Control statement
a. Authorize internal connections of {{ insert: param, ca-09_odp.01 }} to the system;
b. Document, for each internal connection, the interface characteristics, security and privacy requirements, and the nature of the information communicated;
c. Terminate internal system connections after {{ insert: param, ca-09_odp.02 }} ; and
d. Review {{ insert: param, ca-09_odp.03 }} the continued need for each internal connection. Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-CNA-01 | Restrict Network Traffic _Persistently_ ensure all _machine-based_ _information resources_ are configured to limit inbound and outbound network traffic. | Cloud Native Architecture |
| KSI-CNA-02 | Attack Surface _Persistently_ ensure _machine-based_ _information resources_ have a minimal attack surface and that lateral movement is minimized if compromised. | Cloud Native Architecture |
| KSI-CNA-03 | Enforce Traffic Flow Use logical networking and related capabilities to enforce traffic flow controls. | Cloud Native Architecture |