<div dir="ltr"><div>Please have a look at <a href="https://github.com/ComplianceAsCode/content/issues/7034">https://github.com/ComplianceAsCode/content/issues/7034</a></div><div> </div><div>Amazon content is not officially supported in the scap-security-guide as far as I know, someone has probably forked the official repo and made some extraordinary modifications. I suggest you take a look at the issue and get acquainted with the documentation of the project in general to understand how you could contribute to make things available.</div><div> </div><div>Regards. </div> <div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Mar 9, 2023 at 9:19 PM Quick, Bernie <<a href="mailto:baquick@amazon.com">baquick@amazon.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-5756817362790773891"><div lang="EN-US"><div class="m_-5756817362790773891WordSection1">Hi, I have successfully run other profiles, but I really want to run this one: xccdf_org.ssgproject.content_profile_ncp Documented here: <a>http://static.open-scap.org/ssg-guides/ssg-rhel7-guide-ncp.html</a> My current use case is an Amazon Linux 2 instance. I have successfully ran: sudo yum install openscap-scanner sudo yum install scap-security-guide sudo oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_ncp --results-arf arf.xml --report report.html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml Report generates and I can see, but nothing is relevant. When I run ls -1 /usr/share/xml/scap/ssg/content/*.xml I get: /usr/share/xml/scap/ssg/content/ssg-amzn2-ds.xml/usr/share/xml/scap/ssg/content/ssg-amzn2-xccdf.xml/usr/share/xml/scap/ssg/content/ssg-centos6-ds.xml/usr/share/xml/scap/ssg/content/ssg-centos6-xccdf.xml/usr/share/xml/scap/ssg/content/ssg-centos7-ds.xml/usr/share/xml/scap/ssg/content/ssg-centos7-xccdf.xml/usr/share/xml/scap/ssg/content/ssg-firefox-cpe-dictionary.xml/usr/share/xml/scap/ssg/content/ssg-firefox-cpe-oval.xml/usr/share/xml/scap/ssg/content/ssg-firefox-ds.xml/usr/share/xml/scap/ssg/content/ssg-firefox-ocil.xml/usr/share/xml/scap/ssg/content/ssg-firefox-oval.xml/usr/share/xml/scap/ssg/content/ssg-firefox-xccdf.xml/usr/share/xml/scap/ssg/content/ssg-jre-cpe-dictionary.xml/usr/share/xml/scap/ssg/content/ssg-jre-cpe-oval.xml/usr/share/xml/scap/ssg/content/ssg-jre-ds.xml/usr/share/xml/scap/ssg/content/ssg-jre-ocil.xml/usr/share/xml/scap/ssg/content/ssg-jre-oval.xml/usr/share/xml/scap/ssg/content/ssg-jre-xccdf.xml/usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml/usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-oval.xml/usr/share/xml/scap/ssg/content/ssg-rhel6-ds.xml/usr/share/xml/scap/ssg/content/ssg-rhel6-ocil.xml/usr/share/xml/scap/ssg/content/ssg-rhel6-oval.xml/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml/usr/share/xml/scap/ssg/content/ssg-rhel7-cpe-dictionary.xml/usr/share/xml/scap/ssg/content/ssg-rhel7-cpe-oval.xml/usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml/usr/share/xml/scap/ssg/content/ssg-rhel7-ocil.xml/usr/share/xml/scap/ssg/content/ssg-rhel7-oval.xml/usr/share/xml/scap/ssg/content/ssg-rhel7-xccdf.xml The only two that seem relevant are the first two: /usr/share/xml/scap/ssg/content/ssg-amzn2-ds.xml/usr/share/xml/scap/ssg/content/ssg-amzn2-xccdf.xml But neither of them offers this scan: <a>http://static.open-scap.org/ssg-guides/ssg-rhel7-guide-ncp.html</a> I really want this scan: NIST 800-53 control selections for MODERATE impact systems (NIST 800-53) But if I can get the rest that would great. Thanks,-Bernie berniequick | Senior Cloud Infra ArchitectAerospace and Satellite Professional Services<a title="http://aws.amazon.com/government-education/">Worldwide Public Sector</a> | <a>Amazon Web Services</a>E: <a>baquick@amazon.com</a> | M: 612-963-7742<img style="width: 1.0416in; height: 0.625in;" id="m_-5756817362790773891Picture_x0020_1" alt="signature_391156818" width="100" height="60" border="0"><img style="width: 0.677in; height: 0.677in;" id="m_-5756817362790773891Picture_x0020_2" alt="signature_1649351063" width="65" height="65" border="0"> </div></div>_______________________________________________ Open-scap-list mailing list <a>Open-scap-list@redhat.com</a> <a rel="noreferrer">https://listman.redhat.com/mailman/listinfo/open-scap-list</a> </div></blockquote></div></div>