What are CIS Benchmarks?
CIS (Center for Internet Security) publishes security configuration recommendations for systems and platforms. They are developed through expert consensus and cover more than 25 product families.
Checks related to CIS Benchmarks help review infrastructure security settings before deployment.
Coverage
The following pages summarize major IaC checks related to CIS Benchmarks. Detailed recommendations and numbering vary by benchmark version.
Cloud platforms
| Benchmark | Platform | Details |
|---|---|---|
| CIS Amazon Web Services Foundations Benchmark | AWS | AWS |
| CIS Amazon Web Services Three-tier Web Architecture Benchmark | AWS | AWS Three-tier |
| CIS Microsoft Azure Foundations Benchmark | Azure | Azure |
| CIS Google Cloud Platform Foundation Benchmark | GCP | GCP |
| CIS Alibaba Cloud Foundation Benchmark | Alibaba Cloud | Alibaba |
| CIS Tencent Cloud Enterprise Foundations Benchmark | Tencent Cloud | Tencent |
Container orchestration
| Benchmark | Platform | Details |
|---|---|---|
| CIS Kubernetes Benchmark | Kubernetes | Kubernetes |
| CIS Amazon Elastic Kubernetes Service (EKS) Benchmark | EKS | EKS |
| CIS Google Kubernetes Engine (GKE) Benchmark | GKE | GKE |
| CIS Azure Kubernetes Service (AKS) Benchmark | AKS | AKS |
Container images
| Benchmark | Platform | Details |
|---|---|---|
| CIS Docker Benchmark | Dockerfile, Docker Compose | Docker |