AWS imagebuilder: Rewrite CIS hardening component guidance for compliance images
Summary
Replaces the CIS Hardened Images paragraph and its note with guidance to subscribe to a CIS hardening component in AWS Marketplace and add it to an image recipe whose parent image runs a supported OS, to build images compliant with CIS Benchmarks Level 1.
Security assessment
The change restructures documentation for CIS Benchmark Level 1 hardening components, which is security hardening guidance (compliance baseline enforcement) rather than a fix for a specific vulnerability or incident.
Evidence
+To build custom images that comply with CIS Benchmarks Level 1 guidelines, subscribe to a CIS hardening component in AWS Marketplace, and add it to an image recipe whose parent image runs an operating system that the component supports. For more information, see [CIS hardening components](./toe-cis.html).
Diff
diff --git a/imagebuilder/latest/userguide/integ-compliance-products.md b/imagebuilder/latest/userguide/integ-compliance-products.md index 2a4f835..322e0e8 100644 --- a//imagebuilder/latest/userguide/integ-compliance-products.md +++ b//imagebuilder/latest/userguide/integ-compliance-products.md @@ -15,5 +15 @@ Image Builder integrates with the following compliance products: -You can use CIS Hardened Images and the related CIS hardening components to build custom images that comply with the latest CIS Benchmarks Level 1 guidelines. CIS Hardened Images are available in AWS Marketplace. To learn more about how to set up and use CIS Hardened Images and hardening components, see the [Quick Start Guide: CIS Hardening Components for EC2 Image Builder](https://cisecurity.atlassian.net/wiki/spaces/CSKB/pages/2850881850/Quick+Start+Guide+CIS+Hardening+Components+for+EC2+Image+Builder) in the CIS security wiki. - -###### Note - -When you subscribe to a CIS Hardened Image, you also get access to the associated build component that runs a script to enforce CIS Benchmark Level 1 guidelines for your configuration. For more information, see [CIS hardening components](./toe-cis.html). +To build custom images that comply with CIS Benchmarks Level 1 guidelines, subscribe to a CIS hardening component in AWS Marketplace, and add it to an image recipe whose parent image runs an operating system that the component supports. For more information, see [CIS hardening components](./toe-cis.html).