Oracle Cloud Infrastructure Attains Expanded FedRAMP Authorization
February 07, 2024

More than 16 new Oracle Cloud Infrastructure (OCI) services and features have attained FedRAMP approval, bringing enhanced AI, DevOps, and security capabilities to federal agencies and partners.

In total, customers can now benefit from 93 FedRAMP authorized services available in Oracle's U.S. government regions.

"Adding these new services to our U.S. government cloud underscores our commitment to providing our government customers with comprehensive cloud services, and we will continue to use feedback from our customers to build new innovative solutions," said Rand Waldron, vice president, Global Government Sector, Oracle. "Moreover, government agencies and the companies that support them can always use our government cloud regions at the same globally consistent price as our public cloud, enabling them to spend more of their resources on core mission needs."

The newly approved services include: OCI DevOps Service, OCI Data Labeling, OCI AI Vision, OCI AI Forecasting, OCI AI Speech to Text, OCI AI Language, OCI Web Application Firewall, OCI Network Firewall, Oracle Data Safe, Oracle NoSQL Database Cloud Service, Oracle Content Management, Visual Builder Cloud Service, Application Performance Monitoring, Ksplice, License Manager, and Oracle Big Data Service.

Highlights of the new capabilities available at FedRAMP High in the U.S. Government Cloud include:

- Network Firewall is an integrated, cloud native, managed firewall service built using next-generation technology from Palo Alto Networks.

- DevOps service is a complete continuous integration/continuous delivery (CI/CD) platform for developers to simplify and automate their software development lifecycle.

- AI Vision is an AI service for performing deep-learning–based image analysis at scale.

- AI Forecasting delivers univariate and multivariate time-series forecasts through statistical, machine learning, and deep learning algorithms.

- Data Safe empowers organizations to understand data sensitivity, evaluate data risks, mask sensitive data, implement and monitor security controls, assess user security, and monitor user activity—all in a single, unified console.

- Big Data Service is a fully managed, automated cloud service that provides enterprises with a cost-effective Hadoop environment.

Oracle has also introduced nine new features to existing FedRAMP High approved cloud services:

- DevOps users can now create a DevOps project to group the resources required to implement a CI/CD workflow. Developers can build and manage pipelines for compiling, testing, and running software applications before deployment. Development teams can also create private code repositories or connect to external code repositories such as GitHub, GitLab, Bitbucket Cloud, Visual Builder Studio, Bitbucket Server, and GitLab Server.

- Identity and Access Management (IAM) can now use identity domains to provide identity and access management features such as authentication, single sign-on (SSO), and identity lifecycle management for Oracle Cloud, as well as for Oracle and non-Oracle applications, whether they are SaaS, cloud hosted, or on premises.

- Cloud Guard Threat Detector now identifies malicious activities and reduces the volume of alerts that security operators need to manage with serious threats. Using the MITRE ATT&CK framework and Oracle's threat intelligence and data science capabilities, Threat Detector uncovers nefarious behaviors across an organization's network.

To attain the approval for these services and features, Oracle used a FedRAMP recognized third-party assessment organization (3PAO). The services were then thoroughly reviewed and approved by technical representatives from FedRAMP's Joint Authorization Board (JAB) for use within the Oracle Cloud FedRAMP High Authorized offering.

Share this

Industry News

May 01, 2024

Amazon Web Services (AWS) announced the general availability of Amazon Q, a generative artificial intelligence (AI)-powered assistant for accelerating software development and leveraging companies’ internal data.

May 01, 2024

Red Hat announced the general availability of Red Hat Enterprise Linux 9.4, the latest version of the enterprise Linux platform.

May 01, 2024

ActiveState unveiled Get Current, Stay Current (GCSC) – a continuous code refactoring service that deals with breaking changes so enterprises can stay current with the pace of open source.

May 01, 2024

Lineaje released Open-Source Manager (OSM), a solution to bring transparency to open-source software components in applications and proactively manage and mitigate associated risks.

May 01, 2024

Synopsys announced the availability of Polaris Assist, an AI-powered application security assistant on the Synopsys Polaris Software Integrity Platform®.

April 30, 2024

Backslash Security announced the findings of its GPT-4 developer simulation exercise, designed and conducted by the Backslash Research Team, to identify security issues associated with LLM-generated code. The Backslash platform offers several core capabilities that address growing security concerns around AI-generated code, including open source code reachability analysis and phantom package visibility capabilities.

April 30, 2024

Azul announced that Azul Intelligence Cloud, Azul’s cloud analytics solution -- which provides actionable intelligence from production Java runtime data to dramatically boost developer productivity -- now supports Oracle JDK and any OpenJDK-based JVM (Java Virtual Machine) from any vendor or distribution.

April 30, 2024

F5 announced new security offerings: F5 Distributed Cloud Services Web Application Scanning, BIG-IP Next Web Application Firewall (WAF), and NGINX App Protect for open source deployments.

April 29, 2024

Code Intelligence announced a new feature to CI Sense, a scalable fuzzing platform for continuous testing.

April 29, 2024

WSO2 is adding new capabilities for WSO2 API Manager, WSO2 API Platform for Kubernetes (WSO2 APK), and WSO2 Micro Integrator.

April 29, 2024

OpenText™ announced a solution to long-standing open source intake challenges, OpenText Debricked Open Source Select.

April 29, 2024

ThreatX has extended its Runtime API and Application Protection (RAAP) offering to provide always-active API security from development to runtime, spanning vulnerability detection at Dev phase to protection at SecOps phase of the software lifecycle.

April 29, 2024

Canonical announced the release of Ubuntu 24.04 LTS, codenamed “Noble Numbat.”

April 25, 2024

JFrog announced a new machine learning (ML) lifecycle integration between JFrog Artifactory and MLflow, an open source software platform originally developed by Databricks.

April 25, 2024

Copado announced the general availability of Test Copilot, the AI-powered test creation assistant.