Rackspace provides a Secure Configuration Baseline designed to support government cloud workloads, delivered to the End User as an Amazon Machine Image (AMI). Rackspace hardens the Red Hat Enterprise Linux Operating Systems to a Secure Configuration Baseline and provides updated AMIs and compliance scan results on a monthly basis.

Rackspace is responsible for securing, creating and providing the AMI, and a corresponding compliance report, in accordance with the Secure Configuration Baseline. Rackspace shall provide updated AMIs and reports on a monthly basis. At a minimum, the Secure Configuration Baseline implements a subset of the Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) benchmarks but may include additional modifications and/or Rackspace-defined controls. Any controls in addition to, or in lieu of, STIG controls may or may not be acceptable for use by government agencies. It is the End User's responsibility to ensure there is no conflict of applicable laws, Executive Orders, directives, policies, regulations, or other mandated compliance requirements.