{"id":"FR2309544938","name":"Cloudera for Government","provider":"Cloudera Government Solutions, Inc","providerSlug":"cloudera-government-solutions-inc","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2025-05-07","serviceModel":["PaaS"],"deployment":"Government Community Cloud","businessFunctions":["Analytics","Cybersecurity & Risk Management","Data Management","Development Tools","Network Management","Operations Management","Research","Storage","System Administration"],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN","assessorId":"138665","smallBusiness":false,"website":"www.cloudera.com","description":"Cloudera for Government is a secure and governed cloud service platform that offers a broad set of enterprise data cloud services with data analytics and artificial intelligence functionality. With Cloudera for Government, users can create and manage secure data lakes, self-service analytics, and machine learning services without installing and managing the data platform software. Cloudera for Government services are managed by Cloudera, but the customer’s data remains under their control in their AWS cloud account.\n\nCloudera for Government lets customers:\n•        Control cloud costs by automatically spinning up workloads when needed, scaling them as the load changes over time and suspending their operation when complete.\n•        Isolate and control workloads based on user type, workload type, and workload priority.\n•        Combat proliferating silos and centrally control customer and operational data across multi-cloud and hybrid environments.\n\nCloudera for Government contains several layers of infrastructure, operations software, networks, and the CDP services. The two primary components of the solution are the CDP Control Plane and the Customer Workload Environment.\nThe CDP Control Plane provides a set of core services that perform several functions across the platform. Control Plane services are implemented in a microservice architecture running on Kubernetes. These services can be configured and scaled independently based on their function. Each service performs a specialized function, and services can also communicate with other services within the Control Plane. Each set of microservices that performs a specific function is isolated from other sets of microservices. This segregation permits each set of microservices to have its own identity, allowing for differentiation of access between system components.  \n\nThe Workload Environment is a cloud account that has been associated with a customer tenant inside the Control Plane. A tenant is a group of users that share access to a specific set of resources and a billing relationship with Cloudera. In general, each Cloudera for Government customer is a single tenant, but large organizations may have multiple tenants. When a CDP service, such as a data lake, gets created, it gets created within a Workload Environment. The customer Workload Environment is separate from the Control Plane and resides within the customer’s AWS account outside the system authorization boundary.\n","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Cloudera%20Logo.png","inMarketplace":true,"agencies":["22-036"],"reuseCount":0,"leverages":["F1603047866","FR1916254386","F1206081364","F1512167750","FR2003061248","FR1814276801"],"leveragedBy":[],"timeline":[{"date":"2024-02-09","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2024-10-18","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2025-05-07","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN"},"sponsor":"22-036","trustCenterCheck":null}