Issued by: Centers for Medicare & Medicaid Services (CMS)

Issue Date: November 14, 2014

Program Area: Distributed Data Collection (DDC) for RA Including HCRP/EDGE Server

Question: What is the version of Transport Layer Security (TLS) and the cyphers used in Hypertext Transfer Protocol Secure (HTTPS) on the Amazon Web Services (AWS) side?

Answer: The S3 Object Storage Service is where the objects will be stored. Amazon currently supports TLS Version 1.0, 1.1, 1.2, and Secure Sockets Layer (SSL) Version 3.0. There are also five (5) different cyphers that are currently being utilized. These could possibly change over time as Amazon needs to meet internal and external compliance requirements. However, currently Amazon uses a combination of AES 256128, along with several other options.

HHS is committed to making its websites and documents accessible to the widest possible audience, including individuals with disabilities. We are in the process of retroactively making some documents accessible. If you need assistance accessing an accessible version of this document, please reach out to the guidance@hhs.gov.

DISCLAIMER: The contents of this database lack the force and effect of law, except as authorized by law (including Medicare Advantage Rate Announcements and Advance Notices) or as specifically incorporated into a contract. The Department may not cite, use, or rely on any guidance that is not posted on the guidance repository, except to establish historical facts.