Detections
Analytics

1.74 AZLX-23-002015

Information

Amazon Linux 2023 must allocate audit record storage capacity to store at least one week's worth of audit records, when audit records are not immediately sent to a central audit record storage facility.

GROUP ID: V-274067RULE ID: SV-274067r1120653

To ensure operating systems have a sufficient storage capacity in which to write the audit logs, operating systems must be able to allocate audit record storage capacity.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure Amazon Linux 2023 to provide adequate storage for at least one-week of audit logs when audit records are not immediately sent to a central audit record storage facility.

If the storage partition is not large enough for at least one week of audit logs, then either:

 - Resize the partition to ensure there is enough storage capacity.
 - Create a new partition for the audit logs.

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CAT|II, CCI|CCI-001849, Rule-ID|SV-274067r1120653_rule, STIG-ID|AZLX-23-002015, Vuln-ID|V-274067

Plugin: Unix

Control ID: 107574a8a92295e9295fceb0e449acec3076e7b736726e0c78649108a4e8b104