This Ansible script is under development and is considered a work in progress.
This Ansible script can be used to harden a Amazon Linux 2 machine to be CIS compliant to meet level 1 or level 2 requirements.
This role will make significant changes to systems and could break the running operations of machines. Considering using this script on a test machine before using the script against other production level systems for remediation. Use this script at your own risk and no warranty is attached for the usage of this script as dictated by the license.
Ansible 2.7+
Amazon Linux 2
role: AmazonLinux-2-CIS
tags:
level1
level2
always
prelim_tasks
post_tasks
section1
section2
section3
section4
section5
section6
Refer to defaults/main.yml for other vars
Refer to AmazonLinux-2-CIS_Benchmark_(level1, level1_and_level2, or level2).ymls for sample playbook.ymls. Change the role to match role folder name.
This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0. If a copy of the MPL was not distributed with this file, You can obtain one at https://mozilla.org/MPL/2.0/.