STIGQter STIGQter: STIG Summary: Application Programming Interface (API) Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

The API must use a FIPS-validated cryptographic module to provision digital signatures for tokens.

DISA Rule

SV-274783r1143932_rule

Vulnerability Number

V-274783

Group Title

SRG-APP-000630

Rule Version

SRG-APP-000630-API-001375

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Build or configure the API to utilize a FIPS-validated cryptographic module to provision digital signatures.

Check Contents

Verify the API must use a FIPS-validated cryptographic module to provision digital signatures for tokens.

Authentication to microservices: APIs that have access to sensitive data must not be done simply by using API keys. Access to such APIs must require authentication tokens that have either been digitally signed (e.g., client credentials grant) or verified with an authoritative source.

Services may require either single-use tokens or short-lived tokens (tokens that expire after a short time period) to limit the damage a compromised token can cause.

If the API does not use a FIPS validated cryptographic module to provision signatures for tokens, this is a finding.

Vulnerability Number

V-274783

Documentable

False

Rule Version

SRG-APP-000630-API-001375

Severity Override Guidance

Verify the API must use a FIPS-validated cryptographic module to provision digital signatures for tokens.

Authentication to microservices: APIs that have access to sensitive data must not be done simply by using API keys. Access to such APIs must require authentication tokens that have either been digitally signed (e.g., client credentials grant) or verified with an authoritative source.

Services may require either single-use tokens or short-lived tokens (tokens that expire after a short time period) to limit the damage a compromised token can cause.

If the API does not use a FIPS validated cryptographic module to provision signatures for tokens, this is a finding.

Check Content Reference

M

Target Key

5703