CIS_Amazon_Linux_2_Benchmarks

Ensure Only Approved Services Are Listening on Network Interfaces
Profile Applicability:  • Level 1 Description: Only authorized and approved services should be allowed to listen on network interfaces to minimize the atta...
Wed, 28 May, 2025 at 1:34 AM
Ensure FTP Client Is Not Installed
Profile Applicability:  • Level 1 Description:  FTP clients allow file transfers over the network using the File Transfer Protocol (FTP), which transmits d...
Wed, 28 May, 2025 at 1:41 AM
Ensure LDAP Client Is Not Installed
Profile Applicability:  • Level 2 Description:  LDAP clients enable systems to communicate with LDAP directories for authentication and directory services....
Wed, 28 May, 2025 at 2:15 AM
Ensure NIS Client Is Not Installed
Profile Applicability:  • Level 1 Description:  NIS (Network Information Service) clients enable systems to retrieve user and group information from a cent...
Wed, 28 May, 2025 at 2:21 AM
Ensure Telnet Client Is Not Installed
Profile Applicability:  • Level 1 Description:  The Telnet client provides unencrypted remote terminal access. Removing the Telnet client reduces security ...
Wed, 28 May, 2025 at 2:27 AM
Ensure TFTP Client Is Not Installed
Profile Applicability:  • Level 1 Description:  The Trivial File Transfer Protocol (TFTP) client allows unencrypted file transfers over the network. Removi...
Wed, 28 May, 2025 at 2:34 AM
Ensure IPv6 Status Is Identified and Documented
Profile Applicability:  • Level 1 Description:  IPv6 is the latest version of the Internet Protocol designed to replace IPv4. Understanding whether IPv6 is...
Wed, 28 May, 2025 at 2:38 AM
Ensure Wireless Network Interfaces Are Disabled
Profile Applicability:  • Level 1 Description:  Wireless network interfaces can introduce security risks if left enabled on systems that do not require wir...
Wed, 28 May, 2025 at 2:44 AM
Ensure Bluetooth Services Are Disabled and Not Running
Profile Applicability:  • Level 1 Description:  Bluetooth services provide wireless communication capabilities. If Bluetooth is not required on the system,...
Wed, 28 May, 2025 at 2:50 AM
Ensure DCCP Kernel Module Is Not Available
Profile Applicability:  • Level 2 Description:  The Datagram Congestion Control Protocol (DCCP) kernel module provides support for a message-oriented trans...
Wed, 28 May, 2025 at 2:54 AM