CIS Hardened Images on Amazon Web Services (AWS)
CIS Hardened Images on AWS
All of these images are available on the public AWS Marketplace and AWS GovCloud (US) region. Those also available on the AWS Intelligence Community are noted below.Ubuntu Linux
CIS Ubuntu Linux 20.04 LTS Benchmark Level 1 Launch
CIS Ubuntu Linux 18.04 LTS Benchmark Level 1 Launch (Also AIC)
CIS Ubuntu Linux 18.04 LTS Benchmark Level 1 Container Launch
CIS Ubuntu Linux 16.04 LTS Benchmark Level 1 Launch (Also AIC)
CIS Ubuntu Linux 16.04 LTS Benchmark Level 1 Container Launch
Red Hat Enterprise Linux
CIS Red Hat Enterprise Linux 8 Benchmark Level 1 Launch (Also AIC)
CIS Red Hat Enterprise Linux 7 STIG Benchmark Launch
CIS Red Hat Enterprise Linux 7 Benchmark Level 1 Launch (Also AIC)
CIS Red Hat Enterprise Linux 7 Benchmark Level 2 Launch (Also AIC)
CIS Red Hat Enterprise Linux 6 Benchmark Level 1 Launch (Also AIC)
Microsoft Windows Server
CIS Microsoft Windows Server 2019 Benchmark Level 1 Launch (Also AIC)
CIS Microsoft Windows Server 2019 Benchmark Level 2 Launch (Also AIC)
CIS Microsoft Windows Server 2016 Benchmark Level 1 Launch (Also AIC)
CIS Microsoft Windows Server 2016 Benchmark Level 2 Launch (Also AIC)
CIS Microsoft Windows Server 2012 Benchmark Level 1 Launch (Also AIC)
CIS Microsoft Windows Server 2012 Benchmark Level 2 Launch (Also AIC)
CIS Microsoft Windows Server 2012 R2 Benchmark Level 1 Launch (Also AIC)
CIS Microsoft Windows Server 2012 R2 Benchmark Level 2 Launch (Also AIC)
CIS and AWS Work Together
CIS AWS Foundations Benchmark
AWS joined the CIS community consensus process that created the CIS AWS Foundations Benchmark. The purpose of this CIS Benchmark is to provide prescriptive guidance about security configuration on AWS.Security Automation & Orchestration (SAO)
CIS Benchmarks and CIS Hardened Images are part of the AWS SAO methodology. AWS SAO enables AWS customers to constrain, track, and publish continuous risk treatments, configurations, and assimilate DevOps routines into a “Type Accredited” secure AWS architecture. This architecture is configured to converge common security frameworks (e.g. FedRAMP, DoD CC SRG, PCI-DSS, IRS 1075, etc.) through the use of security as code practices. Learn More
Request more information
AWS Resources
AMI version Python script
Ensure you’re always using the latest CIS Hardened Image.CIS and AWS GovCloud
Learn about CIS Hardened Images in the AWS GovCloud (US) region.What People are Saying:
"Based on the value, time and costs saving, I would not consider spinning up a AWS server without adding the CIS security to it for any production-level instance."
- V.P. Application Lifecycle Management CorTechs, Inc.
