Before you launch
We’ve worked to make publishing a government site on Pages as simple as possible. Please note that while the entire process usually takes a couple days, it may take up to a week, so plan accordingly.
You must have an active, signed IAA with Pages. Sandbox accounts without IAAs will be unable to configure custom domains and preview urls are not suitable for production use.
Your agency must accept the risk of launching a site on Pages. Be sure to follow your agency’s procedures and guidelines for operating your site using Pages.
You must understand your responsibilities.
Ensure you know how, or who to contact to make changes to the DNS configuration for your domain.
If necessary, obtain a custom domain.
- Notify Pages support of your intent to launch along with your repository name/url and production-ready git branch via:
- Pages support will:
- initiate GSA IT-provided scans of the preview build and source code of your site to identify any vulnerabilites
- send you a brief site questionnaire that must be completed before continuing
Complete the site questionnaire and resolve all required vulnerabilities identified by the scans as identified by Pages Support (this may take several scans)
Your site will now be live!
A scan of your custom domain will be run by GSA IT just to verify the final configuration, then the Pages ISSO will share the Site Review document for your product owner to sign
- Sign and return the Site Review document provided by the Pages ISSO
- Notify Pages support that you are ready to launch your site
- Complete the site questionnaire provided to you by Pages support
- Resolve any findings identified by vulnerability scans
- Configure your DNS
- Notify Pages support
- Update your site settings
- Sign and return the Site Review document to the Pages ISSO