Streamlining OS Hardening and Certification with CIS Linux Build Kit and Amazon EC2 Image Builder

A Cloud Operations team can use CIS Linux Build Kit within Amazon EC2 Image Builder to create hardened and certified operating systems. The CIS benchmark is an industry standard for image hardening, providing configuration best practices for specific technologies. Two approaches can be used to create Golden Images: managed components from AWS Marketplace or a self-managed hardening process using EC2 Image Builder. The team can customize the hardening process and exclude certain recommendations that might break applications.