STIGQter: STIG Summary: Amazon Linux 2023 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Jul 2026:

Amazon Linux 2023 must have the rsyslog package installed.

DISA Rule

SV-274020r1208263_rule

Vulnerability Number

V-274020

Group Title

SRG-OS-000051-GPOS-00024

Rule Version

AZLX-23-001040

Severity

CAT II

CCI(s)

• CCI-000154 - Provide the capability to centrally review and analyze audit records from multiple components within the system.
• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure Amazon Linux 2023 to monitor all remote access methods by installing rsyslog with the following command:

$ sudo dnf install -y rsyslog

Check Contents

Verify Amazon Linux 2023 is configured to collect system failure events with the following command:

$ dnf list --installed rsyslog
Installed Packages
rsyslog.x86_64 8.2204.0-3.amzn2023.0.4 @amazonlinux

If the "rsyslog" package is not installed, this is a finding.

Vulnerability Number

V-274020

Documentable

False

Rule Version

AZLX-23-001040

Severity Override Guidance

Verify Amazon Linux 2023 is configured to collect system failure events with the following command:

$ dnf list --installed rsyslog
Installed Packages
rsyslog.x86_64 8.2204.0-3.amzn2023.0.4 @amazonlinux

If the "rsyslog" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5700