Amazon Linux 2023 Security Technical Implementation Guide

The Amazon Linux 2023 Security Technical Implementation Guide (V1 R5) has 187 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

187STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R5

CurrentPublished Wed Sep 30 2026

Amazon Linux 2023 must monitor remote access methods.

Amazon Linux 2023 Security Technical Implementation Guide

Assessment Title

Rule Text

Amazon Linux 2023 must monitor remote access methods.

Description

Discussion Text

Remote access services, such as those providing remote access to network devices and information systems, which lack automated monitoring capabilities, increase risk and make remote user access management difficult at best.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-274021

Rule

SV-274021r1120695_rule

Severity

medium

Rule Version

AZLX-23-001045

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify Amazon Linux 2023 monitors all remote access methods.

Check that remote access methods are being logged by running the following command:

$ sudo grep -E '(auth.*|authpriv.*|daemon.*)' /etc/rsyslog.conf
auth.*;authpriv.*;daemon.* /var/log/secure

If "auth.*", "authpriv.*", or "daemon.*" are not configured to be logged, this is a finding.

Implementation Procedure

Fix Text

Configure Amazon Linux 2023 to monitor all remote access methods by installing rsyslog with the following command:

$ sudo yum install rsyslog

Then add or update the following lines to the "/etc/rsyslog.conf" file:

auth.*;authpriv.*;daemon.* /var/log/secure

The "rsyslog" service must be restarted for the changes to take effect. To restart the "rsyslog" service, run the following command:

$ sudo systemctl restart rsyslog.service

STIG check 28 of 187 in the Amazon Linux 2023 STIG checklist

← Previous · V-274020Amazon Linux 2023 must have the rsyslog package installed.Next · V-274022 →Amazon Linux 2023 must have the chrony package installed.