1

I have 2 questions:

  1. The pricing of these images says its $130/year (for software + AWS usage): Does this mean running costs of EC2 are also covered in this pricing? Also, is this pricing per instance? So if we need to use 100 instances, should we pay 13K per year?
  2. Are there scripts available to "perform" these hardening tasks on the OS (to meet CIS hardening standards)?
1

The pricing of these images says its $130/year (for software + AWS usage): Does this mean running costs of EC2 are also covered in this pricing?

No.

If you read the details in the AMI Subscription page, it says in the last sentence: "Charges for using Amazon EC2 and other services from AWS are separate and in addition to what you pay to purchase AWS Marketplace software products."

enter image description here

"Also, is this pricing per instance? So if we need to use 100 instances, should we pay 13K per year?"

Yes. In the same AMI subscription page from the first answer, it states: "You can apply one annual subscription to an AWS Marketplace software product to one Amazon EC2 instance"

To find an estimate on total pricing, you need to go to the AWS Marketplace and filter for CIS. You choose the AMI, and click the cost details link. Then choose region and the instance type and a total cost estimate for that instance is shown.

enter image description here

"Are there scripts available to "perform" these hardening tasks on the OS (to meet CIS hardening standards)?"

Yes with a cost. They provide build kits if you are a member of the CIS SecureSuite. But not for every operating system. See the "Leveraging Build Kits" in this article.

2
  • Thanks much. Is there a place where we can get scripts which are used to harden OS images on AWS - say WIndows EC2 and Linux?
    – Biju
    Nov 12 at 9:28
  • 1
    try - security.stackexchange.com
    – Taterhead
    Nov 12 at 15:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.