GSA / fedramp-automation

FedRAMP Automation
https://www.fedramp.gov/using-the-fedramp-oscal-resources-and-templates/
Other
290 stars 88 forks source link

[Feedback]: Rename resolution-resource prop to fedramp-version and have one prop in metadata #746

Open vmangat opened 1 month ago

vmangat commented 1 month ago

This is a ...

request - need something additional provided

This relates to ...

What is your feedback?

Replace the resolution-resource prop with a single prop fedramp-version. This will prevent having to create a backmatter resource and having to provide multiple additional props. FedRAMP will be able to determine based on the fedramp-version, how the file needs to processed and validated across the many layers of the specifications.

This simplifies the generation and import of the SSP files for tools.

Where, exactly?

https://automate.fedramp.gov/documentation/ssp/3-working-with-oscal-files/

image

Other information

No response

aj-stein-gsa commented 1 month ago

Can you explain why /system-security-plan/metadata/version is not acceptable? If you are amenable, it would be great to hear more about the answer to that question, if not here, in the Implementer's Meeting tomorrow if you will attend, @vmangat.

vmangat commented 1 month ago

the version field in the metadata is used for document versioning and is correlated with the version history of the document itself, we cannot use that to specify fedramp version