AWS imagebuilder: Added CIS hardening compatibility note
Summary
Documented version derivation logic for AWS Marketplace images and CIS component compatibility requirements.
Security assessment
Adds security-adjacent guidance for CIS hardening compatibility, helping prevent misconfiguration.
Evidence
+If your base image is a CIS-published AWS Marketplace image product, Image Builder verifies CIS hardening component compatibility. Choose the CIS component that matches the benchmark and operating system of your base image to avoid a recipe validation error.
Diff
diff --git a/imagebuilder/latest/userguide/integ-marketplace.md b/imagebuilder/latest/userguide/integ-marketplace.md index 8738673d5..6d1387dcb 100644 --- a//imagebuilder/latest/userguide/integ-marketplace.md +++ b//imagebuilder/latest/userguide/integ-marketplace.md @@ -45,0 +46,4 @@ The **Subscriptions** page in the AWS Marketplace section of the Image Builder c +###### Note + +Image Builder derives the version for an AWS Marketplace image from the product listing's recommended version when that version is available. If the listing doesn't provide a parseable version, Image Builder derives a date-based version from the AMI creation date. For example, the derived version might look like `2026.8.11/1`. As a result, the Image Builder version for the product can reflect a date instead of the vendor's version string. + @@ -135,0 +140,4 @@ You can also search for other image products that are available in AWS Marketpla +###### Note + +If your base image is a CIS-published AWS Marketplace image product, Image Builder verifies CIS hardening component compatibility. Choose the CIS component that matches the benchmark and operating system of your base image to avoid a recipe validation error. +