Skip to content

Commit

Permalink
Update src/validations/constraints/fedramp-external-constraints.xml
Browse files Browse the repository at this point in the history
Co-authored-by: Gabeblis <[email protected]>
  • Loading branch information
kyhu65867 and Gabeblis authored Nov 27, 2024
1 parent 28b00d2 commit 6625c35
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -526,7 +526,7 @@
<expect id="network-component-has-connection-security-prop" target="//component[(@type='service' and not(./prop[@name='leveraged-authorization-uuid']) and ./prop[@name='implementation-point' and @value='external']) or (@type='interconnection') or (@type='service' and ./prop[@name='implementation-point' and @value='internal'] and ./prop[@name='direction']) or (@type='software' and ./prop[@name='asset-type' and @value='cli'] and ./prop[@name='direction'])]" test="count(./prop[@name='interconnection-security' and @ns='https://fedramp.gov/ns/oscal']) >= 1" level="ERROR">
<formal-name>Network Component Has Connection Security Property</formal-name>
<prop namespace="https://docs.oasis-open.org/sarif/sarif/v2.1.0" name="help-url" value="https://automate.fedramp.gov/documentation/ssp/5-attachments/#system-inventory-approach"/>
<message>All network components in a FedRAMP SSP system implementation MUST define at least one interconnection security property</message>
<message>All network components in a FedRAMP SSP system implementation MUST define at least one interconnection security property.</message>
</expect>
<expect id="leveraged-authorization-has-authorization-type" target="leveraged-authorization" test="count(prop[@name='authorization-type'][@ns='https://fedramp.gov/ns/oscal']) = 1" level="ERROR">
<formal-name>Leveraged Authorization Has Authorization Type</formal-name>
Expand Down

0 comments on commit 6625c35

Please sign in to comment.