Skip to content

[AGENTRUN-730] Fix URLs to unbreak FIPS certification pointer #32005

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
+12 −11
Open

[AGENTRUN-730] Fix URLs to unbreak FIPS certification pointer #32005

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
1f3914c
[AGENTRUN-730] Fix URLs to unbreak FIPS certification pointer
nathan-b Oct 6, 2025
1569c28
Fix url references for tabs
nathan-b Oct 7, 2025
98613b4
fix links
hestonhoffman Oct 7, 2025
82aba7d
Merge branch 'master' into nathanb/agentrun-730-fips-certification-url
nathan-b Oct 8, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 12 additions & 11 deletions content/en/agent/configuration/fips-compliance.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,10 +28,9 @@

## Supported platforms and limitations


Supported platforms:

|||
| | |
| --- | ----------- |
| Bare metal and VMs | RHEL >= 7<br>Debian >= 8<br>Ubuntu >= 14.04<br>SUSE >= 12<br>Windows Server >= 2016<br>Windows >= 10|
| Cloud and container| Amazon ECS<br>AWS EKS (Helm)<br>Docker|
Expand All @@ -49,14 +48,12 @@
The Datadog FIPS Agent does **not** support the following:
- Communication between Cluster Agent and Node Agents
- Outbound communication to anything other than GovCloud
- Datadog [DDOT Collector][1]
- Datadog [DDOT Collector][4]

[1]: /opentelemetry/setup/ddot_collector

## Compliance guidelines
<div class="alert alert-warning">
This is not an exhaustive list. These requirements are a baseline only. You are responsible for evaluating your environment and implementing any additional controls needed to achieve full FIPS compliance.
</div>
<div class="alert alert-warning">This is not an exhaustive list. These requirements are a baseline only. You are responsible for evaluating your environment and implementing any additional controls needed to achieve full FIPS compliance.</div>

The following baseline controls apply to each platform. Your system may require additional controls:

{{< tabs >}}
Expand Down Expand Up @@ -155,21 +152,24 @@

{{% tab "AWS Lambda" %}}

For AWS Lambda FIPS compliance, follow the instructions in the [AWS Lambda FIPS Compliance](/serverless/aws_lambda/fips-compliance/) documentation.
For AWS Lambda FIPS compliance, follow the instructions in the [AWS Lambda FIPS Compliance][1] documentation.

[1]: /serverless/aws_lambda/fips-compliance/

{{% /tab %}}

{{% tab "AWS ECS" %}}

When following the [ECS installation instructions](/containers/amazon_ecs/), make sure to use these FIPS-specific configuration values for your Task Definition:
When following the [ECS installation instructions][1], make sure to use these FIPS-specific configuration values for your Task Definition:
- Set `image` in the `containerDefinitions` object to `public.ecr.aws/datadog/agent:7-fips`
- Set `DD_SITE` environment variable to `ddog-gov.com`

[1]: /containers/amazon_ecs/
{{% /tab %}}

{{% tab "AWS EKS" %}}

When following the [Datadog Agent installation on Kubernetes](/containers/kubernetes/installation/) instructions, make sure to include these FIPS-specific configuration values in the `datadog-agent.yaml` file depending on your chosen installation method:
When following the [Datadog Agent installation on Kubernetes][1] instructions, make sure to include these FIPS-specific configuration values in the `datadog-agent.yaml` file depending on your chosen installation method:

Check notice on line 172 in content/en/agent/configuration/fips-compliance.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.sentencelength 

Suggestion: Try to keep your sentence length to 25 words or fewer.

For the Datadog Operator:
```yaml
Expand All @@ -186,6 +186,7 @@
useFIPSAgent: true
```

[1]: /containers/kubernetes/installation/
{{% /tab %}}

{{< /tabs >}}
Expand All @@ -207,4 +208,4 @@
[1]: https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4282
[2]: https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4282.pdf
[3]: /integrations/guide/fips-integrations
[4]: /integrations/guide/jmxfetch-fips
[4]: /opentelemetry/setup/ddot_collector
Loading