Sold by: Center for Internet Security
Deployed on AWS
AWS Free Tier
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
Overview
The CIS Hardened Image Level 1 on Amazon Linux 2023 for AWS Parallel Compute Service (PCS) provides an enterprise-ready foundation for high-performance computing (HPC) and distributed AI workloads. This image is pre-configured to meet CIS Benchmark™ Level 1 security standards while maintaining compatibility with AWS PCS. It eliminates the friction between high-performance throughput and rigorous regulatory compliance.
AWS PCS provides a fully managed HPC environment, allowing you to run large-scale simulations and AI/ML workloads without the operational "tax" of maintaining the underlying infrastructure. It bridges the gap between traditional High-Performance Computing (HPC) and modern AI by using the Slurm scheduler to orchestrate GPU-intensive tasks.
Not only is this image pre-hardened to the CIS Benchmarks guidance, but it is also patched monthly in alignment with the updates from the software vendor.
Highlights
- Hardened according to a Level 1 CIS Benchmark that is developed in a consensus-based process and that is accepted by government, business, industry, and academia.
- Using an AMI hardened by CIS reduces time, cost, and risk associated with your organization's AWS solution.
- Pre-configured to align with industry best practices that are developed and supported by CIS, this image has hardened account and local policies, firewall configuration, and computer-based and user-based administrative templates.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
AmazonLinux 2023
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
c7a.large Recommended | $0.022 |
t2.micro | $0.022 |
m5a.large | $0.022 |
r7a.medium | $0.022 |
t2.nano | $0.022 |
g6f.large | $0.022 |
m6a.large | $0.022 |
c6in.large | $0.022 |
c7i.large | $0.022 |
c5ad.large | $0.022 |
Dimensions summary
You pay by the hour for each running instance of this pre-hardened virtual machine image. Pricing is tied to the AWS EC2 instance type you choose, so the software rate scales with the compute size and family you select. The listing covers many instance families, including general-purpose (m-series), compute-optimized (c-series), memory-optimized (r-series), storage-optimized (i-series), and graphics (g-series) options, plus a range of legacy and current generations. Each dimension is a separate hourly rate for one instance type. There is no upfront commitment; you are billed only for the hours instances run.
Top-of-mind questions for buyers
You pay a software licence fee for the pre-hardened virtual machine image. The image is pre-configured to the CIS Benchmark security recommendations. The hourly rate covers this hardened configuration. Your underlying AWS compute, storage, and network charges are billed separately by AWS.
The software fee meters running instance-hours only. A stopped or powered-off instance does not accrue this hourly software charge. Underlying AWS storage fees for the attached volume may still apply while the instance is stopped. You are billed only for the hours instances actually run.
Each rate maps to one AWS EC2 instance type. The software fee is set per instance type, so the rate reflects the compute size and family you pick. Larger or newer instance families carry different rates. You choose one instance type and pay that single hourly rate per running instance.
www.cisecurity.org
Helpful?
Vendor refund policy
Refunds through AWS are not available at this time. You will only be billed for actual time of instance use. As with all CIS security products, our aim is always 100 percent customer/member satisfaction.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
This release is based on kernel version 6.18. Previous versions were based on kernel version 6.12
Additional details
Usage instructions
- Subscribe to the CIS Hardened AMI - From AWS Marketplace, click "Subscribe" and accept the terms. The image will appear in your account Subscriptions/Marketplace images.
- Create a custom AMI (recommended: EC2 Image Builder) - In EC2 Image Builder, create an image recipe and choose Marketplace images as the base; select your subscribed CIS AL2023 PCS-Ready AMI from the Subscriptions list. Add components or customizations (for example packages such as Lustre client, GPU drivers, users, SSH keys). Not this image is "PCS-ready" natively and there is no need to install the PCS Agent or Slurm Controller however it is recommended users apply all relevant patches/updates that may have released after image was built. A
- Validate - At this step we recommend validating the image for stability and functionality.
- Register and use the AMI with PCS - In the PCS console or templates, reference the custom AMI ID for compute nodes. Configure launch templates, IAM roles, and networking per PCS guidance . Launch a small test cluster, run a sample job, and confirm node registration with the PCS controller. Reference this AWS document on how to utilize a custom AMI in a PCS compute node group: https://docs.aws.amazon.com/pcs/latest/userg5uide/working-with_ami_custom_use-ami.html 5 - Confirm nodes are able to connect to cluster.
Support
Vendor support
Questions, feedback, and support accessing CIS-developed AMIs is provided by contacting
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.