CUI Safe AI

AWS · Enterprise search and assistant

Is Amazon Q Business FedRAMP authorized? Can I use it with CUI?

Can I use it with CUI?

Yes, with conditions

Amazon Q Business is in AWS's FedRAMP Moderate (US East/West) boundary, which matches the DFARS baseline on paper. It is not listed for GovCloud or for DoD IL4 or IL5, so it is a poor fit for DoD-controlled data.

Checked Oct 17, 2026

The facts

FedRAMP status
Authorizedsource: aws.amazon.com
FedRAMP level
Moderatesource: aws.amazon.com
Marketplace detail
AWS lists Amazon Q Business as FedRAMP Class C (East/West) only; not in GovCloudsource: aws.amazon.com
DoD Impact Level
IL2 (East/West) onlysource: aws.amazon.com
GSA OneGov deal
No (not on the GSA lists we checked)
FedRAMP Marketplace package
AGENCYAMAZONEWsource: aws.amazon.com

Not legal advice. A CUI answer here describes what public authorization records say, not whether your specific contract, data or configuration is compliant. Confirm with your contracting officer, assessor or counsel.

Questions that cover Amazon Q Business