Amazon Linux 2023 Security Technical Implementation Guide

The Amazon Linux 2023 Security Technical Implementation Guide (V1 R5) has 187 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

187STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R5

CurrentPublished Wed Sep 30 2026

Amazon Linux 2023 audispd-plugins package must be installed.

Amazon Linux 2023 Security Technical Implementation Guide

Assessment Title

Rule Text

Amazon Linux 2023 audispd-plugins package must be installed.

Description

Discussion Text

The "audispd-plugins" package provides plugins for the real-time interface to the audit subsystem, "audispd". These plugins can, for example, relay events to remote machines or analyze events for suspicious behavior.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-274019

Rule

SV-274019r1120045_rule

Severity

medium

Rule Version

AZLX-23-001035

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify Amazon Linux 2023 has the audispd-plugins package installed with the following command:

$ sudo dnf list --installed audispd-plugins
Installed Packages
audispd-plugins.x86_64          3.0.6-1.amzn2023.0.2          @amazonlinux

If the "audispd-plugins" package is not installed, this is a finding.

Implementation Procedure

Fix Text

Configure Amazon Linux 2023 to have the audispd-plugins package installed.

Install the audispd-plugins package with the following command:
 
$ sudo dnf install -y audispd-plugins

STIG check 26 of 187 in the Amazon Linux 2023 STIG checklist

← Previous · V-274018Amazon Linux 2023 must produce audit records containing information to establish what type of events occurred.Next · V-274020 →Amazon Linux 2023 must have the rsyslog package installed.