An HCP for cloud scale site has three master instances and thus can tolerate the failure of one master instance without interruption of service.
If a site with only two healthy master instances experiences an outage of another master instance (for example, if services restart or the entire instance or operating system restarts), it goes into a degraded state until all three master instances are restored.