reference

  • https://kms.us-langley-1.oraclegovcloud.com
  • https://kms.us-luke-1.oraclegovcloud.com

In addition to these endpoints, each vault has a unique endpoint for create, update, and list operations for keys. This endpoint is referred to as the control plane URL or management endpoint. Each vault also has a unique endpoint for cryptographic operations. This endpoint is known as the data plane URL or the cryptographic endpoint.

Events API

API reference

  • https://events.us-langley-1.oraclegovcloud.com
  • https://events.us-luke-1.oraclegovcloud.com
Marketplace Service API

API reference

  • https://marketplace.us-langley-1.oci.oraclegovcloud.com
  • https://marketplace.us-luke-1.oci.oraclegovcloud.com
Monitoring API

API reference

  • https://telemetry-ingestion.us-langley-1.oraclegovcloud.com
  • https://telemetry-ingestion.us-luke-1.oraclegovcloud.com
  • https://telemetry.us-langley-1.oraclegovcloud.com
  • https://telemetry.us-luke-1.oraclegovcloud.com
Notifications API

API reference

  • https://notification.us-langley-1.oraclegovcloud.com
  • https://notification.us-luke-1.oraclegovcloud.com

The source service must be available in US Government Cloud regions for messages to be successfully sent through the Notifications service. If the source service is not available in these regions, then the message is not sent. For a list of unavailable services, see Services Not Supported in US Government Cloud with FedRAMP Authorization.

Object Storage and Archive Storage APIs

Both Object Storage and Archive Storage are accessible with the following APIs:

Object Storage API

API reference

  • https://objectstorage.us-langley-1.oraclegovcloud.com
  • https://objectstorage.us-luke-1.oraclegovcloud.com
Amazon S3 Compatibility API

API reference

  • https://<object_storage_namespace>.compat.objectstorage.us-langley-1.oraclegovcloud.com
  • https://<object_storage_namespace>.compat.objectstorage.us-luke-1.oraclegovcloud.com
Tip

See Understanding Object Storage Namespaces for information regarding how to find your Object Storage namespace.
Swift API (for use with Oracle RMAN)
  • https://swiftobjectstorage.us-langley-1.oraclegovcloud.com
  • https://swiftobjectstorage.us-luke-1.oraclegovcloud.com
Oracle Cloud VMware Solution API

API reference

  • https://ocvps.us-langley-1.oci.oraclegovcloud.com
  • https://ocvps.us-luke-1.oci.oraclegovcloud.com
Registry

Registry

  • US Gov East (Ashburn)
    • ocir.us-langley-1.oci.oraclegovcloud.com
  • US Gov West (Phoenix)
    • ocir.us-luke-1.oci.oraclegovcloud.com
Resource Manager API

API reference

  • https://resourcemanager.us-langley-1.oci.oraclegovcloud.com
  • https://resourcemanager.us-luke-1.oci.oraclegovcloud.com
Streaming API

API reference

  • https://streaming.us-langley-1.oci.oraclegovcloud.com
  • https://streaming.us-luke-1.oci.oraclegovcloud.com
Vault Service Key Management API

API reference

  • https://kms.us-langley-1.oraclegovcloud.com
  • https://kms.us-luke-1.oraclegovcloud.com
Vault Service Secret Management API

API reference

  • https://vaults.us-langley-1.oraclegovcloud.com
  • https://vaults.us-luke-1.oraclegovcloud.com
Vault Service Secret Retrieval API

API reference

  • https://secrets.us-langley-1.oraclegovcloud.com
  • https://secrets.us-luke-1.oraclegovcloud.com
Work Requests API (for Compute and Database work requests)

API reference

  • https://iaas.us-langley-1.oraclegovcloud.com
  • https://iaas.us-luke-1.oraclegovcloud.com

Oracle YUM Repo Endpoints

The Oracle YUM repo regional endpoints for US Government Cloud with FedRAMP High Joint Authorization Board are shown in the following table

Region YUM Server Endpoint
US Gov East (Ashburn)
  • https://yum.us-langley-1.oci.oraclegovcloud.com
  • https://yum-us-langley-1.oracle.com
US Gov West (Phoenix)
  • https://yum.us-luke-1.oci.oraclegovcloud.com
  • https://yum-us-luke-1.oracle.com

SMTP Authentication and Connection Endpoints

Email Delivery only supports the AUTH PLAIN command when using SMTP authentication. If the sending application is not flexible with the AUTH command, an SMTP proxy/relay can be used. For more information about the AUTH command, see AUTH Command and its Mechanisms.

Region SMTP Connection Endpoint
US Gov East (Ashburn) smtp.email.us-langley-1.oci.oraclegovcloud.com
US Gov West (Phoenix) smtp.email.us-luke-1.oci.oraclegovcloud.com

SPF Record Syntax

An SPF record is a TXT record on your sending domain that authorizes Email Delivery IP addresses to send on your behalf. SPF is required for subdomains of oraclegovcloud.com and recommended in other cases. The SPF record syntax for each sending region is shown in the following table:

Realm Key SPF Record
OC2 v=spf1 include:rp.email.oci.oraclegovcloud.com ~all
The Realm Key is applicable for any sending regions in that realm.

Services Not Supported in US Government Cloud with FedRAMP Authorization

The following services are currently not available or not supported for tenancies in the US Government Cloud with FedRAMP High Joint Authorization Board.

Database services not available:

  • Autonomous Data Warehouse
  • Autonomous Transaction Processing
  • Data Safe

Solutions and Platform services not available:

  • Analytics Cloud
  • Fusion Analytics Warehouse
  • Application Migration
  • Compliance Documents
  • Content and Experience
  • DNS Zone Management
  • Health Checks
  • Integration
  • Traffic Management Steering Policies

Governance and Administration features not supported:

  • Auto-federation with Oracle Identity Cloud Service
  • WAF service

Integration with Oracle SaaS and PaaS services, including those listed here: Getting Started with Oracle Platform Services

Additional Information for US Government Cloud with FedRAMP Authorization Customers