STIGQter: STIG Summary: Application Programming Interface (API) Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

API must use a circuit breaker pattern to handle failures and timeouts.

DISA Rule

SV-274835r1143875_rule

Vulnerability Number

V-274835

Group Title

SRG-APP-000945

Rule Version

SRG-APP-000945-API-001635

Severity

CAT II

CCI(s)

• CCI-004992 - Shut the system down, restart the system, and/or initiate organization-defined alternative action(s) when anomalies in the operation of the organization-defined privacy functions are discovered.

Weight

10

Fix Recommendation

Configure the API to use a circuit breaker pattern to handle failures and timeouts.

Check Contents

Verify the API uses a circuit breaker pattern to handle failures and timeouts.

Review the API documentation or the system's architecture documentation. The pattern might be explicitly mentioned as part of the API's design to handle failures and timeouts.

If a circuit breaker pattern is not being used, this a finding.

Vulnerability Number

V-274835

Documentable

False

Rule Version

SRG-APP-000945-API-001635

Severity Override Guidance

Verify the API uses a circuit breaker pattern to handle failures and timeouts.

Review the API documentation or the system's architecture documentation. The pattern might be explicitly mentioned as part of the API's design to handle failures and timeouts.

If a circuit breaker pattern is not being used, this a finding.

Check Content Reference

M

Target Key

5703