STIGQter: STIG Summary: Amazon Linux 2023 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Jul 2026:

Amazon Linux 2023 must have the packages required for encrypting off-loaded audit logs installed.

DISA Rule

SV-274035r1120093_rule

Vulnerability Number

V-274035

Group Title

SRG-OS-000120-GPOS-00061

Rule Version

AZLX-23-001120

Severity

CAT II

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

Configure Amazon Linux 2023 to have the rsyslog-openssl package installed with the following command:

$ sudo dnf install -y rsyslog-openssl

Check Contents

Verify Amazon Linux 2023 has the rsyslog-openssl package installed with the following command:

$ dnf list --installed rsyslog-openssl
Installed Packages
rsyslog-openssl.x86_64 8.2204.0-3.amzn2023.0.4 @amazonlinux

If the "rsyslog-openssl" package is not installed, this is a finding.

Vulnerability Number

V-274035

Documentable

False

Rule Version

AZLX-23-001120

Severity Override Guidance

Verify Amazon Linux 2023 has the rsyslog-openssl package installed with the following command:

$ dnf list --installed rsyslog-openssl
Installed Packages
rsyslog-openssl.x86_64 8.2204.0-3.amzn2023.0.4 @amazonlinux

If the "rsyslog-openssl" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5700