STIGQter: STIG Summary: Amazon Linux 2023 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Jul 2026:

Amazon Linux 2023 must not permit direct logons to the root account using remote access via SSH.

DISA Rule

SV-274049r1120747_rule

Vulnerability Number

V-274049

Group Title

SRG-OS-000109-GPOS-00056

Rule Version

AZLX-23-001240

Severity

CAT II

CCI(s)

• CCI-004045 - Require users to be individually authenticated before granting access to the shared accounts or resources.

Weight

10

Fix Recommendation

Configure Amazon Linux 2023 to prevent SSH users from logging on directly as root add or modify the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".

PermitRootLogin no

Restart the SSH daemon for the settings to take effect:

$ sudo systemctl restart sshd.service

Check Contents

Verify Amazon Linux 2023 remote access using SSH prevents users from logging on directly as "root" with the following command:

$ sudo grep -ir PermitRootLogin /etc/ssh/sshd_config /etc/ssh/sshd_config.d/
/etc/ssh/sshd_config:PermitRootLogin no

If the "PermitRootLogin" keyword is set to "yes", is missing, or is commented out, this is a finding.

Vulnerability Number

V-274049

Documentable

False

Rule Version

AZLX-23-001240

Severity Override Guidance

Verify Amazon Linux 2023 remote access using SSH prevents users from logging on directly as "root" with the following command:

$ sudo grep -ir PermitRootLogin /etc/ssh/sshd_config /etc/ssh/sshd_config.d/
/etc/ssh/sshd_config:PermitRootLogin no

If the "PermitRootLogin" keyword is set to "yes", is missing, or is commented out, this is a finding.

Check Content Reference

M

Target Key

5700