CIS EKS-Optimized Amazon Linux 2 Level 1 Image is a pre-configured image built by the Center for Internet Security (CIS) for use on Amazon Elastic Compute Cloud (Amazon EC2) and optimized for use with Amazon Elastic Container Service for Kubernetes (Amazon EKS). It is built to offer an image secured to industry-recognized security guidance running on Amazon EC2 and to serve as the base, secure image for Amazon EKS worker nodes.

This image is pre-hardened to CIS Benchmarks guidance and patched monthly. This image is hardened against the corresponding Level 1 profile which is intended to be practical and prudent, provide a clear security benefit, and not inhibit the utility of the technology beyond acceptable means. No packages are installed on or removed from this image outside of those already present on the base image or as recommended in alignment with the corresponding CIS Benchmark recommendations.