AWS imagebuilder: CIS hardening components now require AWS Marketplace subscription
Summary
Updates the compatibility requirement so CIS hardening components require a subscription to the component in AWS Marketplace instead of a CIS-published parent image.
Security assessment
The line concerns CIS hardening components, which are security-hardening artifacts, so it is security-adjacent guidance, but it only changes a licensing/subscription requirement rather than fixing a specific weakness.
Evidence
* CIS hardening components require a subscription to the component in AWS Marketplace.
Diff
diff --git a/imagebuilder/latest/userguide/manage-recipes.md b/imagebuilder/latest/userguide/manage-recipes.md index e657597..339f007 100644 --- a//imagebuilder/latest/userguide/manage-recipes.md +++ b//imagebuilder/latest/userguide/manage-recipes.md @@ -126 +126 @@ Components must also meet the following compatibility requirements: - * CIS hardening components require a CIS-published parent image. + * CIS hardening components require a subscription to the component in AWS Marketplace.