This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardening Components are hardened in accordance with the associated CIS Benchmarks™, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution through EC2 Image Builder with CIS Hardening Components.
The CIS Hardened Image Level 1 on Amazon Linux 2023 component is built by the Center for Internet Security (CIS®) for use on Amazon Image Builder. It is a security-hardened image that aligns with the robust security recommendations, the CIS Benchmarks, making it easier for organizations to meet regulatory requirements.
Key Benefits
Enhanced Security: Mitigates risks like malware, denial of service, and authorization issues by following globally-recognized secure configuration guidance to support your cloud security posture management (CSPM) program.
Compliance Readiness: Helps your organization comply with PCI DSS, FedRAMP, DoD Cloud Computing SRG, FISMA, select NIST publications, and more.
Faster Deployment: Pre-configured according to CIS Benchmarks, allowing you to deploy secure virtual machine images.
Consistency Across Environments: Ensures consistent security configurations across development, testing, and production environments, reducing drift and compatibility risks.
Cost Efficiency: Lowers remediation efforts, reduces attack surface, and minimizes business loss from security incidents.
Easier Maintenance: Regular updates ensure that your systems are always in line with the latest security standards and software patches.
This image is hardened against the corresponding Level 1 profile which is intended to be practical and prudent, provide a clear security benefit, and not inhibit the utility of the technology beyond acceptable means. No packages are installed on or removed from this image outside of those already present on the base image or as recommended in alignment with the corresponding CIS Benchmark recommendations.
To learn more or access the corresponding CIS Benchmark, please visit https://www.cisecurity.org/cis-benchmarks or sign up for a free account on our community platform, CIS WorkBench, https://workbench.cisecurity.org/.
Highlights
Hardened according to a Level 1 CIS Benchmark that is developed in a consensus-based process and that is accepted by government, business, industry, and academia.
Helps with compliance to PCI DSS, FedRAMP, DoD Cloud Computing SRG, FISMA, select NIST publications, and more.
Helps with compliance to PCI DSS, FedRAMP, DoD Cloud Computing SRG, FISMA, select NIST publications, and more.
Pre-configured to align with industry best practices that are developed and supported by CIS, this image has hardened account and local policies, firewall configuration, and computer-based and user-based administrative templates.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for this hardening component, billed per running EC2 instance. Pricing is not tiered by feature. Instead, each dimension maps to a specific EC2 instance type, and your hourly rate follows the instance you choose. Smaller instances like t3.nano or t4g.micro carry lower hourly rates. Larger compute, memory, storage, and accelerated types like metal, GPU, and high-memory instances carry higher rates. The software cost is the same capability across all instances. Your total depends on which instance size you run and how many hours it runs.
Top-of-mind questions for buyers
What counts as one billable unit for this hardening component?
You are billed per running EC2 instance, per hour. Each dimension maps to a specific instance type, such as t3.medium or m7g.large. One instance running for one hour equals one billed hour. Multiple instances each accrue their own hourly charge separately.
Am I charged when an instance is stopped or powered off?
The hourly software charge applies only while an instance runs. A stopped or powered-off instance does not accrue this software charge. Underlying AWS storage or other resource fees may still apply separately, but the hardening component meters running instance-hours only.
Does my hourly rate change if I move to a larger instance type?
Yes. Your rate follows the instance type you select. Switching from a smaller type to a larger compute, memory, storage, or accelerated type changes your hourly rate to that type's listed price. The hardening capability itself stays the same across all instance types.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
CIS Amazon Linux 2023 Level 1 Hardening Component - Staging
Supported services:
Amazon EC2 Image Builder
EC2 Image Builder Component
EC2 Image Builder is a fully managed AWS service. It automates creation, management, and deployment of custom, secure, and up-to-date server images. After procurement, use the EC2 Image Builder console/API to include this third-party component in golden images for future EC2 instances.
Version release notes
Initial Release of version 1.0.0.1
Additional details
Usage instructions
No sensitive information supplied by customers will be stored outside this instance. No data encryption configuration is applicable to this instance. You can encrypt the instance EBS volume per standard EC2 processes. No programmatic system credentials and cryptographic keys are used by this instance. Launch the instance via the AWS Marketplace or EC2 console. Navigate to your Amazon EC2 console and verify that you're in the correct region. Choose instance and select your launched instance. Select the server to display your metadata page and choose the Status checks tab at the bottom of the page to review if your status checks passed or failed. Connect using SSH. Use ec2-user as the username. Immediately apply latest security updates to the instance.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardening Components are hardened in accordance with the associated CIS Benchmarks™, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution through EC2 Image Builder with CIS Hardening Components.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.