CMS Hybrid Cloud Weekly change newsletter 9/10/2026

Centers for Medicare & Medicaid ServicesCMS Hybrid Cloud


Weekly change newsletter 9/10/2026



________________________________________________________________________




________________________________________________________________________




Each week, the CMS Hybrid Cloud program provides a list of upcoming changes, maintenance windows, and updates to help customers build awareness and plan effectively and summarizes changes from the previous week.

This newsletter includes:

* Completed change summary for the week of 9/3/2026 [ #Completedchanges ]
* CMS Artifactory S3 Migration [ #artifactorymigraton ]
* 9/10/2026 - Splunk DC - Amazon Linux OS Patching [ #splunklinuxospatching ]
* 9/11/2026 - Patch Splunk to version 10.2.7 - Splunk DC/ADC/KDC environments [ #splunkdcadckdc ]
* 9/11/2026 - Patch Splunk to version 10.2.7 - Cloud Splunk Prod, OC, Splunk DC environments [ #splunkoc ]
* 9/11/2026 - Patch Splunk to version 10.2.7 - MAG & OBH environments [ #splunkmag ]
* 9/11/2026 - Enterprise JIRA Maintenance [ #jira ]
* 9/16/2026 - Non-marketplace SSM Patching - DEV/TEST/IMPL [ #monmarketplace ]
* 9/16/2026 - Azure Commercial -  Azure Update Manager Patching - DEV/TEST/IMPL  [ #azure ]
* 9/16/2026 - AWS Outpost SSM Patching - DEV/TEST/IMPL [ #outpost ]

* 9/16/2026 - MAG - Azure Update Manager Patching - DEV/TEST/IMPL  [ #mag ]
* 9/16/2026 - Marketplace SSM Patching - DEV/TEST [ #marketplace ]
* 9/16/2026 - GCP- VM Manager Patching - DEV/TEST/IMPL  [ #gcp ]

________________________________________________________________________




Completed change summary for the week of 9/3/2026

* 9/4/2026 - Splunk Prod - Increase Indexer Instances for OE27
* 9/4/2026 - Enterprise GitHub Support on CMS Cloud Support Project


To learn details about previous changes please go to the News and Updates [ https://links-2.govdelivery.com/CL0/https:%2F%2Flinks-2.govdelivery.com%2FCL0%2Fhttps:%252F%252Fcloud.cms.gov%252FNews%2F1%2F0101019aead81db5-257e884f-a982-406d-8678-70164967b6de-000000%2FqHPdMkXtnIEJX6uW0TEZISYmXF5horwNjSAX0F8drss=434/1/0101019b51067b26-a0977b17-f4cd-4727-8bce-4dbda0a01262-000000/KDbIzF5QupceOiw84R2WfF6B_mM8Iu9YYWOBazQxvcc=437 ] section on cloud.cms.gov. (Secure Access required)

For Patching and Gold Image release schedule please view: Patching and Gold Image Release Calendar - 2026 [ https://cloud.cms.gov/cms-hybrid-cloud-patching-gold-image-calendar-new/ ]

________________________________________________________________________




________________________________________________________________________




CMS Artifactory S3 Migration

On Saturday, September 26, 2026, 9:00 AM - Sunday, September 27, 2026, 7:00 PM,
CMS will migrate the production Artifactory S3 binary store from Client-Side Encryption (CSE) to Server-Side Encryption with KMS (SSE-KMS). During this time, CMS Cloud will migrate the production Artifactory S3 binary store and perform automated post-migration verification

For more information, visit cloud.cms.gov Artifactory Migration [ https://cloud.cms.gov/artifactory-migration-aug-1-2026/ ].

*Impact:* This migration impacts any platform that pulls from or pushes to the production Artifactory (artifactory.cloud.cms.gov), including Jenkins/CloudBees, GitHub Actions, GitLab CI, Azure DevOps, Local developer builds will be unavailable during the migration window. Teams should treat this window as a hard outage.
Non-Production (Dev) Builds will not be impacted.

*Need Help?*

If you experience Artifactory access, artifact push/pull, or build issues after the migration, contact our support team via:


* Agile Tools Support Portal [ https://jiraent.cms.gov/servicedesk/customer/portal/4 ]
* Email <agiletools@cms.hhs.gov>
* Slack [ https://cmsgov.enterprise.slack.com/archives/CT8QBE0BD ]

________________________________________________________________________




________________________________________________________________________




9/10/2026 - Splunk DC - Amazon Linux OS Patching

*Summary:*

This change will apply Amazon Linux 2023 OS security updates to the Splunk infrastructure to remediate identified package vulnerabilities. Servers will be patched and rebooted in a controlled sequence, with Splunk health validated after each system.

*Actions we are taking:*

 Al2023 OS security updates to the Splunk infrastructure to remediate identified package vulnerabilities.

*When is this happening?*

Start Time: Thursday, 9/10/2026 at 5:00 p.m. ET

End Time: Thursday, 9/10/2026 at 11:00 p.m. ET

*Who will be impacted?*

The CCIC team in the Splunk DC.

*What is the impact?* 

CCIC users of the Splunk tool may experience brief periods where search performance is slow or degraded.

________________________________________________________________________




9/11/2026 - Patch Splunk to version 10.2.7 - Splunk DC/ADC/KDC environments

*Summary:*

The CMS Hybrid Cloud logging services team will perform maintenance patching to update Splunk enterprise to version 10.2.7 in Cloud DC/ADC/KDC. 

*Actions we are taking:*


* DC Splunk prod environment
* ADC Splunk prod environment
* DDC prod environment
* Splunk version update

*When is this happening?*

Start Time: Friday, 9/11/2026 at 5:00 p.m. ET

End Time: Sunday, 9/13/2026 at 5:00 p.m. ET

*Who will be impacted?*

All customers using Splunk tool in Cloud Splunk DC, KDC, ADC - on prem.


*What is the impact? *

Users of the Splunk tool may experience brief periods where search performance is slow or degraded while servers are being restarted after the patch is applied.

________________________________________________________________________




9/11/2026 - Patch Splunk to version 10.2.7 - Cloud Splunk Prod, OC, Splunk DC environments

*Summary:*

The CMS Hybrid Cloud logging services team will perform maintenance patching to update Splunk enterprise to version 10.2.7 in Cloud Splunk Prod and OC environments

*Actions we are taking:*


* Production Splunk environment
* OC Splunk prod environment
* Splunk DC prod environment
* Splunk version update

*When is this happening?*

Start Time: Friday, 9/11/2026 at 5:00 p.m. ET

End Time: Sunday, 9/13/2026 at 5:00 p.m. ET

*Who will be impacted?*

All customers using Splunk tool in Cloud Splunk Prod,OC.

*What is the impact?* 

Users of the Splunk tool may experience brief periods where search performance is slow or degraded while servers are being restarted after the patch is applied.

 

________________________________________________________________________




9/11/2026 - Patch Splunk to version 10.2.7 - MAG & OBH environments


*Summary:*

The CMS Hybrid Cloud logging services team will perform maintenance patching to update Splunk Enterprise to version 10.2.7. These patches will be applied to Splunk servers in Splunk - MAG & OBH production environments.


*Actions we are taking:*


* Microsoft Azure (MAG) Splunk prod environment
* OBH Splunk prod environment
* Splunk version update

*When is this happening?*

Start Time: Friday, 9/11/2026 at 5:00 p.m. ET

End Time: Sunday, 9/13/2026 at 11:00 p.m. ET

*Who will be impacted?*

All customers using Splunk tool in Splunk MAG & OBH.

*What is the impact? *

Users of the Splunk tool could experience brief periods where search performance is slow or degraded while servers are being restarted after the patch is applied.

________________________________________________________________________




9/11/2026 - Enterprise JIRA Maintenance

*Summary:*

Enterprise JIRA (https://jiraent.cms.gov [ https://jiraent.cms.gov/ ]) maintenance activity to address a security vulnerability.  

*Actions we are taking:*


* Upgrade to Jira version 10.3.25

*When is this happening?*

Start Time: Friday, 9/11/2026 at 8:00 p.m. ET

End Time: Saturday, 9/12/2026 at 3:00 a.m. ET

*Who will be impacted?*

All Enterprise JIRA Users.

*What is the impact? *

Enterprise JIRA (https://jiraent.cms.gov/) production instance will be unavailable during the maintenance window outlined above.

________________________________________________________________________




9/16/2026 - Non-marketplace SSM Patching - DEV/TEST/IMPL

*Summary:*

As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 9/16/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected Non-marketplace applications noted below.


*Actions we are taking:*


* Non-marketplace DEV/TEST/IMPL
* SSM Linux & Windows Vulnerability Patching

*When is this happening?*

Start Time: Wednesday, 9/16/2026 at 6:00 p.m. ET

End Time: Wednesday, 9/16/2026 at 11:00 p.m. ET

*Who will be impacted?*

CEDAR, Million Hearts, FFSDCS, RASS, OC Base- eLDAP, SC CLIA, NTP LMS, Spott MACBIS, OC Base- WNMG, NEIL/HRES, OC Base- EWST, MacFin, eAPD Hi-C, OC Base- CMS Cloud Legacy, OC Base- DevSecOps SecDevOps, iServ, MDP, PECOS2.0, SEI, OC Base- PWSS, TRA, CMS ARTS, MCIM, RAD Analysis Tools, MCIM, Perm,  CMS Cloud - CRE, CMS Cloud - Enterprise Agile Tools, CMS Cloud tamer, CMS Cloud - CARD, CMS Cloud - ECS Fargate, CMS Cloud - Direct Connect, CMS Cloud - Jfrog SonarCube, CMS Cloud - DNS Prod, CMS Cloud - Governance 2.0, MEOWx, CMS Cloud - CloudBees Jenkins, CMS Cloud - CET, CMS Cloud - DevSecOps, CMS Cloud - Utilities, CMS Cloud - Testrail, CMS Cloud - CircleCI, CMS Cloud - Sam GSS Security GovCloud, SWIFT, AWS HEIDI, MDX, MSPSC, QMAC, ESS-TOOLS, QCOR

MEPBS, EACMS, MacPro, PS&R, RDS, OC Base- APIM GEO, 1115 PMDA, CMS Cloud - Governance 2.0, CMS Cloud - QuickDNS, CMS Cloud - CMSNet, CMS Cloud - CCG Web Content, CMS Cloud - Network Arch, CMS Cloud - VPC Automation, CMS Cloud - Security Team, CMS Cloud - CCG Web Content, CMS Cloud Temporal, CMS Cloud - Splunk, CMS Cloud - CET, AWS GSS Security GC, occonfluence, ocjira, miniorange, ocsonarqube, MTF-PM,  NDW, MacFin, MTF-DM, PECOS-OM, NGD, EFT Cloud

*What is the impact?* 

Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.

________________________________________________________________________




9/16/2026 - Azure Commercial - Azure Update Manager Patching - DEV/TEST/IMPL 

*Summary:*

As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 9/16/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected Azure commercial applications noted below.

*Actions we are taking:*


* Azure Commercial DEV/TEST/IMPL
* Azure Commercial Linux & Windows Vulnerability Patching

*When is this happening?*

Start Time: Wednesday, 9/16/2026 at 6:00 p.m. ET

End Time: Wednesday, 9/16/2026 at 11:00 p.m. ET

*Who will be impacted?*

Subscription:

azure-comm-ea-cms-iusg-gss-patching-prod

azure-comm-ea-cms-iusg-gss-goldimage-prod

azure-comm-ea-cms-iusg-gss-smtp-nonprod

azure-comm-ea-cms-iusg-gss-smtp-prod

azure-comm-ea-cms-iusg-gss-vdi-nonprod

azure-comm-ea-cms-iusg-gss-vdi-prod 

azure-comm-ea-cms-iusg-gss-securitycomp-prod

azure-comm-ea-cms-iusg-gss-logging-nonprod

azure-comm-ea-cms-iusg-gss-logging-prod

azure-comm-ea-cms-iusg-gss-nerdio-prod

azure-comm-ea-cms-iusg-gss-security-prod 

azure-comm-ea-cms-iusg-gss-security-nonprod

azure-comm-ea-cms-iusg-gss-identity-prod

azure-comm-ea-cms-iusg-gss-securityauto-prod

azure-comm-ea-cms-iusg-gss-bigfix-prod

azure-comm-ea-cms-iusg-gss-connectivity-prod

azure-comm-ea-cms-iusg-gss-dataprotect-dev

azure-comm-ea-cms-iusg-gss-zscaler-prod

azure-comm-ea-cms-iusg-gss-dataprotect-prod

azure-comm-ea-cms-iusg-gss-dataprotect-test

azure-comm-ea-cms-iusg-gss-infoblox-prod

azure-comm-ea-cms-iusg-gss-c4testing1-dev

azure-comm-ea-cms-iusg-gss-ccgchatbot-dev

azure-comm-ea-cms-iusg-gss-ccgchatbot-test

azure-comm-ea-cms-iusg-gss-finops-prod

azure-comm-ea-cms-iusg-iam-workloads-prod

*What is the impact? *

Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.

________________________________________________________________________




9/16/2026 - AWS Outpost SSM Patching - DEV/TEST/IMPL

*Summary:*

As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 9/16/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected AWS Outpost applications noted below.

*Actions we are taking:*


* AWS Outpost DEV/TEST/IMPL
* SSM Linux & Windows Vulnerability Patching

*When is this happening?*

Start Time: Wednesday, 9/16/2026 at 6:00 p.m. ET

End Time: Wednesday, 9/16/2026 at 11:00 p.m. ET

*Who will be impacted?*

IDM, ECISWebservers-Outposts, AGX - Outpost, FM Interact/FM Systems, SWIFT - Outposts, Druva-Outposts, Bitlocker-Outposts, Warehouse Librarian, EUA/EFI-Outposts, ETC - Outposts, PhishMe(Cofense-Triage)-Outposts

*What is the impact? *

Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.

________________________________________________________________________




9/16/2026 - MAG - Azure Update Manager Patching - DEV/TEST/IMPL 

*Summary:*

As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 9/16/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected MAG applications noted below.

*Actions we are taking:*


* MAG DEV/TEST/IMPL
* MAG Linux & Windows Vulnerability Patching

*When is this happening?*

Start Time: Wednesday, 9/16/2026 at 6:00 p.m. ET

End Time: Wednesday, 9/16/2026 at 11:00 p.m. ET

*Who will be impacted?*

Subscription:
CMS.VDC-CCS.IUSG.SharedServices.001.AG
ScopeInfoTech-CM-HEDIS PLD-005

*Resource Group with Reboot:*
RG-SS-LDAP-PROXY-DEV
RG-SS-LDAP-PROXY-VAL

*Resource Group with No Reboot*:
RG-AZE-HEDISPLD-DEV
RG-AZE-HEDISPLD-VAL

*What is the impact?* 

Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.

________________________________________________________________________




9/16/2026 - Marketplace SSM Patching - DEV/TEST

*Summary:*

As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 9/16/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST environment for the affected Marketplace applications noted below.

*Actions we are taking:*


* Marketplace DEV/TEST
* SSM Linux & Windows Vulnerability Patching

*When is this happening?*

Start Time: Wednesday, 9/16/2026 at 6:00 p.m. ET

End Time: Wednesday, 9/16/2026 at 11:00 p.m. ET

*Who will be impacted?*

FFM_Opera, FFM_QAO, VAMS, TWS, XES - XOC Tools, SERVIS, FFM_Shared_Services, FFM MLMS, XES - MSI Tech Lab, FFM_FM, FFM_TWS, XES - Service Virtualization, CMS Cloud - Advanced Monitoring

DSRS, FFM, FFM DSH, FFM EDI, FFM EFT, FFM ESDCU, MCR, FLH, OC Base- FLH, OC Base PET, FFM_MNPS

*What is the impact? *

Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.

________________________________________________________________________




9/16/2026 - GCP- VM Manager Patching - DEV/TEST/IMPL 

*Summary:*

As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 9/16/2026 at 6:00 p.m. ET. The week's patches will impact the DEV/TEST/IMPL environment for the affected GCP applications noted below.

*Actions we are taking:*


* GCP DEV/TEST/IMPL
* GCP Linux & Windows Vulnerability Patching

*When is this happening?*

Start Time: Wednesday, 9/16/2026 at 6:00 p.m. ET

End Time: Wednesday, 9/16/2026 at 11:00 p.m. ET

*Who will be impacted?*

Project Name:
cms-cpt-workload1
FinOps-Tooling
gcp-cms-iusg-match-nonprod
gcp-cms-iusg-smtp-nonprod
gcp-cms-iusg-sharedvpc-prod
gcp-cms-iusg-security-nonprod
gcp-cms-iusg-ccsm-sandbox
gcp-cms-iusg-c4-nonprod
gcp-cms-iusg-helix-prod
gcp-cms-iusg-smtp-prod
gcp-cms-iusg-connectivity-prod
gcp-cms-iusg-sharedvpc-nonprod
gcp-cms-eadg-kmp-nonprod
gcp-cms-iusg-security-prod
gcp-cms-iusg-logging-nonprod
gcp-cms-iusg-goldimage-nonprod
gcp-cms-eadg-kmp-prod
gcp-cms-qmvig-eqrs-pa-nonprod
gcp-cms-iusg-logging-prod
gcp-cms-iusg-bigfix-prod
gcp-cms-iusg-goldimage-prod
gcp-cms-iusg-dprotect-nonprod
gcp-cms-iusg-infoblox-prod
gcp-cms-iusg-ad-prod
gcp-cms-iusg-dprotect-prod
gcp-cms-iusg-zscaler-prod
gcp-cms-iusg-patching-prod
gcp-cms-iusg-match-prod
gcp-cms-qmvig-eqrs-sf-nonprod
Master-Billing-Export

*What is the impact? *

Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.

________________________________________________________________________




________________________________________________________________________




________________________________________________________________________




Need help? We are here to support you.

If you have any questions, don't hesitate to reach out to your assigned Hosting Coordinator. CMS IT Support can be reached via cloudsupport@cms.hhs.gov, <cloudsupport@cms.hhs.gov> or call (800) 562-1963, and is documented here at Support Page [ https://cloud.cms.gov/cms-cloud-support/ ] on cloud.cms.gov [ http://cloud.cms.gov/ ].

________________________________________________________________________




You are subscribed to receive email messages about CMS Cloud Operations, Changes, and Outages from the Centers for Medicare & Medicaid Services (CMS).

________________________________________________________________________





Centers for Medicare & Medicaid Services




________________________________________________________________________


You're getting this message because you subscribed to get email updates from the Centers for Medicare & Medicaid Services (CMS) [ http://www.cms.gov/ ].

Update your subscriptions, modify your password or email address, or stop subscriptions at any time on your Subscriber Preferences Page [ https://public.govdelivery.com/accounts/USCMS/subscriber/edit?preferences=true#tab1 ]. You will need to use your email address to log in. If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com [ https://subscriberhelp.govdelivery.com/ ].

This service is provided to you at no charge by Centers for Medicare & Medicaid Services (CMS) [ http://www.cms.gov ].


________________________________________________________________________


This email was sent to mshinji3056@gmail.com using Granicus Communications Cloud 7500 Security Boulevard · Baltimore MD 21244


body .abe-column-block { min-height: 5px; } table.gd_combo_table img {margin-left:10px; margin-right:10px;} table.gd_combo_table div.govd_image_display img, table.gd_combo_table td.gd_combo_image_cell img {margin-left:0px; margin-right:0px;} table.govd_hr {min-width: 100%;}