Skip to content

NIST SP 800-53 Rev 4

Deprecated Framework

This framework has been superseded by NIST SP 800-53 Revision 5. Organizations should migrate to Revision 5, which was released in September 2020 with updated security and privacy controls for federal information systems.

The National Institute of Standards and Technology (NIST) Special Publication 800-53 Revision 4 provides a catalog of security and privacy controls for federal information systems and organizations. Published by the U.S. Department of Commerce, this framework supports the Risk Management Framework and compliance with Federal Information Security Management Act (FISMA). It was widely used by U.S. federal agencies and contractors until succeeded by Revision 5.

Terraform Registry Subdomain: nist80053rev4

module "..." {
  source  = "nist80053rev4.compliance.tf/terraform-aws-modules/<module>/aws"
  version = "<version>"
}

module "..." {
  source = "https://nist80053rev4.compliance.tf/terraform-aws-modules/<module>/aws"
}

Refer to the Terraform Registry Endpoints section for more details.

Implemented Controls

The following controls are implemented as part of this framework.

Enable/Disable Controls

You can customize the Terraform module for the desired compliance requirements by enabling/disabling individual controls.

Examples

S3 bucket module with NIST SP 800-53 Rev 4 compliance framework controls enabled, and a couple of controls disabled

module "..." {
  source = "https://nist80053rev4.compliance.tf/terraform-aws-modules/s3-bucket/aws?disable=apigateway_stage_cache_encryption_at_rest_enabled,apigateway_stage_logging_enabled"
}