You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[AGENTRUN-730] Fix URLs to unbreak FIPS certification pointer (#32005)
The page uses indexed URL references, but was overwriting the meaning of
each index. Changed each URL reference to be a unique index.
---------
Co-authored-by: hestonhoffman <[email protected]>
Copy file name to clipboardExpand all lines: content/en/agent/configuration/fips-compliance.md
+12-11Lines changed: 12 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,10 +28,9 @@ The FIPS Agent also includes [limited support for integrations][3] that need to
28
28
29
29
## Supported platforms and limitations
30
30
31
-
32
31
Supported platforms:
33
32
34
-
|||
33
+
|||
35
34
| --- | ----------- |
36
35
| Bare metal and VMs | RHEL >= 7<br>Debian >= 8<br>Ubuntu >= 14.04<br>SUSE >= 12<br>Windows Server >= 2016<br>Windows >= 10|
37
36
| Cloud and container| Amazon ECS<br>AWS EKS (Helm)<br>Docker|
@@ -49,14 +48,12 @@ Supported products (Agent 7.65.0 and above):
49
48
The Datadog FIPS Agent does **not** support the following:
50
49
- Communication between Cluster Agent and Node Agents
51
50
- Outbound communication to anything other than GovCloud
52
-
- Datadog [DDOT Collector][1]
51
+
- Datadog [DDOT Collector][4]
53
52
54
-
[1]: /opentelemetry/setup/ddot_collector
55
53
56
54
## Compliance guidelines
57
-
<divclass="alert alert-warning">
58
-
This is not an exhaustive list. These requirements are a baseline only. You are responsible for evaluating your environment and implementing any additional controls needed to achieve full FIPS compliance.
59
-
</div>
55
+
<divclass="alert alert-warning">This is not an exhaustive list. These requirements are a baseline only. You are responsible for evaluating your environment and implementing any additional controls needed to achieve full FIPS compliance.</div>
56
+
60
57
The following baseline controls apply to each platform. Your system may require additional controls:
61
58
62
59
{{< tabs >}}
@@ -155,21 +152,24 @@ if ($p.ExitCode -ne 0) {
155
152
156
153
{{% tab "AWS Lambda" %}}
157
154
158
-
For AWS Lambda FIPS compliance, follow the instructions in the [AWS Lambda FIPS Compliance](/serverless/aws_lambda/fips-compliance/) documentation.
155
+
For AWS Lambda FIPS compliance, follow the instructions in the [AWS Lambda FIPS Compliance][1] documentation.
156
+
157
+
[1]: /serverless/aws_lambda/fips-compliance/
159
158
160
159
{{% /tab %}}
161
160
162
161
{{% tab "AWS ECS" %}}
163
162
164
-
When following the [ECS installation instructions](/containers/amazon_ecs/), make sure to use these FIPS-specific configuration values for your Task Definition:
163
+
When following the [ECS installation instructions][1], make sure to use these FIPS-specific configuration values for your Task Definition:
165
164
- Set `image` in the `containerDefinitions` object to `public.ecr.aws/datadog/agent:7-fips`
166
165
- Set `DD_SITE` environment variable to `ddog-gov.com`
167
166
167
+
[1]: /containers/amazon_ecs/
168
168
{{% /tab %}}
169
169
170
170
{{% tab "AWS EKS" %}}
171
171
172
-
When following the [Datadog Agent installation on Kubernetes](/containers/kubernetes/installation/) instructions, make sure to include these FIPS-specific configuration values in the `datadog-agent.yaml` file depending on your chosen installation method:
172
+
When following the [Datadog Agent installation on Kubernetes][1] instructions, make sure to include these FIPS-specific configuration values in the `datadog-agent.yaml` file depending on your chosen installation method:
173
173
174
174
For the Datadog Operator:
175
175
```yaml
@@ -186,6 +186,7 @@ datadog:
186
186
useFIPSAgent: true
187
187
```
188
188
189
+
[1]: /containers/kubernetes/installation/
189
190
{{% /tab %}}
190
191
191
192
{{< /tabs >}}
@@ -207,4 +208,4 @@ You, the Datadog customer, are responsible for **host** security and hardening.
0 commit comments