CIS Hardened Image Level 2 on Amazon Linux 2
Center for Internet Security | 3.0.0.8Linux/Unix, Amazon Linux 2 - 64-bit Amazon Machine Image (AMI)
Good, but still lacks some stuff
I have been using this AMI in PCI DSS env for quite some time, however out of the box it doesn't pass Amazon Inspector findings - still needs quite a bit of tuning to deal with findings. Things like sshd protocol version is not set, sshd logging, password lockout policy, etc.
I was not able to find CHANGELOG - basically its some "black box".
- Leave a Comment |
- 1 comment |
- Mark review as helpful
showing 1 - 1