Skip to main content
Pricing
Sign inRequest demo
CDS-UTC-AADMUSTAll frameworksImplementation guide coming soon

Agency Access Denial

Certification Data Sharing (CDS) · Using a Trust Center

Applies to: ProvidersTimeframe: 5 business days
Who this applies to
Providers
Service class
All service classes
Force
MUST
Timeframe
5 business days
See this rule in your scope

Reviewed implementation guidance for CDS-UTC-AAD is not published yet. The official source below remains complete and authoritative.

Notification

  • Notify FedRAMP via form: https://help.fedramp.gov/hc/en-us/requests/new?ticket_form_id=51829826617243

Official FedRAMP source

Verbatim from FedRAMP/rules

Providers MUST notify FedRAMP within 5 business days of denying an agency access request for FedRAMP Certification Data.

Defined terms in this requirement

AgencyCertification DataProvider

Operationalize this rule

Boundera turns FedRAMP 20x requirements like CDS-UTC-AAD into assigned evidence, remediation work, and validation workflows.

See it on your cloud

Change history

  • 2026-06-24Official launch of the FedRAMP Consolidated Rules for 2026.

Content provenance

Official requirement text is sourced from FedRAMP/rules . Boundera implementation guidance has not been fully reviewed for this item.