What are the differences between a base Cloud image and a CIS Hardened Image?

Product Name

CIS Hardened Images® AWS, GCP, Azure, Oracle

Version

All

Date

Dec 16, 2020

Problem

Is there any technical documentation which describes about the differences between a base Cloud image and CIS Hardened Image?

Solution

If you look over the exception reports (The Hardened Image CIS-CAT reports) we include on all Cloud based Hardened Images you can see which CIS Benchmark Recommendations have been applied to CIS Images and which have not. For what is included in the Cloud Service Provider’s base image, you will need to check the specific CSP’s documentation.

The hardened image CIS-CAT reports are located in /home/CIS_Hardened_Reports on Linux systems.
The hardened image CIS-CAT reports are located in C:\CIS Hardening Reports on Windows systems
These folders will contain the reports and exceptions lists, and contains all of the settings configured on the system.

Keywords; Hardening Reports HI report

Center for Internet Security®

Privacy Policy