diff --git a/features/fedramp_extensions.feature b/features/fedramp_extensions.feature index ad74628be..9c6bbcbd4 100644 --- a/features/fedramp_extensions.feature +++ b/features/fedramp_extensions.feature @@ -122,6 +122,7 @@ Examples: | information-type-system | | inter-boundary-component-has-information-type | | inter-boundary-component-information-type-has-class-attribute | + | interconnection-component-linked-has-protocol | | interconnection-direction | | interconnection-security | | inventory-item-allows-authenticated-scan | @@ -390,6 +391,8 @@ Examples: | inter-boundary-component-has-information-type-PASS.yaml | | inter-boundary-component-information-type-has-class-attribute-FAIL.yaml | | inter-boundary-component-information-type-has-class-attribute-PASS.yaml | + | interconnection-component-linked-has-protocol-FAIL.yaml | + | interconnection-component-linked-has-protocol-PASS.yaml | | interconnection-direction-FAIL.yaml | | interconnection-direction-PASS.yaml | | interconnection-security-FAIL.yaml | diff --git a/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml b/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml index 5b681cd60..e0605f9db 100644 --- a/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml +++ b/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml @@ -2315,6 +2315,54 @@ approved.

+ + Authorized Connection Information System Name + +

Describe the purpose of the external system or service.

+
+ + + +

If 'yes', describe the authentication method in the remarks.

+

If 'no', explain why no authentication is used in the remarks.

+

If 'not-applicable', attest explain why authentication is not applicable in the remarks.

+
+
+ + + + + + + + + + UUID of remote system + + + UUID of remote system + + + UUID of remote system + + + + 44444444-2222-4000-8000-004000000001 + + + 11111111-2222-4000-8000-004000000008 + + + 11111111-2222-4000-8000-004000000008 + + + + 11111111-2222-4000-8000-004000000010 + 11111111-2222-4000-8000-004000000011 + 11111111-2222-4000-8000-004000000012 + +
+ diff --git a/src/validations/constraints/content/ssp-interconnection-component-linked-has-protocol-INVALID.xml b/src/validations/constraints/content/ssp-interconnection-component-linked-has-protocol-INVALID.xml new file mode 100644 index 000000000..ee440c824 --- /dev/null +++ b/src/validations/constraints/content/ssp-interconnection-component-linked-has-protocol-INVALID.xml @@ -0,0 +1,14 @@ + + + + + + + + + + + + + \ No newline at end of file diff --git a/src/validations/constraints/fedramp-external-constraints.xml b/src/validations/constraints/fedramp-external-constraints.xml index 4b0a10584..ea9c91114 100644 --- a/src/validations/constraints/fedramp-external-constraints.xml +++ b/src/validations/constraints/fedramp-external-constraints.xml @@ -680,6 +680,18 @@ + + + + + + Linked Interconnection Component Has Protocol + + In a FedRAMP SSP, at least one of the interconnection "used-by" linked components MUST have at least one protocol assembly. + + + + diff --git a/src/validations/constraints/unit-tests/interconnection-component-linked-has-protocol-FAIL.yaml b/src/validations/constraints/unit-tests/interconnection-component-linked-has-protocol-FAIL.yaml new file mode 100644 index 000000000..486bafceb --- /dev/null +++ b/src/validations/constraints/unit-tests/interconnection-component-linked-has-protocol-FAIL.yaml @@ -0,0 +1,8 @@ +# Driver for the invalid interconnection-component-linked-has-protocol constraint unit test. +test-case: + name: The invalid interconnection-component-linked-has-protocol constraint unit test. + description: Test that the FedRAMP SSP interconnection "used-by" linked component does not have a protocol assembly. + content: ../content/ssp-interconnection-component-linked-has-protocol-INVALID.xml + expectations: + - constraint-id: interconnection-component-linked-has-protocol + result: fail \ No newline at end of file diff --git a/src/validations/constraints/unit-tests/interconnection-component-linked-has-protocol-PASS.yaml b/src/validations/constraints/unit-tests/interconnection-component-linked-has-protocol-PASS.yaml new file mode 100644 index 000000000..486e1de1a --- /dev/null +++ b/src/validations/constraints/unit-tests/interconnection-component-linked-has-protocol-PASS.yaml @@ -0,0 +1,8 @@ +# Driver for the valid interconnection-component-linked-has-protocol constraint unit test. +test-case: + name: The valid interconnection-component-linked-has-protocol constraint unit test. + description: Test that the FedRAMP SSP interconnection "used-by" linked component has a protocol assembly. + content: ../../../content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml + expectations: + - constraint-id: interconnection-component-linked-has-protocol + result: pass \ No newline at end of file