Sold by: Center for Internet Security
Deployed on AWS
AWS Free Tier
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
4.4
Overview
The CIS Hardened Image Level 1 on Ubuntu Linux Server 22.04 LTS is a pre-configured image built by the Center for Internet Security (CIS®) for use on Amazon Elastic Compute Cloud (Amazon EC2). It is a pre-configured, security-hardened image that aligns with the robust security recommendations, the CIS Benchmarks, making it easier for organizations to meet regulatory requirements.
Not only is this image pre-hardened to the CIS Benchmarks guidance, but it is also patched monthly in alignment with the updates from the software vendor.
Key Benefits
This image is hardened against the corresponding Level 1 profile which is intended to be practical and prudent, provide a clear security benefit, and not inhibit the utility of the technology beyond acceptable means. No packages are installed on or removed from this image outside of those already present on the base image or as recommended in alignment with the corresponding CIS Benchmark recommendations.
To demonstrate conformance to the CIS Ubuntu Linux Server 22.04 LTS Level 1 Benchmark, industry-recognized hardening guidance, each image includes an HTML report from CIS Configuration Assessment Tool (CIS-CAT® Pro). Each CIS Hardened Image contains the following files:
These reports are located in /home/CIS_Hardened_Reports.
For customized pricing options or private offers, reach out to us at cloudsecurity@cisecurity.org .
To learn more or access the corresponding CIS Benchmark, please visit https://www.cisecurity.org/cis-benchmarks or sign up for a free account on our community platform, CIS WorkBench, https://workbench.cisecurity.org/ .
Highlights
- Hardened according to a Level 1 CIS Benchmark that is developed in a consensus-based process and that is accepted by government, business, industry, and academia.
- Helps with compliance to PCI DSS, FedRAMP, DoD Cloud Computing SRG, FISMA, select NIST publications, and more.
- Pre-configured to align with industry best practices that are developed and supported by CIS, this image has hardened account and local policies, firewall configuration, and computer-based and user-based administrative templates.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 22.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.022 |
t3.micro | $0.022 |
t2.micro | $0.02 |
r7a.large | $0.022 |
r6in.12xlarge | $0.055 |
m4.10xlarge | $0.05 |
c5n.large | $0.022 |
m5zn.large | $0.022 |
m5.xlarge | $0.024 |
t3a.2xlarge | $0.026 |
Vendor refund policy
Refunds through AWS are not available at this time. You will only be billed for actual time of instance use. As with all CIS security products, our aim is always 100 percent customer/member satisfaction.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Monthly updates
Additional details
Usage instructions
No sensitive information supplied by customers will be stored outside this instance. No data encryption configuration is applicable to this instance. You can encrypt the instance EBS volume per standard EC2 processes. No programmatic system credentials and cryptographic keys are used by this instance. Launch the instance via the AWS Marketplace or EC2 console. Navigate to your Amazon EC2 console and verify that you're in the correct region. Choose instance and select your launched instance. Select the server to display your metadata page and choose the Status checks tab at the bottom of the page to review if your status checks passed or failed. Connect using SSH. Use ubuntu as the username. Immediately apply latest security updates to the instance.
Resources
Support
Vendor support
Questions, feedback, and support accessing CIS-developed AMIs is provided by contacting
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Center for Internet Security
By Canonical Group Limited
By Arara Solutions
Top
10
In Compliance and Auditing, Operating Systems, Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Security Hardening Framework
Image hardened according to CIS Benchmark Level 1 profile with consensus-based security configuration guidance developed by Center for Internet Security
Configuration Assessment and Reporting
Includes CIS-CAT Pro HTML reports documenting baseline configuration, hardening changes, package modifications, and exceptions applied to the instance
Regulatory Compliance Alignment
Configured to support compliance requirements for PCI DSS, FedRAMP, DoD Cloud Computing SRG, FISMA, and select NIST publications
System Hardening Components
Pre-configured hardened account policies, local policies, firewall configuration, computer-based administrative templates, and user-based administrative templates
Patch Management and Maintenance
Monthly patching aligned with software vendor updates to maintain security standards and system currency
FIPS Certification
FIPS 140-2 certified kernel and cryptographic modules included out of the box with ongoing security updates
Extended Security Coverage
Security patches available for over 23,000 open source packages in the Ubuntu Universe repository with 10 years of support through Expanded Security Maintenance
Compliance Hardening Profiles
CIS and DISA-STIG hardening profiles accessible through Ubuntu Security Guide tooling for guided compliance configuration
Cryptographic Module Updates
FIPS-certified cryptographic components with continuous security updates maintained throughout the support lifecycle
Long-term Support
10-year security coverage period for the operating system and included packages
Operating System Hardening
Amazon Linux 2 configured with STIG Benchmark High standard for enhanced security posture
Security Standards Compliance
Implementation of Defense Information System Agency (DISA) Security Technical Implementation Guides (STIGs) for system hardening
EMR Compatibility
Tested and compatible with Amazon Elastic MapReduce (EMR) for distributed computing workloads
Continuous Security Updates
Access to continuous security updates available through new versions of the image
Multi-Application Support
Suitable for deployment across various applications beyond EMR environments
Standard contract
No
No
Customer reviews
reviewer2816721
Hosting websites and databases has become cost‑effective and supports long‑term cloud growth
Reviewed on Apr 17, 2026
Review from a verified AWS customer
What is our primary use case?
I use Ubuntu Linux 22.04 LTS for website hosting and for application stacks like Apache and MySQL. I am using Ubuntu Linux 22.04 LTS for hosting my website, and for the database, I use MySQL to host the application and get the response from the MySQL database.
I use Ubuntu Linux in different fields including cloud and virtualization, containerization, database management, file and network sharing, and development and DevOps. I use Ubuntu Linux for my AWS application, as Ubuntu Linux Server is used for heavily utilized hosting websites, databases, and cloud applications.
What is most valuable?
The best feature of Ubuntu Linux is that it serves as a base for private cloud and public cloud VMs for AWS.
It is very useful to use Ubuntu Linux with its GUI-based and CLI modes; the commands are very lightweight, and it is much more feasible for me with its long-term support.
Ubuntu Linux provides business advisory consultancy for business purposes and enables the smooth running of my website hosting to meet all business purposes.
My experience with pricing, setup cost, and licensing is good because I am using the freeware version.
What needs improvement?
The user experience on Ubuntu Linux is very good, so I believe there is no need for improvement.
For how long have I used the solution?
I have been using Ubuntu Linux for the last five years.
What do I think about the stability of the solution?
Ubuntu Linux is definitely stable.
What do I think about the scalability of the solution?
Ubuntu Linux is widely used for business purposes including app storage, development, and staging environments. From my perspective as a user, I would rate Linux at eight points for its high scalability and greater relevance and advantage in terms of adherence, cost-saving, desktop compatibility, cloud server dominance, and wide industry adoption. I believe it is good for new users as well as for experienced people.
How are customer service and support?
Customer support for Ubuntu Linux was very good.
Which solution did I use previously and why did I switch?
Before Ubuntu Linux, I was using Windows applications for application purposes. However, because of its lightweight and user-friendly environment, I am now using Ubuntu Linux 22.04 LTS for all relevant business purposes.
How was the initial setup?
Ubuntu Linux Pro version provides 20 years of security maintenance, including kernel patching and compliance with standards such as FIPS and CIS, making it cost-effective. It is open-source and free, which is already beneficial for business purposes and for running any environment.
What about the implementation team?
I have reduced staff because I am using a centralized server to manage it with Ubuntu Linux.
What was our ROI?
By using Ubuntu Linux on the cloud, I am reducing costs by at least 22 percent by providing a feasible and secure environment.
Which other solutions did I evaluate?
I was not using another solution. I am new to this environment, so this is very relevant based on my experience.
What other advice do I have?
I would rate Ubuntu Linux an eight.
I provide the rating of eight because Ubuntu Linux is heavily used for business purposes with different benefits. For example, private users and small businesses can register, and the Hardy Heron release in April has led to wide industry adoption, server dominance, cloud, desktop compatibility, cost savings, and management tools.
I deploy Ubuntu Linux on an on-premises cloud as well as AWS public cloud. I use Amazon Web Services, the AWS cloud, for my public cloud deployment.
My overall review rating for Ubuntu Linux is eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Martin Prous
Discovering extensive documentation and seamless software integration elevates daily operations
Reviewed on Jun 23, 2025
Review from a verified AWS customer
What is our primary use case?
Ubuntu Linux is my operating system for daily use, and because I am related to networking operations, I prefer Linux over Windows. The FortiClient in Windows is very limiting and the IT department most of the time doesn't know how to open certain ports or are very limited in their skills with FortiClient, so I have more freedom to open ports and run some services with it.
What is most valuable?
One of the best features of Ubuntu Linux is that if I need something, I just download it. Everything I need I could search for on the net and just download it and use it, whereas Windows is more problematic.
Ubuntu Linux's rapid support and extensive documentation are fine to me. Every time I need to do something, I find well-explained documentation about the process, so I have no complaints about the documentation or the info about how to do it.
What needs improvement?
I always use just the LTS versions of Ubuntu Linux, but I found recently some software that needs the 20.04 version, which is out of the support lifecycle, and those systems are needed by us, causing a problem when I tried to upgrade. The systems stopped working and it was a disaster, as they support the LTS but the old ones, and when I need to update some packages, they are out of the support system support cycle.
For how long have I used the solution?
I have used Ubuntu Linux for maybe 12 years.
How are customer service and support?
I have never rated the support or customer service of Ubuntu Linux as I have never used it.
How would you rate customer service and support?
Positive
What's my experience with pricing, setup cost, and licensing?
My experience with the pricing for Ubuntu Linux is that I always use the free version, so I never paid for any installations or support.
What other advice do I have?
I have not used Ubuntu Linux's cloud-init capabilities for configuring or managing instances in cloud environments.
I don't know of any things that could be better with Ubuntu Linux, as everything works fine.
On a scale of one to ten, I would rate Ubuntu Linux a 10 plus.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Azaz Qurershi
Using workstation features effectively with enhanced security
Reviewed on May 14, 2025
Review provided by PeerSpot
What is our primary use case?
I use Ubuntu Linux as a workstation to check my emails, to connect to people, to use Teams, to send mails, and to browse everything, similar to how we use Windows.
I use Ubuntu Linux as a replacement for Windows for everything. I use Teams, emails, Zoom, AnyDesk, and UltraViewer on it.
What is most valuable?
For system administration, I find it useful to connect to my Linux servers directly from the command line, and I create my virtual machines using VMware Workstation.
In terms of security, I am satisfied with Ubuntu Linux and I can rely on its security features more than I can with Windows.
What needs improvement?
There might be some features or limitations I would want to see improved, but I cannot think of any specific ones right now. It is easy to use.
The booting of Ubuntu Linux should be faster because I only have two minutes when I have calls, so it should complete more quickly.
For how long have I used the solution?
I have been working with Ubuntu Linux for four years.
What was my experience with deployment of the solution?
I have not faced any challenges with Ubuntu Linux such as integration or any other challenges.
What do I think about the stability of the solution?
I have not faced any challenges with Ubuntu Linux such as integration or any other challenges.
What do I think about the scalability of the solution?
I have not faced any challenges with Ubuntu Linux such as integration or any other challenges.
What other advice do I have?
I have not used Ubuntu Linux for AI as yet. My total rating for Ubuntu Linux is 9.
reviewer2023968
Focus on system enhancements to improve usability
Reviewed on May 13, 2025
Review provided by PeerSpot
What is our primary use case?
Can you describe some of the use cases for this product and where or how it is used?
What is most valuable?
What are some of the most valuable features in your opinion with Ubuntu Linux?
What needs improvement?
What areas could be improved with Ubuntu Linux in your opinion?
Where can they continue to improve and where can they focus their energy moving forward regarding improvements?
What was my experience with deployment of the solution?
Since you mentioned it was easy to install, how long does it take to deploy the product?
Can one person complete the deployment?
How are customer service and support?
How would you rate their customer service or the technical support with Ubuntu Linux? Have you ever used it?
There is substantial documentation and community support available.
Which solution did I use previously and why did I switch?
What would you say are some main differences between Ubuntu Linux and other Linux products that you have used?
What about the implementation team?
Are you the only one who is maintaining it, or how many people maintain the product?
What was our ROI?
Can you describe any cost savings or productivity boosts you have realized by using Ubuntu Linux?
What's my experience with pricing, setup cost, and licensing?
What are your thoughts on how Ubuntu Linux is priced?
Which other solutions did I evaluate?
Is CentOS something you used recently in the last year?
What other advice do I have?
Do you still have experience with Windows and Linux products?
Which Linux products are you familiar with? Is it Ubuntu Linux, SUSE, Rocky, or some others?
Does it require a lot of maintenance?
How does Ubuntu Linux support your AI or machine learning projects?
Would you recommend Ubuntu Linux to others and why?
Prashanth D
Facilitate remote troubleshooting with built-in package support
Reviewed on Apr 30, 2025
Review provided by PeerSpot
What is our primary use case?
Most of our customers use Ubuntu Linux to host their websites. We configure Apache or Nginx and troubleshoot them. If their applications are down, we check the servers. If the server goes down or there is an issue, we look into them.
What is most valuable?
Ubuntu Linux is user-friendly through the command line. The packages inside the repository are built-in, which allows for easy installation from the server environment without relying on third-party applications. Additionally, Ubuntu Linux supports remote troubleshooting via SSH, allowing connection from anywhere, which is beneficial for troubleshooting server issues.
What needs improvement?
We face minor issues with the regular upgrade; manual upgrades are required. There have been network configuration issues, specifically with netplan.yaml. Unlike CentOS, Ubuntu Linux lacks an easily accessible inbuilt repository where dependencies or packages are easily found.
For how long have I used the solution?
I have been working with Ubuntu Linux for about one and a half years.
What was my experience with deployment of the solution?
Deploying on-premises can take about twenty minutes, but with a good network, it can be faster. For cloud deployments via our jump servers, it takes less than ten minutes.
What do I think about the stability of the solution?
I have had no issues with the stability of Ubuntu Linux.
What do I think about the scalability of the solution?
I find Ubuntu Linux scalable with no complaints.
How are customer service and support?
The support can be tough as immediate answers are not always available. However, Ubuntu Linux has a comprehensive knowledge base for self-help.
Which solution did I use previously and why did I switch?
We have experience using CentOS. It allows direct root login, offering root privileges immediately.
How was the initial setup?
The initial setup of Ubuntu Linux is easy.
What's my experience with pricing, setup cost, and licensing?
The cost is not much, and I am not sure about the licensing cost because a separate team handles it.
Which other solutions did I evaluate?
We have used CentOS and are familiar with it.
What other advice do I have?
I would recommend using Ubuntu Linux as it is easy to handle. The biggest benefit is the ability to connect through SSH for remote troubleshooting. My total rating for Ubuntu Linux is ten out of ten.