OpenParable
Skip to content
← Back to skills

Cis AWS Compute 2.1.1

DevOps & Security
cis-aws-compute-2.1.1

Cis AWS Compute 2.1.1 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Ensure Consistent Naming Convention is used for Organizational AMI

View on GitHub ↗
QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

  1. Open your project in Codex.
  2. Copy and paste the prompt below.
  3. Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/AWS/CIS_AWS_Compute_Services_Benchmark_v1.1.0/cis-aws-compute-2.1.1/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/cis-aws-compute-2-1-1, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

Ensure Consistent Naming Convention is used for Organizational AMI

Description

The naming convention for AMI (Amazon Machine Images) should be documented and followed for any AMI's created.

Rationale

The majority of AWS resources can be named and tagged. Most organizations have already created standardize naming conventions, and have existing rules in effect. They simply need to extend that for all AWS cloud resources to include Amazon Machine Images (AMI).

Impact

No significant operational impact. This is an organizational best practice that improves manageability and consistency of AMI resources.

Audit Procedure

Using AWS CLI

  1. Run aws ec2 describe-images.
aws ec2 describe-images --owner self --region us-west-2
  1. Review the list of AMIs.
  2. Confirm that the AMI Name matches the organizational image naming policy.

If any of the AMI Name's do not match the Organization policy refer to the remediation below.

Using AWS Console

  1. Login to the EC2 console at https://console.aws.amazon.com/ec2/.
  2. In the left pane, under Images, click AMIs.
  3. Review the list of AMIs.
  4. Confirm that the AMI Name matches the organizational image naming policy.

Expected Result

All AMI names should follow the organization's documented naming convention. The output of describe-images should show AMIs with consistent, policy-compliant names.

Remediation

Using AWS CLI

No specific CLI remediation command is provided. Use the console method to copy and rename AMIs that do not comply with the naming policy.

Using AWS Console

  1. Login to the EC2 console at https://console.aws.amazon.com/ec2/.
  2. In the left pane click Images, click AMIs.
  3. Select the AMI that does not comply to the naming policy.
  4. Click on Actions.
  5. Click on Copy AMI.
Destination region - Select the region the AMI is in.
Name - `Enter the new Name`
Description - `Enter the new description`
Encryption - `Select` if it matches your image policy
  1. Click on Copy AMI

Once the AMI has finished copying:

  1. Select the AMI that does not comply to the naming policy.
  2. Click on Actions.
  3. Click on Deregister.

Default Value

AWS does not enforce any default naming convention for AMIs.

References

  1. https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-images.html
  2. https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/AMIs.html

CIS Controls

Controls VersionControlIG 1IG 2IG 3
v81.1 Establish and Maintain Detailed Enterprise Asset Inventoryxxx
v71.4 Maintain Detailed Asset Inventoryxxx

Profile

Level 1 | Manual