AWS Elastic Beanstalk (GovCloud)

AWS Elastic Beanstalk is available through GSA Multiple Award Schedule (MAS) under SIN 518210C (Cloud Computing Services) and SEWP VI. Government pricing leverages AWS commercial pricing with potential volume discounts for enterprise agreements. The authorization boundary includes the Elastic Beanstalk service, underlying EC2 instances, Application Load Balancers, Auto Scaling Groups, and CloudWatch monitoring - all documented in AWS GovCloud's System Security Plan (SSP). Contracting officers must approve the use of shared responsibility model where AWS manages infrastructure security while agencies maintain application-level security controls. Include specific Elastic Beanstalk platform versions and supported runtime environments (Java, .NET, PHP, Node.js, Python, Ruby) in your Statement of Work. Procurement timeline typically spans 60-90 days including security review, ATO documentation updates, and integration testing. For CMMC assessment boundaries, include Elastic Beanstalk within your Organization Seeking Certification (OSC) scope, documenting data flows between your applications and the AWS GovCloud environment. Ensure your Cybersecurity Maturity Model Certification (CMMC) assessment includes the shared responsibility matrix and AWS-provided security controls inheritance documentation.