diff --git a/features/fedramp_extensions.feature b/features/fedramp_extensions.feature index 59e8e8606..18edb73fb 100644 --- a/features/fedramp_extensions.feature +++ b/features/fedramp_extensions.feature @@ -117,6 +117,7 @@ Examples: | interconnection-direction | | interconnection-security | | inventory-item-allows-authenticated-scan | + | inventory-item-and-component-has-public | | inventory-item-has-vendor-name | | inventory-item-public | | inventory-item-virtual | @@ -362,6 +363,8 @@ Examples: | interconnection-security-PASS.yaml | | inventory-item-allows-authenticated-scan-FAIL.yaml | | inventory-item-allows-authenticated-scan-PASS.yaml | + | inventory-item-and-component-has-public-FAIL.yaml | + | inventory-item-and-component-has-public-PASS.yaml | | inventory-item-has-vendor-name-FAIL.yaml | | inventory-item-has-vendor-name-PASS.yaml | | inventory-item-public-FAIL.yaml | diff --git a/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml b/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml index 94a910009..c14c4a0b4 100644 --- a/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml +++ b/src/content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml @@ -1518,6 +1518,7 @@ leveraged-authorization assembly:

+ @@ -1649,6 +1650,7 @@ property.

Describe the service and what it is used for.

+ diff --git a/src/validations/constraints/content/ssp-inventory-item-and-component-has-public-INVALID.xml b/src/validations/constraints/content/ssp-inventory-item-and-component-has-public-INVALID.xml new file mode 100644 index 000000000..8bfbcb703 --- /dev/null +++ b/src/validations/constraints/content/ssp-inventory-item-and-component-has-public-INVALID.xml @@ -0,0 +1,11 @@ + + + + + + + + + + + \ No newline at end of file diff --git a/src/validations/constraints/fedramp-external-constraints.xml b/src/validations/constraints/fedramp-external-constraints.xml index 87cf82275..e4fe24729 100644 --- a/src/validations/constraints/fedramp-external-constraints.xml +++ b/src/validations/constraints/fedramp-external-constraints.xml @@ -595,6 +595,11 @@ In a FedRAMP SSP, each information type property in a component MUST categorize the class of data flow as incoming to the system, outgoing from the system, or both. + + Inventory Item and Component Has Public + + In a FedRAMP SSP, each inventory item and internal service component MUST state if they are public-facing. + Leveraged Authorization Has Authorization Type diff --git a/src/validations/constraints/unit-tests/inventory-item-and-component-has-public-FAIL.yaml b/src/validations/constraints/unit-tests/inventory-item-and-component-has-public-FAIL.yaml new file mode 100644 index 000000000..fa4eb9790 --- /dev/null +++ b/src/validations/constraints/unit-tests/inventory-item-and-component-has-public-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for inventory-item-and-component-has-public + description: >- + This test case validates the behavior of constraint + inventory-item-and-component-has-public + content: ../content/ssp-inventory-item-and-component-has-public-INVALID.xml + expectations: + - constraint-id: inventory-item-and-component-has-public + result: fail diff --git a/src/validations/constraints/unit-tests/inventory-item-and-component-has-public-PASS.yaml b/src/validations/constraints/unit-tests/inventory-item-and-component-has-public-PASS.yaml new file mode 100644 index 000000000..574484c45 --- /dev/null +++ b/src/validations/constraints/unit-tests/inventory-item-and-component-has-public-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for inventory-item-and-component-has-public + description: >- + This test case validates the behavior of constraint + inventory-item-and-component-has-public + content: ../../../content/rev5/examples/ssp/xml/fedramp-ssp-example.oscal.xml + expectations: + - constraint-id: inventory-item-and-component-has-public + result: pass