Overview
The CIS Hardened Image Level 1 on Amazon EKS-Optimized Amazon Linux 2 is a pre-configured image built by the Center for Internet Security (CIS®) for use on Amazon Elastic Compute Cloud (Amazon EC2) and optimized for use with Amazon Elastic Container Service for Kubernetes (Amazon EKS). It is a pre-configured, security-hardened image that aligns with the robust security recommendations, the CIS Benchmarks, making it easier for organizations to meet regulatory requirements. Not only is this image pre-hardened to the CIS Benchmarks guidance, but it is also patched monthly in alignment with the updates from the software vendor. Key Benefits
Highlights
- Hardened according to a Level 1 CIS Benchmark that is developed in a consensus-based process and that is accepted by government, business, industry, and academia.
- Helps with compliance to PCI DSS, FedRAMP, DoD Cloud Computing SRG, FISMA, select NIST publications, and more.
- Pre-configured to align with industry best practices that are developed and supported by CIS, this image has hardened account and local policies, firewall configuration, and computer-based and user-based administrative templates.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
- ...
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.022 |
t2.micro | $0.02 |
t3.micro | $0.022 |
r5b.24xlarge | $0.06 |
gr6.4xlarge | $0.035 |
r5a.12xlarge | $0.055 |
r6a.xlarge | $0.024 |
m7i-flex.8xlarge | $0.05 |
r6id.24xlarge | $0.06 |
r5dn.2xlarge | $0.026 |
Vendor refund policy
Refunds through AWS are not available at this time. You will only be billed for actual time of instance use. As with all CIS security products, our aim is always 100 percent customer/member satisfaction.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
NA
Additional details
Usage instructions
No sensitive information supplied by customers will be stored outside this instance. No data encryption configuration is applicable to this instance. You can encrypt the instance EBS volume per standard EC2 processes. No programmatic system credentials and cryptographic keys are used by this instance. Launch the instance via the AWS Marketplace or EC2 console. Navigate to your Amazon EC2 console and verify that you're in the correct region. Choose instance and select your launched instance. Select the server to display your metadata page and choose the Status checks tab at the bottom of the page to review if your status checks passed or failed. Connect using SSH. Use "ec2-user" as the username. Immediately apply latest security updates to the instance.
Support
Vendor support
Questions, feedback, and support accessing CIS-developed AMIs is provided by contacting
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Standard contract
Customer reviews
Running secure containerized web apps has been simplified and integrates tightly with cloud tools
What is our primary use case?
I currently use Amazon EKS to run a web application. I have my own website which I host on Amazon EKS.
Currently, I use Amazon EKS to host a web application, but Amazon EKS is so versatile. I have used it previously to host a whole host of different applications.
What is most valuable?
From a security perspective, Amazon EKS is very strong. That granularity allows for specific pods to have access to specific buckets or specific EC2 instances. It allows for the principle of least privilege at a very granular level, which improves the security of using the tool.
Amazon EKS allows me to use applications and deploy them in a specified format and to scale that across huge numbers. Because you can deploy Amazon EKS via Terraform or other infrastructure as code tools, it allows for a repeatable architecture, which is brilliant because once it is developed, it is very simple to then deploy further versions for potentially different customers or different versions of the same application.
What needs improvement?
Another limitation I have found is the management overhead of upgrading Amazon EKS. Because Kubernetes has frequent updates, you have to manually trigger those in AWS , which can be quite time-consuming, especially if you are managing many clusters. Amazon could potentially make it easier by automatically triggering upgrades, but it is definitely a high toil activity, especially for smaller teams.
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
How was the initial setup?
What was our ROI?
What's my experience with pricing, setup cost, and licensing?
Which other solutions did I evaluate?
What other advice do I have?
I did not purchase Amazon EKS through the AWS Marketplace . I bought it directly through Amazon on their AWS platform.
I would recommend using Amazon EKS if your workloads are running on AWS. If your workloads are running on Azure or GCP, you probably would not want to use it just because you would get better linkages if you were using the cloud platform's own Kubernetes service. I personally prefer GKE because of the Autopilot feature, but Amazon EKS is a brilliant tool if you are already on Amazon's platform. I have provided a review rating of 8 out of 10 for this product.
High availability has boosted our AI reporting workflows but navigation and pricing still need work
What is our primary use case?
I have designed this agent for high availability on Amazon EKS because if I hosted it on any other platform, there would be chances of downtime. I have set it up in such a way that if there is any downtime, a new node is already up and running so that my use case is not affected and the users can use it seamlessly without any issues.
What is most valuable?
Amazon EKS has positively impacted my organization by improving the efficiency and working capacity of my team. It improved efficiency and working capacity because, based on how Amazon EKS works, we are more calm regarding functionality. The reliability allows us to focus on many other tasks, as the infrastructure is maintained by Amazon EKS; therefore, we can divert our attention to other tasks and perform well there as well.
What needs improvement?
I believe documentation could be improved on the AWS website so a new user who is starting with Amazon EKS could work much better with it.
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
How would you rate customer service and support?
Positive
What was our ROI?
What's my experience with pricing, setup cost, and licensing?
What other advice do I have?
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Modern microservices have delivered faster deployments and stronger security for our teams
What is our primary use case?
My main use case for Amazon EKS is to run and manage containerized applications at scale with high availability, security, and automated deployments.
I am using Amazon EKS to run microservices in production. I host stateless backend APIs and web services, and each service runs in Docker containers, scaling horizontally based on traffic. I chose Amazon EKS because of Kubernetes native scaling, and it provides self-healing and rolling updates. I am also using Amazon EKS for continuous deployment of containers, deploying Docker images built in CI, using Helm and manifests for version releases and supporting rolling, blue-green, and canary deployments. Security and access control are also major reasons for using it, with IAM integrated authentication, network policies, and pod-level isolation, which Amazon EKS provides. It also offers secret management integrations and scalable infrastructure management, providing auto-scaling worker nodes that scale from a few pods to hundreds without redesign.
The main use case for Amazon EKS is running and scaling production-grade, containerized microservices with automated deployments, high availability, and strong security on AWS .
What is most valuable?
The best feature Amazon EKS offers, especially for production workloads, is its fully managed Kubernetes control plane, where AWS manages the Kubernetes master, ETCD, upgrades, and HA. The control plane runs across multiple AZs, providing high availability and resilience, with multi-AZ control plane and workloads by default, along with automatic pod restarts and self-healing. Native AWS IAM integration is also present, providing fine-grained access using IAM roles and policies, and IAM roles for service accounts. There are other features, including deep AWS ecosystem integrations, a standard Kubernetes experience, and strong security and compliance, upgrade, and version control, which I would say are great features. If I have to name the top three features or the biggest impacts, they would be managed control plane, IAM plus IRSA security model, and auto-scaling with EC2 or Carpenter.
Amazon EKS has had a strong positive impact on our organization by improving key aspects that matter to every organization, such as reliability, scalability, deployment speed, and operational efficiency for containerized workloads.
What needs improvement?
There are one or two areas for improvement that I can suggest, starting with operational capacity. There is a steep learning curve for teams new to Kubernetes and many moving parts like VPC, CNI, IAM, and add-ons and node groups. Improvements could include better out-of-the-box defaults and a simplified setup and management workflow. Moreover, observability out-of-the-box could be enhanced, as monitoring and logging require multiple add-ons, which should not be the case. Additionally, there is no single unified observability experience, so better built-in metrics, logs, and tracing, along with a native dashboard without heavy setup, would be beneficial.
For how long have I used the solution?
I have been using Amazon EKS for more than four years.
What do I think about the stability of the solution?
Amazon EKS is quite stable.
What do I think about the scalability of the solution?
The scalability of Amazon EKS has been excellent and production-grade in my experience, as it scales both application and infrastructure reliability with minimal manual interventions. The practices I have analyzed in Amazon EKS include pod-level scaling, node-level scaling, and traffic and load scaling, all of which have been great.
How are customer service and support?
Customer support has been great; I have reached out a few times, and the responses have been very quick, ensuring that any issues are resolved as soon as possible. I would rate the customer support a 10.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have not used a different solution; I am using Amazon EKS only.
How was the initial setup?
Our experience with pricing felt reasonable for production clusters given the managed control plane and high availability, although the fixed cost for smaller non-production clusters felt relatively high. Amazon EKS charges a fixed fee per cluster, currently per hour, which applies regardless of workload size. Our experience shows that using auto-scaling and right-sizing helps control costs, and combining on-demand, spot instances, and scaling policies reduced compute spending. In terms of setup, our initial setup required moderate engineering effort, especially for teams new to Kubernetes, but utilizing Terraform and AWS best practices significantly reduced setup time and errors.
What was our ROI?
We have seen a clear and measurable return on investment from using Amazon EKS, both in cost efficiency and operational productivity. Improvements in deployment speed and MTTR are evident, alongside infrastructure cost optimizations. Developer productivity and onboarding have also improved, leading to 60 to 70% faster onboarding and faster time to market. Additionally, engineering costs have decreased because processes that were previously manual are now automated, reducing the number of engineers needed to handle those tasks.
Which other solutions did I evaluate?
We evaluated some other applications and services, including Amazon ECS , which is Elastic Container Service, self-managed Kubernetes on EC2 , and Docker Swarm. However, we decided to move to Amazon EKS because it proved to be more reliable and scalable than the others.
What other advice do I have?
I share every bit of advice that I feel is valuable regarding scalability at both the application and infrastructure levels, along with all the features that Amazon EKS offers. I share the positive impacts we have seen in our organization and team, including improved reliability and uptime, faster and safer deployments, and scalability without needing re-architecture. I provide metrics highlighting how it has improved our team's efforts and reduced manual tasks.
Amazon EKS has positively impacted deployment speed with a 65 to 75% reduction in deployment time. Before Amazon EKS, it took 30 to 60 minutes per deployment, and now it takes only 10 to 15 minutes. The rollback and recovery MTTR has also greatly improved, with a 75 to 85% reduction in MTTR. Earlier, it took up to 45 minutes for manual rollback, and now it takes only 5 to 10 minutes with automated rollback. We have seen a reduction in production incidents, specifically outages caused by configuration drift and manual deployments, as using Amazon EKS allows us to perform it automatically. This has resulted in 50 to 60% fewer release-related incidents. The scalability and traffic handling are also great, as it can handle two to three times traffic spikes without manual intervention, with auto-scaling triggered within minutes, leading to zero downtime during peak loads. Operational efficiency is also improved, with less time managing clusters and fewer failures, showing a 30 to 40% reduction in Kubernetes operational effort. After adopting Amazon EKS, we have reduced deployment time by 70%, MTTR by over 75%, and release-related incidents by around 55 to 60%, significantly improving scalability and operational efficiency. Overall, it has been a great experience, and I find it very useful and helpful for my team and organization.
Amazon EKS is a great service to use or implement in an organization or team, and I would rate this review as an 8 out of 10.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Managed Kubernetes workflows have streamlined deployments and improved our cloud automation
What is our primary use case?
I used Amazon EKS when working as an intern at Cognizant, where it was used to deploy, manage, and scale containerized web applications. Our workflow started with building Docker images, storing them in Amazon ECR , and deploying them to Amazon EKS clusters running on EC2 worker nodes with CI/CD pipelines. We used many tools; for example, Jenkins was part of our CI/CD pipelines that automated the build and deployment process.
Additionally, I worked on application deployments, updating Kubernetes manifests, managing pods and services, and verifying application health. Amazon EKS acted as a central platform that connected Docker , AWS infrastructure, and DevOps automation into one consistent system.
I used Amazon EKS during my internship at Cognizant as part of a cloud and DevOps-focused environment, where it served as the core Kubernetes platform to run containerized applications built with Docker, deployed through CI/CD pipelines, and hosted on AWS infrastructure. We deployed numerous web applications, and we wanted to learn Amazon EKS through dummy projects with dummy web interfaces. Beyond dummy projects, we also deployed some client websites into the Kubernetes environment and managed traffic, although I cannot name the clients.
Amazon EKS is an excellent choice for organizations already invested in AWS. I recommend having a solid foundation in Docker, Kubernetes basics, and AWS core services before implementing Amazon EKS. Using infrastructure-as-code tools and following AWS best practices can significantly improve maintainability and security. Amazon EKS is particularly strong for enterprise environments and microservice-based architectures.
Amazon EKS is ideal for teams already using Docker, CI/CD, and AWS infrastructure, which our team was already utilizing. I strongly recommend learning Kubernetes fundamentals and AWS networking, containers, and security before using Amazon EKS in production, as it positively impacted our organization by making it easy to connect all our existing AWS services.
I deployed Docker applications to Amazon EKS using CI/CD pipelines, integrating with EC2 , ECR, IAM , and automated workflows.
What is most valuable?
The most promising feature, which I prefer the most, is its integration with all the AWS services, including EC2, IAM , VPC, ECR, and CloudWatch, making it a key part of my workflow.
Amazon EKS works very well with Docker-based container workflows; it is highly scalable and self-healing, complemented by its rolling update capabilities.
What needs improvement?
Pricing can be improved, especially for small teams or landing projects, and the initial setup, as well as understanding IAM networking and cluster configuration, can be complex for beginners; improving this would enhance the experience. Troubleshooting sometimes requires deeper AWS and Kubernetes knowledge, which also could use improvement.
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
How was the initial setup?
What was our ROI?
Which other solutions did I evaluate?
What other advice do I have?
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Critical microservices have been managed reliably and support secure, flexible operations
What is our primary use case?
My main use case for Amazon EKS is for implementation and sustainable services and microservice application on a critical structure and services deployment.
On our application, we have more than 20 services and microservices such as authentication, login, account management, a notification service, and a billing service, which all work together to structure a heavy, useful application.
What is most valuable?
The best features Amazon EKS offers are scalability and deployment control, the ingress configuration regarding path pattern and host header to get all the services and microservices, and the HPA configuration.
The biggest difference, or the most important aspect to me, is the scalability, because you can easily scale any service or microservice to handle security during high changes in connection flow, and it is useful for the application and helps day-to-day by giving us reliability and stability so we can perform all maintenance and deployment of our system.
Reliability is a very important thing. Security and operational consistency are very important aspects, and the flexibility offered in node management and network options is also valuable. Amazon EKS is a service that is reliable and scalable, and it gives us a solid and dependable solution.
What needs improvement?
I think sometimes the documentation is not so clear and not so fast to provide more in-depth instruction and examples of bigger and critical implementations, so some difficulties for us sometimes take a lot of time to understand, test, and to put into production with security and guarantees.
For how long have I used the solution?
I have been using Amazon EKS for almost five years now.
What other advice do I have?
I advise doing a POC first and getting all the details, testing, and having a very good alignment between DevOps and development departments, and prepare all the CDN and how the connections get into your cluster, and how you configure your ingress and how to prepare every service or microservice to receive that with secure and optimized code, process, and communication with other resources. I would rate this product an 8.