AWS Cloud

The HCQIS Cloud is an AWS-based public cloud solution that enables the HCQIS program to utilize AWS cloud services in a manner that meets CMS security, architecture, and governance requirements.

The HCQIS cloud offers two very different operating models: single-tenant and multi-tenant.

Single-Tenant Model: The Single-Tenant Cloud provides a self-service model that empowers application development teams with maximum control through self-provisioning within single-user environments.

Multi-Tenant Model: The Multi-Tenant Cloud provides a fully managed Cloud infrastructure where HIDS handles provisioning and day-to-day management of the AWS infrastructure and AWS services such as computing (EC2), storage (EBS, EFS, S3), database (RDS, Redshift, other) within a multi-tenant environment. 

The HCQIS Cloud is logically organized at two primary levels: AWS Accounts and Amazon Virtual Private Clouds (VPCs).

QUICK START GUIDE

The Security Official (SO) for the organization may request HCQIS AWS access on behalf of users for their contract or the user may request access for themselves.

Requesting AWS Cloud Services:

Step 1: Log into ServiceNow at https://idm.cms.gov/ using your HARP credentials. 

Step 2: Select ServiceNow after logging in.

Step 3: Locate Cloud request

• • Type “catalog” in the Filter Navigator
  • Select IT Services Catalog
  • Select Cloud
  • Select AWS Access Request
  • Select AWS Access Request Form
  • Complete AWS Access Request Form and select Submit.

Accessing AWS Cloud Services

Step 1: If you did not have an Active Directory (AD) account previously, you will have an AD account provisioned for you. After your request has been approved, you will receive an email or phone call from the HIDS Windows team with details on your Active Directory (AD) account and VIP installation instructions.

If you haven't received your account details and instructions within 24 hours, please contact the QualityNet Service Desk at 1-866-288-8912 or qnetsupport@hcqis.org.

Step 2: Log into ServiceNow at https://sts.qualnet.org/adfs/ls/IdpInitiatedSignOn.aspx using your AD credentials. 

Step 3: Select "HCQIS Amazon Web Services" in the dropdown and press "Sign In". Enter in your VIP Access code.

Step 4: Select the radio button for the desired Account and Role and press “Sign In”. Only those Accounts and Roles you have access to will be displayed.

Step 5: Upon successful login, the AWS Console will be launched. Make sure you are in region US East (N. Virginia).

Note: you must be connected to Zscaler before logging into AWS

A detailed Confluence page provides an Introduction to the HCQIS Cloud and Key Concepts. Please make this your starting point to learn about the HCQIS cloud.

FAQs