FAQs

As a supplier to Defence, can I contract directly to use MODCloud?

No. You require a MoD Sponsor on a MoD project or programme to consume MODCloud.

Can I use all services in AWS/Azure in my solution?

All services to be consumed on both service offerings in both environments (ICE & ACE) must have completed a MODCloud Service Security Assessment (SSA) before use. The MODCloud Hosting Principles specify that customers requiring the use of any services on the Cloud platforms must also conduct their own assessments of the service to be consumed. The use of that service should be declared to their own operating and accrediting authority before migration to live Production environments.

In both ACE and ICE key services (and those most commonly applied) have completed a SSA. Therefore, most customer use cases can be deployed rapidly without the need for a MODCloud assessment. The MODCloud Customer Engagement team can assist with this at onboarding.

In general, services that won't be allowed are:

  • Services not available in the UK region
  • Services in beta or preview
  • Services that require root credentials
  • Services incompatible with the network structure
  • Services which may break MoD Core Policy or indicate vulnerabilities that could compromise MoD Confidentiality, Integrity & Availability (CIA). This includes services which do not support golden images.

How much does it cost/Does it cost more to use MODCloud/What is the pricing model?

MODCloud operates a Pay-As-You-Go model. For estimation purposes, it is safe to use the Cloud cost calculators provided by Microsoft and AWS when estimating costs, noting that:

  • Whilst there is a small cost for the necessary services deployed within a MODCloud account (for example logging and monitoring), this is in the region of £250 or less (depending on the Service Offering)
  • MoD has discounts with Microsoft and AWS under corporate agreements
  • Reserved Instances, Savings plans etc. can be applied

I have my own hosting solution with AWS/Microsoft, can I use that?

No. This will be investigated on a case-by-case basis. However, peering of native public Cloud subscriptions or accounts into MODCloud is not allowed.

What level of security vetting is required to access MODCloud?

Security vetting requirements will be detailed in the tender documentation provided by the Commercial Officer of the tender.

Can customers copy MODCloud's Microsoft Active Directory (AD) to connect into MODNET?

No. Customers cannot copy MODCloud's Microsoft AD setup to use in their own Azure subscriptions/AWS accounts.

Back to top