{
    "id": "Amazon_Linux_2023_STIG",
    "title": "Amazon Linux 2023 Security Technical Implementation Guide",
    "description": "This Security Technical Implementation Guide is published as a tool to improve the security of Department of War (DoW) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.",
    "status": "accepted",
    "published": "2026-08-20",
    "profiles": {
        "MAC-1_Classified": "I - Mission Critical Classified",
        "MAC-1_Public": "I - Mission Critical Public",
        "MAC-1_Sensitive": "I - Mission Critical Sensitive",
        "MAC-2_Classified": "II - Mission Support Classified",
        "MAC-2_Public": "II - Mission Support Public",
        "MAC-2_Sensitive": "II - Mission Support Sensitive",
        "MAC-3_Classified": "III - Administrative Classified",
        "MAC-3_Public": "III - Administrative Public",
        "MAC-3_Sensitive": "III - Administrative Sensitive"
    },
    "requirements": {
        "V-273994": {
            "title": "Amazon Linux 2023 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.",
            "rule": "SV-273994r1119970_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-273994"
        },
        "V-273995": {
            "title": "Amazon Linux 2023 must ensure cryptographic verification of vendor software packages.",
            "rule": "SV-273995r1119973_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-273995"
        },
        "V-273996": {
            "title": "Amazon Linux 2023 must check the GPG signature of locally installed software packages before installation.",
            "rule": "SV-273996r1119976_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-273996"
        },
        "V-273997": {
            "title": "Amazon Linux 2023 must check the GPG signature of software packages originating from external software repositories before installation.",
            "rule": "SV-273997r1119979_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-273997"
        },
        "V-273998": {
            "title": "Amazon Linux 2023 must have GPG signature verification enabled for all software repositories.",
            "rule": "SV-273998r1119982_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-273998"
        },
        "V-273999": {
            "title": "Amazon Linux 2023 must be a vendor-supported release.",
            "rule": "SV-273999r1155171_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-273999"
        },
        "V-274000": {
            "title": "Amazon Linux 2023 systemd-journald service must be enabled.",
            "rule": "SV-274000r1119988_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274000"
        },
        "V-274001": {
            "title": "Amazon Linux 2023 must restrict access to the kernel message buffer.",
            "rule": "SV-274001r1261392_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274001"
        },
        "V-274002": {
            "title": "Amazon Linux 2023 must prevent kernel profiling by nonprivileged users.",
            "rule": "SV-274002r1261393_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274002"
        },
        "V-274003": {
            "title": "Amazon Linux 2023 must restrict exposed kernel pointer addresses access.",
            "rule": "SV-274003r1198253_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274003"
        },
        "V-274004": {
            "title": "Amazon Linux 2023 must disable access to network bpf system call from nonprivileged processes.",
            "rule": "SV-274004r1198253_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274004"
        },
        "V-274005": {
            "title": "Amazon Linux 2023 must restrict usage of ptrace to descendant processes.",
            "rule": "SV-274005r1198253_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274005"
        },
        "V-274006": {
            "title": "Amazon Linux 2023 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.",
            "rule": "SV-274006r1120006_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274006"
        },
        "V-274007": {
            "title": "Amazon Linux 2023 must not have the vsftpd package installed.",
            "rule": "SV-274007r1120009_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274007"
        },
        "V-274008": {
            "title": "Amazon Linux 2023 must not have the sendmail package installed.",
            "rule": "SV-274008r1120012_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274008"
        },
        "V-274009": {
            "title": "Amazon Linux 2023 must not have the nfs-utils package installed.",
            "rule": "SV-274009r1120015_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274009"
        },
        "V-274010": {
            "title": "Amazon Linux 2023 must not have the telnet-server package installed.",
            "rule": "SV-274010r1120018_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274010"
        },
        "V-274011": {
            "title": "Amazon Linux 2023 must not have the gssproxy package installed.",
            "rule": "SV-274011r1184000_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274011"
        },
        "V-274012": {
            "title": "Amazon Linux 2023 must have the sudo package installed.",
            "rule": "SV-274012r1120710_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274012"
        },
        "V-274013": {
            "title": "Amazon Linux 2023 must not be configured to bypass password requirements for privilege escalation.",
            "rule": "SV-274013r1120027_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274013"
        },
        "V-274014": {
            "title": "Amazon Linux 2023 must require reauthentication when using the \"sudo\" command.",
            "rule": "SV-274014r1261391_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274014"
        },
        "V-274015": {
            "title": "Amazon Linux 2023 must require users to reauthenticate for privilege escalation.",
            "rule": "SV-274015r1120033_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274015"
        },
        "V-274016": {
            "title": "Amazon Linux 2023 must require users to provide a password for privilege escalation.",
            "rule": "SV-274016r1120036_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274016"
        },
        "V-274017": {
            "title": "Amazon Linux 2023 must have the audit package installed.",
            "rule": "SV-274017r1120039_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274017"
        },
        "V-274018": {
            "title": "Amazon Linux 2023 must produce audit records containing information to establish what type of events occurred.",
            "rule": "SV-274018r1120042_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274018"
        },
        "V-274019": {
            "title": "Amazon Linux 2023 audispd-plugins package must be installed.",
            "rule": "SV-274019r1120045_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274019"
        },
        "V-274020": {
            "title": "Amazon Linux 2023 must have the rsyslog package installed.",
            "rule": "SV-274020r1208263_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274020"
        },
        "V-274021": {
            "title": "Amazon Linux 2023 must monitor remote access methods.",
            "rule": "SV-274021r1120695_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274021"
        },
        "V-274022": {
            "title": "Amazon Linux 2023 must have the chrony package installed.",
            "rule": "SV-274022r1120054_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274022"
        },
        "V-274023": {
            "title": "Amazon Linux 2023 chronyd service must be enabled.",
            "rule": "SV-274023r1120057_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274023"
        },
        "V-274024": {
            "title": "Amazon Linux 2023 must have the Advanced Intrusion Detection Environment (AIDE) package installed.",
            "rule": "SV-274024r1190697_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274024"
        },
        "V-274025": {
            "title": "Amazon Linux 2023 must routinely check the baseline configuration for unauthorized changes and notify the system administrator (SA) when anomalies in the operation of any security functions are discovered.",
            "rule": "SV-274025r1192649_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274025"
        },
        "V-274026": {
            "title": "Amazon Linux 2023 must use cryptographic mechanisms to protect the integrity of audit tools.",
            "rule": "SV-274026r1120066_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274026"
        },
        "V-274027": {
            "title": "Amazon Linux 2023 must have the firewalld package installed.",
            "rule": "SV-274027r1120069_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274027"
        },
        "V-274028": {
            "title": "Amazon Linux 2023 must have the firewalld service active.",
            "rule": "SV-274028r1190806_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274028"
        },
        "V-274030": {
            "title": "Amazon Linux 2023 must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks.",
            "rule": "SV-274030r1120078_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274030"
        },
        "V-274031": {
            "title": "Amazon Linux 2023 must have the s-nail package installed.",
            "rule": "SV-274031r1120081_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274031"
        },
        "V-274032": {
            "title": "Amazon Linux 2023 must have the libreswan package installed.",
            "rule": "SV-274032r1261395_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274032"
        },
        "V-274033": {
            "title": "Amazon Linux 2023 must have the policycoreutils package installed.",
            "rule": "SV-274033r1120087_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274033"
        },
        "V-274034": {
            "title": "Amazon Linux 2023 must have the pcsc-lite package installed.",
            "rule": "SV-274034r1120090_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274034"
        },
        "V-274035": {
            "title": "Amazon Linux 2023 must have the packages required for encrypting off-loaded audit logs installed.",
            "rule": "SV-274035r1261396_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274035"
        },
        "V-274036": {
            "title": "Amazon Linux 2023 must have the opensc package installed.",
            "rule": "SV-274036r1261397_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274036"
        },
        "V-274037": {
            "title": "Amazon Linux 2023 must have the openssl-pkcs11 package installed.",
            "rule": "SV-274037r1261398_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274037"
        },
        "V-274038": {
            "title": "Amazon Linux 2023 must have SSH installed.",
            "rule": "SV-274038r1120102_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274038"
        },
        "V-274039": {
            "title": "Amazon Linux 2023 must implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.",
            "rule": "SV-274039r1120105_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274039"
        },
        "V-274040": {
            "title": "Amazon Linux 2023 must have the crypto-policies package installed.",
            "rule": "SV-274040r1184011_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274040"
        },
        "V-274042": {
            "title": "Amazon Linux 2023 server must be configured to use only DoW-approved encryption ciphers employing FIPS 140-2/140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.",
            "rule": "SV-274042r1261401_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274042"
        },
        "V-274043": {
            "title": "Amazon Linux 2023 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-2/140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.",
            "rule": "SV-274043r1261405_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274043"
        },
        "V-274044": {
            "title": "Amazon Linux 2023 SSH daemon must not allow Generic Security Service Application Program Interface (GSSAPI) authentication.",
            "rule": "SV-274044r1120120_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274044"
        },
        "V-274045": {
            "title": "Amazon Linux 2023 SSH daemon must not allow Kerberos authentication.",
            "rule": "SV-274045r1120123_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274045"
        },
        "V-274046": {
            "title": "Amazon Linux 2023 must force a frequent session key renegotiation for SSH connections to the server.",
            "rule": "SV-274046r1120126_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274046"
        },
        "V-274047": {
            "title": "Amazon Linux 2023 SSHD must accept public key authentication.",
            "rule": "SV-274047r1261407_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274047"
        },
        "V-274048": {
            "title": "Amazon Linux 2023 SSHD must not allow blank passwords.",
            "rule": "SV-274048r1120132_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274048"
        },
        "V-274049": {
            "title": "Amazon Linux 2023 must not permit direct logons to the root account using remote access via SSH.",
            "rule": "SV-274049r1120747_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274049"
        },
        "V-274050": {
            "title": "Amazon Linux 2023 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.",
            "rule": "SV-274050r1120138_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274050"
        },
        "V-274051": {
            "title": "Amazon Linux 2023 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.",
            "rule": "SV-274051r1120141_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274051"
        },
        "V-274052": {
            "title": "Amazon Linux 2023 must enable the Pluggable Authentication Module (PAM) interface for SSHD.",
            "rule": "SV-274052r1120144_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274052"
        },
        "V-274058": {
            "title": "Amazon Linux 2023 crypto policy must not be overridden.",
            "rule": "SV-274058r1186176_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274058"
        },
        "V-274059": {
            "title": "Amazon Linux 2023 must enable certificate-based smart card authentication.",
            "rule": "SV-274059r1261409_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274059"
        },
        "V-274060": {
            "title": "Amazon Linux 2023 must map the authenticated identity to the user or group account for PKI-based authentication.",
            "rule": "SV-274060r1120168_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274060"
        },
        "V-274061": {
            "title": "Amazon Linux 2023 must implement certificate status checking for multifactor authentication.",
            "rule": "SV-274061r1261411_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274061"
        },
        "V-274062": {
            "title": "Amazon Linux 2023 must prohibit the use of cached authenticators after one day.",
            "rule": "SV-274062r1120174_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274062"
        },
        "V-274063": {
            "title": "Amazon Linux 2023, for PKI-based authentication, must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.",
            "rule": "SV-274063r1261413_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274063"
        },
        "V-274064": {
            "title": "Amazon Linux 2023, for PKI-based authentication, must enforce authorized access to the corresponding private key.",
            "rule": "SV-274064r1120180_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274064"
        },
        "V-274065": {
            "title": "Amazon Linux 2023 must display the Standard Mandatory DoW Notice and Consent Banner before granting local or remote access to the system.",
            "rule": "SV-274065r1261416_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274065"
        },
        "V-274066": {
            "title": "Amazon Linux 2023 must display the Standard Mandatory DoW Notice and Consent Banner before granting local or remote access to the system via a SSH logon.",
            "rule": "SV-274066r1261419_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274066"
        },
        "V-274067": {
            "title": "Amazon Linux 2023 must allocate audit record storage capacity to store at least one week's worth of audit records, when audit records are not immediately sent to a central audit record storage facility.",
            "rule": "SV-274067r1120653_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274067"
        },
        "V-274068": {
            "title": "Amazon Linux 2023 must use a separate file system for the system audit data path.",
            "rule": "SV-274068r1120192_rule",
            "severity": "low",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274068"
        },
        "V-274069": {
            "title": "Amazon Linux 2023 must label all off-loaded audit logs before sending them to the central log server.",
            "rule": "SV-274069r1120195_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274069"
        },
        "V-274070": {
            "title": "Amazon Linux 2023 must take appropriate action when the internal event queue is full.",
            "rule": "SV-274070r1120198_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274070"
        },
        "V-274071": {
            "title": "Amazon Linux 2023 must take action when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity.",
            "rule": "SV-274071r1184023_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274071"
        },
        "V-274072": {
            "title": "Amazon Linux 2023 must notify the system administrator (SA) and information system security officer (ISSO) (at a minimum) when allocated audit record storage volume 75 percent utilization.",
            "rule": "SV-274072r1120204_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274072"
        },
        "V-274073": {
            "title": "Amazon Linux 2023 must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity.",
            "rule": "SV-274073r1120207_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274073"
        },
        "V-274074": {
            "title": "Amazon Linux 2023 must take action when allocated audit record storage volume reaches 95 percent of the repository maximum audit record storage capacity.",
            "rule": "SV-274074r1120210_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274074"
        },
        "V-274075": {
            "title": "Amazon Linux 2023 must immediately notify the system administrator (SA) and information system security officer (ISSO), at a minimum, of an audit processing failure event.",
            "rule": "SV-274075r1120700_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274075"
        },
        "V-274076": {
            "title": "Amazon Linux 2023 must be configured to off-load audit records onto a different system from the system being audited via syslog.",
            "rule": "SV-274076r1120216_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274076"
        },
        "V-274077": {
            "title": "Amazon Linux 2023 must authenticate the remote logging server for off-loading audit logs via rsyslog.",
            "rule": "SV-274077r1120219_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274077"
        },
        "V-274078": {
            "title": "Amazon Linux 2023 must encrypt the transfer of audit records off-loaded onto a different system or media from the system being audited via rsyslog.",
            "rule": "SV-274078r1120222_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274078"
        },
        "V-274079": {
            "title": "Amazon Linux 2023 must encrypt, via the OpenSSL TLS (ossl) driver, the transfer of audit records off-loaded onto a different system or media from the system being audited by rsyslog.",
            "rule": "SV-274079r1210985_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274079"
        },
        "V-274080": {
            "title": "Amazon Linux 2023 must be configured to off-load audit records onto a different system from the system being audited via syslog.",
            "rule": "SV-274080r1120228_rule",
            "severity": "low",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274080"
        },
        "V-274081": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.",
            "rule": "SV-274081r1120231_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274081"
        },
        "V-274082": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.d/ directory.",
            "rule": "SV-274082r1120234_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274082"
        },
        "V-274083": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.",
            "rule": "SV-274083r1120237_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274083"
        },
        "V-274084": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.",
            "rule": "SV-274084r1120240_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274084"
        },
        "V-274085": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/opasswd.",
            "rule": "SV-274085r1120243_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274085"
        },
        "V-274086": {
            "title": "Amazon Linux 2023 must audit uses of the \"execve\" system call.",
            "rule": "SV-274086r1120246_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274086"
        },
        "V-274087": {
            "title": "Amazon Linux 2023 must audit all uses of the chmod, fchmod, and fchmodat system calls.",
            "rule": "SV-274087r1120249_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274087"
        },
        "V-274088": {
            "title": "Amazon Linux 2023 must audit all uses of the chown, fchown, fchownat, and lchown system calls.",
            "rule": "SV-274088r1120252_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274088"
        },
        "V-274089": {
            "title": "Amazon Linux 2023 must audit all uses of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.",
            "rule": "SV-274089r1120255_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274089"
        },
        "V-274090": {
            "title": "Amazon Linux 2023 must audit all uses of the truncate, ftruncate, creat, open, openat, and open_by_handle_at system calls.",
            "rule": "SV-274090r1120258_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274090"
        },
        "V-274091": {
            "title": "Amazon Linux 2023 must audit all uses of the init_module and finit_module system calls.",
            "rule": "SV-274091r1120261_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274091"
        },
        "V-274092": {
            "title": "Amazon Linux 2023 must audit all uses of the create_module system call.",
            "rule": "SV-274092r1120264_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274092"
        },
        "V-274093": {
            "title": "Amazon Linux 2023 must audit all uses of the kmod command.",
            "rule": "SV-274093r1120267_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274093"
        },
        "V-274094": {
            "title": "Amazon Linux 2023 must audit all uses of the rename, unlink, rmdir, renameat, and unlinkat system calls.",
            "rule": "SV-274094r1120270_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274094"
        },
        "V-274095": {
            "title": "Amazon Linux 2023 must audit all uses of the chcon command.",
            "rule": "SV-274095r1120273_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274095"
        },
        "V-274096": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/faillock.",
            "rule": "SV-274096r1120276_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274096"
        },
        "V-274097": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/lastlog.",
            "rule": "SV-274097r1120279_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274097"
        },
        "V-274098": {
            "title": "Amazon Linux 2023 must audit all uses of the init command.",
            "rule": "SV-274098r1120282_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274098"
        },
        "V-274099": {
            "title": "Amazon Linux 2023 must audit all uses of the reboot command.",
            "rule": "SV-274099r1120285_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274099"
        },
        "V-274100": {
            "title": "Amazon Linux 2023 must audit all uses of the shutdown command.",
            "rule": "SV-274100r1120288_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274100"
        },
        "V-274101": {
            "title": "Amazon Linux 2023 audit tools must have a mode of \"0755\" or less permissive.",
            "rule": "SV-274101r1120291_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274101"
        },
        "V-274102": {
            "title": "Amazon Linux 2023 audit tools must be owned by root.",
            "rule": "SV-274102r1120294_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274102"
        },
        "V-274103": {
            "title": "Amazon Linux 2023 audit tools must be group-owned by root.",
            "rule": "SV-274103r1120297_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274103"
        },
        "V-274104": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.",
            "rule": "SV-274104r1120300_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274104"
        },
        "V-274105": {
            "title": "Amazon Linux 2023 must audit all successful/unsuccessful uses of the chage command.",
            "rule": "SV-274105r1120661_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274105"
        },
        "V-274107": {
            "title": "Amazon Linux 2023 must off-load audit records onto a different system in the event the audit storage volume is full.",
            "rule": "SV-274107r1120309_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274107"
        },
        "V-274108": {
            "title": "Amazon Linux 2023 audit logs must be group-owned by root or by a restricted logging group to prevent unauthorized read access.",
            "rule": "SV-274108r1120312_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274108"
        },
        "V-274109": {
            "title": "Amazon Linux 2023 audit log directory must be owned by root to prevent unauthorized read access.",
            "rule": "SV-274109r1120315_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274109"
        },
        "V-274110": {
            "title": "Amazon Linux 2023 audit logs file must have mode \"0600\" or less permissive to prevent unauthorized access to the audit log.",
            "rule": "SV-274110r1120318_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274110"
        },
        "V-274111": {
            "title": "Amazon Linux 2023 must allow only the information system security manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.",
            "rule": "SV-274111r1261386_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274111"
        },
        "V-274112": {
            "title": "Amazon Linux 2023 must audit all uses of the sudo command.",
            "rule": "SV-274112r1120324_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274112"
        },
        "V-274113": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.",
            "rule": "SV-274113r1120327_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274113"
        },
        "V-274114": {
            "title": "Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.",
            "rule": "SV-274114r1120330_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274114"
        },
        "V-274115": {
            "title": "Amazon Linux 2023 must produce audit records containing information to establish the identity of any individual or process associated with the event.",
            "rule": "SV-274115r1120333_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274115"
        },
        "V-274117": {
            "title": "Amazon Linux 2023 must ensure the audit log directory be owned by root to prevent unauthorized read access.",
            "rule": "SV-274117r1120339_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274117"
        },
        "V-274119": {
            "title": "Amazon Linux 2023 library directories must be group-owned by root or a system account.",
            "rule": "SV-274119r1120345_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274119"
        },
        "V-274120": {
            "title": "Amazon Linux 2023 library directories must have mode \"755\" or less permissive.",
            "rule": "SV-274120r1120348_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274120"
        },
        "V-274121": {
            "title": "Amazon Linux 2023 library files must have mode \"755\" or less permissive.",
            "rule": "SV-274121r1155161_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274121"
        },
        "V-274122": {
            "title": "Amazon Linux 2023 library files must be owned by root.",
            "rule": "SV-274122r1155164_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274122"
        },
        "V-274123": {
            "title": "Amazon Linux 2023 library files must be group-owned by root or a system account.",
            "rule": "SV-274123r1155167_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274123"
        },
        "V-274124": {
            "title": "Amazon Linux 2023 library directories must be owned by root.",
            "rule": "SV-274124r1120360_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274124"
        },
        "V-274125": {
            "title": "Amazon Linux 2023 must ensure the /var/log directory have mode \"0755\" or less permissive.",
            "rule": "SV-274125r1120363_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274125"
        },
        "V-274126": {
            "title": "Amazon Linux 2023 must ensure the /var/log directory be owned by root.",
            "rule": "SV-274126r1120366_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274126"
        },
        "V-274127": {
            "title": "Amazon Linux 2023 must ensure the /var/log directory be group-owned by root.",
            "rule": "SV-274127r1120369_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274127"
        },
        "V-274128": {
            "title": "Amazon Linux 2023 must ensure the /var/log/messages file have mode \"0640\" or less permissive.",
            "rule": "SV-274128r1120372_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274128"
        },
        "V-274129": {
            "title": "Amazon Linux 2023 must ensure the /var/log/messages file be group-owned by root.",
            "rule": "SV-274129r1120375_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274129"
        },
        "V-274130": {
            "title": "Amazon Linux 2023 must ensure the /var/log/messages file be owned by root.",
            "rule": "SV-274130r1120378_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274130"
        },
        "V-274131": {
            "title": "Amazon Linux 2023 system commands must be owned by root.",
            "rule": "SV-274131r1120381_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274131"
        },
        "V-274132": {
            "title": "Amazon Linux 2023 system commands must be group-owned by root or a system account.",
            "rule": "SV-274132r1208253_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274132"
        },
        "V-274133": {
            "title": "Amazon Linux 2023 must enforce password complexity by requiring that at least one uppercase character be used.",
            "rule": "SV-274133r1120387_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274133"
        },
        "V-274134": {
            "title": "Amazon Linux 2023 must enforce password complexity by requiring that at least one lowercase character be used.",
            "rule": "SV-274134r1120390_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274134"
        },
        "V-274135": {
            "title": "Amazon Linux 2023 must enforce password complexity by requiring that at least one numeric character be used.",
            "rule": "SV-274135r1120393_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274135"
        },
        "V-274136": {
            "title": "Amazon Linux 2023 must require the change of at least 50 percent of the total number of characters when passwords are changed.",
            "rule": "SV-274136r1120697_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274136"
        },
        "V-274137": {
            "title": "Amazon Linux 2023 must enforce a minimum 15-character password length.",
            "rule": "SV-274137r1120725_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274137"
        },
        "V-274138": {
            "title": "Amazon Linux 2023 must enforce password complexity by requiring that at least one special character be used.",
            "rule": "SV-274138r1120402_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274138"
        },
        "V-274139": {
            "title": "Amazon Linux 2023 must enforce password complexity rules for the root account.",
            "rule": "SV-274139r1120405_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274139"
        },
        "V-274140": {
            "title": "Amazon Linux 2023 must prevent the use of dictionary words for passwords.",
            "rule": "SV-274140r1120408_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274140"
        },
        "V-274141": {
            "title": "Amazon Linux 2023 must limit the number of concurrent sessions to ten for all accounts and/or account types.",
            "rule": "SV-274141r1120411_rule",
            "severity": "low",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274141"
        },
        "V-274142": {
            "title": "Amazon Linux 2023 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.",
            "rule": "SV-274142r1208254_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274142"
        },
        "V-274143": {
            "title": "Amazon Linux 2023 must enforce 24 hours/1 day as the minimum password lifetime.",
            "rule": "SV-274143r1120417_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274143"
        },
        "V-274144": {
            "title": "Amazon Linux 2023 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.",
            "rule": "SV-274144r1120420_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274144"
        },
        "V-274145": {
            "title": "Amazon Linux 2023 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.",
            "rule": "SV-274145r1120423_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274145"
        },
        "V-274146": {
            "title": "Amazon Linux 2023 must automatically remove or disable temporary user accounts after 72 hours.",
            "rule": "SV-274146r1120426_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274146"
        },
        "V-274147": {
            "title": "Amazon Linux 2023 must automatically lock an account when three unsuccessful logon attempts occur.",
            "rule": "SV-274147r1184027_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274147"
        },
        "V-274148": {
            "title": "Amazon Linux 2023 must be able to enforce a 180-day maximum password lifetime restriction.",
            "rule": "SV-274148r1261378_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274148"
        },
        "V-274149": {
            "title": "Amazon Linux 2023 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity.",
            "rule": "SV-274149r1120435_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274149"
        },
        "V-274150": {
            "title": "Amazon Linux 2023 must automatically expire temporary accounts within 72 hours.",
            "rule": "SV-274150r1120438_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274150"
        },
        "V-274151": {
            "title": "Amazon Linux 2023 must restrict the use of the \"su\" command.",
            "rule": "SV-274151r1120441_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274151"
        },
        "V-274152": {
            "title": "Amazon Linux 2023 must enable the SELinux targeted policy.",
            "rule": "SV-274152r1120738_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274152"
        },
        "V-274153": {
            "title": "Amazon Linux 2023 must use a Linux Security Module configured to enforce limits on system services.",
            "rule": "SV-274153r1120713_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274153"
        },
        "V-274154": {
            "title": "Amazon Linux 2023 must automatically lock an account when three unsuccessful logon attempts occur.",
            "rule": "SV-274154r1120450_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274154"
        },
        "V-274155": {
            "title": "Amazon Linux 2023 must automatically lock the root account until the root account is released by an administrator when three unsuccessful logon attempts occur during a 15-minute time period.",
            "rule": "SV-274155r1120453_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274155"
        },
        "V-274156": {
            "title": "Amazon Linux 2023 must automatically lock an account until the locked account is released by an administrator when three unsuccessful logon attempts in 15 minutes occur.",
            "rule": "SV-274156r1184029_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274156"
        },
        "V-274157": {
            "title": "Amazon Linux 2023 must maintain an account lock until the locked account is released by an administrator.",
            "rule": "SV-274157r1120459_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274157"
        },
        "V-274158": {
            "title": "Amazon Linux 2023 must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the Ports, Protocols, and Services Management Category Assurance List (PPSM CAL) and vulnerability assessments.",
            "rule": "SV-274158r1184031_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274158"
        },
        "V-274159": {
            "title": "Amazon Linux 2023 must insure all interactive users have a primary group that exists.",
            "rule": "SV-274159r1120465_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274159"
        },
        "V-274160": {
            "title": "Amazon Linux 2023 must ensure all interactive users have unique User IDs (UIDs).",
            "rule": "SV-274160r1120663_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274160"
        },
        "V-274161": {
            "title": "Amazon Linux 2023 must ensure the password complexity module is enabled in the password-auth file.",
            "rule": "SV-274161r1120471_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274161"
        },
        "V-274162": {
            "title": "Amazon Linux 2023 password-auth must be configured to use a sufficient number of hashing rounds.",
            "rule": "SV-274162r1261420_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274162"
        },
        "V-274163": {
            "title": "Amazon Linux 2023 system-auth must be configured to use a sufficient number of hashing rounds.",
            "rule": "SV-274163r1261421_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274163"
        },
        "V-274164": {
            "title": "Amazon Linux 2023 must ensure a sticky bit be set on all public directories.",
            "rule": "SV-274164r1261422_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274164"
        },
        "V-274165": {
            "title": "Amazon Linux 2023 must ensure all world-writable directories be owned by root, sys, bin, or an application user.",
            "rule": "SV-274165r1261423_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274165"
        },
        "V-274166": {
            "title": "Amazon Linux 2023 must terminate idle user sessions.",
            "rule": "SV-274166r1261383_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274166"
        },
        "V-274167": {
            "title": "Amazon Linux 2023 must enable auditing of processes that start prior to the audit daemon.",
            "rule": "SV-274167r1120489_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274167"
        },
        "V-274168": {
            "title": "Amazon Linux 2023 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon.",
            "rule": "SV-274168r1120492_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274168"
        },
        "V-274169": {
            "title": "Amazon Linux 2023 must enable discretionary access control on hardlinks.",
            "rule": "SV-274169r1120495_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274169"
        },
        "V-274170": {
            "title": "Amazon Linux 2023 must enable kernel parameters to enforce discretionary access control on symlinks.",
            "rule": "SV-274170r1120498_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274170"
        },
        "V-274173": {
            "title": "Amazon Linux 2023 debug-shell systemd service must be disabled.",
            "rule": "SV-274173r1120507_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274173"
        },
        "V-274175": {
            "title": "Amazon Linux 2023 must synchronize internal information system clocks to the authoritative time source at least every 24 hours.",
            "rule": "SV-274175r1261426_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274175"
        },
        "V-274177": {
            "title": "Amazon Linux 2023 must prevent the loading of a new kernel for later execution.",
            "rule": "SV-274177r1120519_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274177"
        },
        "V-274178": {
            "title": "Amazon Linux 2023 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.",
            "rule": "SV-274178r1120522_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274178"
        },
        "V-274179": {
            "title": "Amazon Linux 2023 must mount /dev/shm with the nodev option.",
            "rule": "SV-274179r1120525_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274179"
        },
        "V-274180": {
            "title": "Amazon Linux 2023 must mount /dev/shm with the nosuid option.",
            "rule": "SV-274180r1198347_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274180"
        },
        "V-274181": {
            "title": "Amazon Linux 2023 must ensure the pcscd socket is active.",
            "rule": "SV-274181r1208251_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274181"
        },
        "V-274182": {
            "title": "Amazon Linux 2023 file system automount function must be disabled.",
            "rule": "SV-274182r1261388_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274182"
        },
        "V-274183": {
            "title": "Amazon Linux 2023 must protect against or limit the effects of denial-of-service (DoS) attacks by ensuring rate-limiting measures are configured on impacted network interfaces.",
            "rule": "SV-274183r1120714_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274183"
        },
        "V-274184": {
            "title": "Amazon Linux 2023 must implement nonexecutable data to protect its memory from unauthorized code execution.",
            "rule": "SV-274184r1120540_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274184"
        },
        "V-274185": {
            "title": "Amazon Linux 2023 must remove all software components after updated versions have been installed.",
            "rule": "SV-274185r1120543_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274185"
        },
        "V-274186": {
            "title": "Amazon Linux 2023 must configure the use of the pam_faillock.so module in the /etc/pam.d/system-auth file.",
            "rule": "SV-274186r1120546_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274186"
        },
        "V-274187": {
            "title": "Amazon Linux 2023 audit system must protect logon user identifiers (UIDs) from unauthorized change.",
            "rule": "SV-274187r1120715_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-274187"
        },
        "V-283440": {
            "title": "Amazon Linux 2023 must implement DoW-approved encryption in the bind package.",
            "rule": "SV-283440r1261408_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-283440"
        },
        "V-283441": {
            "title": "Amazon Linux 2023 must enable FIPS mode.",
            "rule": "SV-283441r1192638_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-283441"
        },
        "V-283442": {
            "title": "The Amazon Linux 2023 SSH client must be configured to use only DoW-approved encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.",
            "rule": "SV-283442r1261402_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-283442"
        },
        "V-283443": {
            "title": "The Amazon Linux 2023 SSH client must be configured to use only DoW-approved Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.",
            "rule": "SV-283443r1261406_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-283443"
        },
        "V-283452": {
            "title": "Amazon Linux 2023 must implement a FIPS 140-2/140-3-compliant systemwide cryptographic policy.",
            "rule": "SV-283452r1261381_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-283452"
        },
        "V-284944": {
            "title": "Amazon Linux 2023 must ensure that the rsyslog service is running and persistent.",
            "rule": "SV-284944r1261394_rule",
            "severity": "medium",
            "link": "/stig/Amazon_Linux_2023/1/5/V-284944"
        },
        "V-288814": {
            "title": "Amazon Linux 2023 must implement DoW-approved encryption in the OpenSSL package.",
            "rule": "SV-288814r1261374_rule",
            "severity": "high",
            "link": "/stig/Amazon_Linux_2023/1/5/V-288814"
        }
    }
}