STIGQter: STIG Summary: Amazon Linux 2023 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Jul 2026:

Amazon Linux 2023 must have the crypto-policies package installed.

DISA Rule

SV-274040r1184011_rule

Vulnerability Number

V-274040

Group Title

SRG-OS-000396-GPOS-00176

Rule Version

AZLX-23-001195

Severity

CAT I

CCI(s)

• CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.
• CCI-002890 - Implement organization-defined cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications.
• CCI-003123 - Implement organization-defined cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications.
• CCI-002421 - Implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.

Weight

10

Fix Recommendation

Configure Amazon Linux 2023 to have the crypto-policies package installed with the following command:

$ sudo dnf install -y crypto-policies

Check Contents

Verify Amazon Linux 2023 crypto-policies package is installed with the following command:

$ dnf list --installed crypto-policies
Installed Packages
crypto-policies.noarch 20240828-2.git626aa59.amzn2023.0.1 @System

If the "crypto-policies" package is not installed, this is a finding.

Vulnerability Number

V-274040

Documentable

False

Rule Version

AZLX-23-001195

Severity Override Guidance

Verify Amazon Linux 2023 crypto-policies package is installed with the following command:

$ dnf list --installed crypto-policies
Installed Packages
crypto-policies.noarch 20240828-2.git626aa59.amzn2023.0.1 @System

If the "crypto-policies" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5700