πΌ SC-23 Session Authenticity (M)(H)
- Contextual name: πΌ SC-23 Session Authenticity (M)(H)
- ID:
/frameworks/fedramp-moderate-security-controls/sc/23
- Located in: πΌ System and Communications Protection
Descriptionβ
Protect the authenticity of communications sessions.
Similarβ
- Sections
/frameworks/fedramp-high-security-controls/sc/23
- Internal
- ID:
dec-c-ec7c216d
- ID:
Similar Sections (Take Policies From)β
Section | Sub Sections | Internal Rules | Policies | Flags |
---|---|---|---|---|
πΌ FedRAMP High Security Controls β πΌ SC-23 Session Authenticity (M)(H) | 5 | 7 |
Sub Sectionsβ
Section | Sub Sections | Internal Rules | Policies | Flags |
---|
Policies (7)β
Policy | Logic Count | Flags |
---|---|---|
π AWS API Gateway REST API Stage is not configured to use an SSL certificate for authentication π’ | 1 | π’ x6 |
π AWS S3 Bucket Policy is not set to deny HTTP requests π’ | 1 | π’ x6 |
π Azure App Service FTP deployments are not disabled π’ | 1 | π’ x6 |
π Azure App Service HTTPS Only configuration is not enabled π’ | 1 | π’ x6 |
π Azure MySQL Flexible Server require_secure_transport Parameter is not set to ON π’ | 1 | π’ x6 |
π Azure PostgreSQL Flexible Server require_secure_transport Parameter is not set to ON π’ | 1 | π’ x6 |
π Azure PostgreSQL Single Server Enforce SSL Connection is not set enabled π’ | 1 | π’ x6 |