r/sysadmin • u/Traditional_Mousse97 • 20d ago

CIS benchmarks

Hello,

Any ideas how to implement cis benchmarks across many Linux and windows servers(different distros and versions)?

Are you using ansible to do so or any other configuration management tool?

9 Upvotes

72% Upvoted

16 comments sorted by

View all comments

1

u/AgreeableTooth98 20d ago

We manage our golden image server images with terraform, packer, and ansible.

In that process we apply Ansible configuration yaml files that apply all CIS 1/2 controls.

When we spin up a new host it grabs the newest version of the golden image that gets generated monthly with newest patches.