Versions Compared

Old Version 4

changes.mady.by.user Allan Cornwell

Saved on

compared with

New Version Current

changes.mady.by.user Allan Cornwell

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Product Name

CIS Hardened Images®

Product Version

(all)

Date

21

Problem

The approach to determine the version number of a currently deployed CIS Hardened Image varies by Cloud Service Provider. This article provides the unique steps for each major vendor.

General information regarding CIS version numbering can be referenced in the following KB article:
How are new versions and updates visually represented for each CIS Hardened Images®? /wiki/spaces/STPS/pages/375849227

Solution

Table of Content Zone
Table of Contents
minLevel3
maxLevel6
outlinefalse
stylenone
typelist
printablefalse

CIS Hardened Images on Amazon Web Services (AWS)

aws_image_version.pngImage Removed

GUI

Using the AWS EC2 Dashboard, navigate to the running instance and reference the “AMI name“ or “AMI location” property fields.

Hardened Images in AWS released after March 2024 are identified by a two-digit number representing the month that the image was published in; for example, v01 indicates an image released in January, and v12 an image released in December of this year.

In the below example screenshot, the image version is

1.0.0.16:

v03, indicating it was published in March:

aws_newver.pngImage Added

CLI

Using the AWS CLI, run the following command, replacing MY-INSTANCE-ID with your

image

respective instance ID:

Code Block
 aws ec2 describe-instances --instance-ids MY-INSTANCE-ID --query 'Reservations[*].Instances[*].ImageId' --output text | xargs -I {} aws ec2 describe-images --image-ids {} --query 'Images[*].Name' --output text

The output will contain the full AMI name and version

number

indicator of your CIS Hardened Image:

aws_image_version_cloudshell.pngImage Removed
cli_aws.pngImage Added

CIS Hardened Images on Microsoft Azure

CLI

Using the Azure CLI, run the following command, replacing MY-DISK-ID and MY-RESOURCE-GROUP with their respective values:

Code Block
az disk show --resource-group MY-RESOURCE-GROUP --name MY-DISK-ID

The output will contain the image version under the imageReference → id property.
In the below example screenshot, the image version is 3.0.2:

azure_version_cli.pngImage Modified
Info

Due to platform requirements, CIS Hardened Images on Azure feature three version points (ex. 3.0.2) instead of the four present on other CSPs (ex. 3.0.0.2). The last digit indicates OS-level updates, while the first two indicate changes to the CIS Benchmark on which the Hardened Image is based.

CIS Hardened Images on Google Cloud Platform (GCP)

GUI

Using the Compute Engine dashboard, select the CIS Hardened Image instance. The version number will be displayed under the “Storage” → “Boot Disk” section in the “Image” column.

In the below example screenshot, the CIS Hardened Image version number is 1.0.0.11:

gcp_storage_bootdisk.pngImage Modified

CLI

Using Google Cloud Shell, run the following command, replacing MY-INSTANCE-ID and MY-ZONE with their respective values:

Code Block
gcloud compute instances describe MY-INSTANCE-ID --zone=MY-ZONE --format='value(disks[0].source)' | xargs gcloud compute disks describe --format='value(sourceImage)'

The output will contain the image version at the end of the returned URL:

google_cloudshell.pngImage Modified

CIS Hardened Images on Oracle Cloud Infrastructure (OCI)

  • ??????

    • ????????????????

    GUI

    The Hardened Image version is displayed on the OCI dashboard, or as a drop-down selector when first instantiating a new Hardened Image.

    In the below example screenshot, the CIS Hardened Image version number is 2.0.0.5:

    oracle_version.pngImage Added

    Keywords; hardened image version number aws gcp azure oci

    Content by Label

    Filter by label (Content by label)
    showLabelsfalse
    showSpacefalse
    cqllabel = "sbp_fer"

    Copyright © 2020 2024

    Center for Internet Security®

    Privacy Policy

    Page Properties
    hiddentrue

    Action

    Name(s)

    Date

    Linked ticket

    Created by

    Allan Cornwell

    21

    Reviewed by

    SBP Product Technical Support Team (Amanda McGown Allan Cornwell Andrew Dannenberger Nick Romanzo Parami Swenson (Unlicensed))

    Approved by

    Amanda McGown

    Remove by