Amazon Web Services (AWS) filed a bid protest with the Government Accountability Office in February 2026 challenging the National Security Agency's award of the Defense Enterprise Office Solutions (DEOS) recompete to Microsoft. The protest alleges the agency's technical evaluation methodology underweighted cloud sovereignty and mission-partner interoperability factors where AWS holds a structural advantage, per industry reporting by Nextgov and Washington Technology.
Why this protest matters beyond NSA
The DEOS recompete is one of a wave of large enterprise cloud procurements across the Intelligence Community being re-competed on multi-year vehicles. How GAO rules here will set precedent for:
- Whether technical evaluation factors must separately weight FedRAMP High vs. IL5/IL6 authorization
- How agencies document "mission-critical" evaluation criteria in ways that survive protest scrutiny
- Whether incumbency advantages in classified environments count as OCIs
The JEDI/JWCC pattern
This is familiar territory. AWS protested the original JEDI cloud contract in 2019; the DOD eventually canceled JEDI and moved to a multi-vendor JWCC model in 2022. DEOS is classified infrastructure, not defense cloud — but the legal dynamics are similar. GAO protests of high-profile single-award cloud contracts have a track record of producing either sustained findings or agency corrective action that reshapes the competition.
- GAO has a statutory 100-day clock — decision expected by late May 2026
- NSA is required to provide agency report by mid-March 2026
- If sustained, likely corrective action is a revised evaluation or new evaluation of proposals
What contractors on cloud vehicles should do
- If you subcontract on either AWS or Microsoft cloud programs supporting the IC, watch this decision — scope changes could affect task order flow
- Request a debriefing on any cloud competition you lose; evaluation record quality determines protest viability
- Multi-award structures reduce protest risk; advocate for multi-award approaches when agencies release RFPs for large cloud vehicles