diff --git a/features/fedramp_extensions.feature b/features/fedramp_extensions.feature index e9c9696bc..423497d98 100644 --- a/features/fedramp_extensions.feature +++ b/features/fedramp_extensions.feature @@ -101,6 +101,7 @@ Examples: | information-type-has-confidentiality-impact | | information-type-has-integrity-impact | | information-type-system | + | inter-boundary-component-has-direction | | interconnection-direction | | interconnection-security | | inventory-item-allows-authenticated-scan | @@ -312,6 +313,8 @@ Examples: | information-type-id-PASS.yaml | | information-type-system-FAIL.yaml | | information-type-system-PASS.yaml | + | inter-boundary-component-has-direction-FAIL.yaml | + | inter-boundary-component-has-direction-PASS.yaml | | interconnection-direction-FAIL.yaml | | interconnection-direction-PASS.yaml | | interconnection-security-FAIL.yaml | diff --git a/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml b/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml index 547ee8828..91fd25b6e 100644 --- a/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml +++ b/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml @@ -1183,6 +1183,8 @@

An external system to which this system shares an interconnection.

+ + @@ -1763,6 +1765,8 @@ + +

If 'yes', describe the authentication method.

@@ -2176,6 +2180,8 @@ + +

If 'yes', describe the authentication method.

diff --git a/src/validations/constraints/content/ssp-inter-boundary-component-has-direction-INVALID.xml b/src/validations/constraints/content/ssp-inter-boundary-component-has-direction-INVALID.xml new file mode 100644 index 000000000..a6ac57490 --- /dev/null +++ b/src/validations/constraints/content/ssp-inter-boundary-component-has-direction-INVALID.xml @@ -0,0 +1,25 @@ + + + + + + + Communication Service System + +

A network communication service system.

+
+ + + + + + + +
+ +
+ +
\ No newline at end of file diff --git a/src/validations/constraints/fedramp-external-constraints.xml b/src/validations/constraints/fedramp-external-constraints.xml index b5a552a93..af7ae5b20 100644 --- a/src/validations/constraints/fedramp-external-constraints.xml +++ b/src/validations/constraints/fedramp-external-constraints.xml @@ -514,16 +514,22 @@ + Authentication Method Has Remarks Each authentication method in a FedRAMP SSP MUST have a remarks field. - + System Implementation Has Inventory Items A FedRAMP SSP system implementation section MUST have at least two inventory items. - + + + Inter-Boundary Component Has Direction + + In an inter-boundary communication component, a FedRAMP SSP MUST have at least one direction property, with no more than one incoming and no more than one outgoing direction. + Leveraged Authorization Has Authorization Type @@ -538,7 +544,7 @@ Leveraged Authorization Has System Identifier A FedRAMP SSP MUST define exactly one system identifier for each leveraged authorization entry. - + Network Component Has Connection Security Property diff --git a/src/validations/constraints/unit-tests/inter-boundary-component-has-direction-FAIL.yaml b/src/validations/constraints/unit-tests/inter-boundary-component-has-direction-FAIL.yaml new file mode 100644 index 000000000..e17a40820 --- /dev/null +++ b/src/validations/constraints/unit-tests/inter-boundary-component-has-direction-FAIL.yaml @@ -0,0 +1,8 @@ +# Driver for the invalid inter-boundary-component-has-direction constraint unit test. +test-case: + name: The invalid inter-boundary-component-has-direction constraint unit test. + description: Test that the FedRAMP SSP inter-boundary communication component has more than one incoming or outgoing direction. + content: ../content/ssp-inter-boundary-component-has-direction-INVALID.xml + expectations: + - constraint-id: inter-boundary-component-has-direction + result: fail \ No newline at end of file diff --git a/src/validations/constraints/unit-tests/inter-boundary-component-has-direction-PASS.yaml b/src/validations/constraints/unit-tests/inter-boundary-component-has-direction-PASS.yaml new file mode 100644 index 000000000..b88ce7b02 --- /dev/null +++ b/src/validations/constraints/unit-tests/inter-boundary-component-has-direction-PASS.yaml @@ -0,0 +1,8 @@ +# Driver for the valid inter-boundary-component-has-direction constraint unit test. +test-case: + name: The valid inter-boundary-component-has-direction constraint unit test. + description: Test that the FedRAMP SSP inter-boundary communication component has at least one direction property, with no more than one incoming and no more than one outgoing direction. + content: ../../../content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml + expectations: + - constraint-id: inter-boundary-component-has-direction + result: pass \ No newline at end of file