Overview
The CIS Hardened Image Level 1 on Amazon Linux 2023 is a pre-configured image built by the Center for Internet Security (CIS®) for use on Amazon Elastic Compute Cloud (Amazon EC2). It is a pre-configured, security-hardened image that aligns with the robust security recommendations, the CIS Benchmarks, making it easier for organizations to meet regulatory requirements.
Not only is this image pre-hardened to the CIS Benchmarks guidance, but it is also patched monthly in alignment with the updates from the software vendor.
Key Benefits
This image is hardened against the corresponding Level 1 profile which is intended to be practical and prudent, provide a clear security benefit, and not inhibit the utility of the technology beyond acceptable means. No packages are installed on or removed from this image outside of those already present on the base image or as recommended in alignment with the corresponding CIS Benchmark recommendations.
To demonstrate conformance to the CIS Amazon Linux 2023 Level 1 Benchmark, industry-recognized hardening guidance, each image includes an HTML report from CIS Configuration Assessment Tool (CIS-CAT® Pro). Each CIS Hardened Image contains the following files:
These reports are located in /home/CIS_Hardened_Reports.
For customized pricing options or private offers, reach out to us at cloudsecurity@cisecurity.org .
To learn more or access the corresponding CIS Benchmark, please visit https://www.cisecurity.org/cis-benchmarks or sign up for a free account on our community platform, CIS WorkBench, https://workbench.cisecurity.org/ .
Highlights
- Hardened according to a Level 1 CIS Benchmark that is developed in a consensus-based process and that is accepted by government, business, industry, and academia.
- Helps with compliance to PCI DSS, FedRAMP, DoD Cloud Computing SRG, FISMA, select NIST publications, and more.
- Pre-configured to align with industry best practices that are developed and supported by CIS, this image has hardened account and local policies, firewall configuration, and computer-based and user-based administrative templates.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
- ...
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.022 |
t2.micro | $0.02 |
t3.micro | $0.022 |
r6a.24xlarge | $0.06 |
m6i.16xlarge | $0.06 |
g6.2xlarge | $0.026 |
m5zn.12xlarge | $0.055 |
m7i.48xlarge | $0.06 |
r6in.large | $0.022 |
i2.8xlarge | $0.05 |
Vendor refund policy
Refunds through AWS are not available at this time. You will only be billed for actual time of instance use. As with all CIS security products, our aim is always 100 percent customer/member satisfaction.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Monthly updates
Additional details
Usage instructions
No sensitive information supplied by customers will be stored outside this instance. No data encryption configuration is applicable to this instance. You can encrypt the instance EBS volume per standard EC2 processes. No programmatic system credentials and cryptographic keys are used by this instance. Launch the instance via the AWS Marketplace or EC2 console. Navigate to your Amazon EC2 console and verify that you're in the correct region. Choose instance and select your launched instance. Select the server to display your metadata page and choose the Status checks tab at the bottom of the page to review if your status checks passed or failed. Connect using SSH. Use ec2-user as the username. Immediately apply latest security updates to the instance.
Support
Vendor support
Questions, feedback, and support accessing CIS-developed AMIs is provided by contacting
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Standard contract
Customer reviews
Reliable package management has saved setup time but common tools still need smoother installation
What is our primary use case?
I use Amazon Linux on EC2 machines for different kinds of servers. I typically run automation scripts, deploy fast web servers, and use Docker machines for testing purposes and any other proprietary software that requires a running Linux machine.
A major project I have implemented using Amazon Linux was deploying a GitLab worker node to run GitLab workflows in a CI/CD pipeline.
Amazon Linux is usually deployed in my organization on the private cloud, with the main usage being for automation scripts and some kind of fast usage and small deployments.
What is most valuable?
I have found that the prices of Amazon Linux are competitive and their compatibility with the Red Hat way of usage is advantageous. One other option that came up when I decided to use Amazon Linux was to substitute CentOS Linux.
In my experience, the best feature Amazon Linux offers is the Red Hat package manager way of working because sometimes I receive automations and scripts that are compatible with Red Hat and CentOS Linux. I usually do not have to edit the scripts to run on other Linux flavors, so the great option is to use Amazon Linux. This impacts my work by not wasting time refactoring a script, and this is the main advantage.
Amazon Linux has saved me time when deploying something that uses the Red Hat package management.
The outcomes are not different from other Linux flavors, so the other results remain the same. I would say that there is not a great advantage in using Amazon Linux from my perspective. The only advantage was really the package management.
What needs improvement?
Amazon Linux made a great change with the last version and made some features incompatible with the old version, so I did not like the new version and still prefer not to use Amazon Linux.
Some options in the basic packages of Amazon Linux could contain open tools that run containers, such as using open-sourcing tools like Podman or some other easy way to deploy the main packages I use, like Docker , and some ways to easily deploy the main and common packages that all other Linux flavors already come with installed, but Amazon Linux does not come with these basic packages.
I chose a six out of ten because compared to other Linux distributions, it is not a great distribution and could be better, and when I have to use Amazon Linux, the only advantage is the package management. However, when I need to fast install Docker or a new Python release, I have to waste a bit more time than using another distribution like Ubuntu .
What do I think about the stability of the solution?
Amazon Linux is stable in all my experience.
What do I think about the scalability of the solution?
Amazon Linux is scalable like any other EC2 instance machines that AWS provides to all users, and it runs as any other expected Linux behavior server.
Which solution did I use previously and why did I switch?
I previously used Ubuntu Linux as my main choice, and CentOS Linux as the second one, but with the discontinuity of CentOS OS Linux, I had to switch to Amazon Linux.
How was the initial setup?
I purchased Amazon Linux through the AWS Marketplace .
What about the implementation team?
My experience with pricing, setup cost, and licensing is that I usually consult the pricing in the EC2 console and I think it is a cheap machine.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing is that I usually consult the pricing in the EC2 console and I think it is a cheap machine.
Which other solutions did I evaluate?
I evaluated Ubuntu Linux before choosing Amazon Linux.
What other advice do I have?
All Linux distributions have stability and security. The only advantage of Amazon Linux is the package system. I did not see any other great advantage. I prefer to use Ubuntu as my main option when I deploy EC2 machines, but when I have to deploy or work with some kind of yum or Red Hat package manager, my first option is to use Amazon Linux.
I rate Amazon Linux a six out of ten.
My only advice would be to use Ubuntu Linux, not Amazon Linux.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Daily deployments have become faster and have saved time and resources for my workloads
What is our primary use case?
My main use case for Amazon Linux is that I use it in EC2 . A quick, specific example of how I use Amazon Linux in my day-to-day work is that I use Amazon Linux 2023 in EC2 , so I can use Linux for my field. I am deploying applications using Amazon Linux.
What is most valuable?
The best features Amazon Linux offers, in my experience, are that everything in Amazon Linux is very nice, and I use it every day.
The features that stand out to me in Amazon Linux are the integration with AWS