OpenParable
Skip to content
← Back to skills

Cis AWS Euc 2.13

DevOps & Security
cis-aws-euc-2.13

Cis AWS Euc 2.13 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Ensure Workspaces images are not older than 90 days

View on GitHub ↗
QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

  1. Open your project in Codex.
  2. Copy and paste the prompt below.
  3. Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/AWS/CIS_AWS_End_User_Compute_Services_Benchmark_v1.2.0/cis-aws-euc-2.13/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/cis-aws-euc-2-13, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

Ensure Workspaces images are not older than 90 days (Manual)

Description

WorkSpaces images should not have a creation time stamp over 90 days.

Rationale

WorkSpaces images require Operating system patches to be applied and updated and by confirming the creation date is not over 90 days old can help ensure that updates are being applied.

Impact

None

Audit Procedure

Using AWS Console

Perform the following to determine the age of WorkSpaces images.

  1. Login to the WorkSpaces dashboard at https://console.aws.amazon.com/workspaces/
  2. In the left pane click Images.
  3. Review the Created date and confirm that all images are newer than 90 days.

If any images are older than 90 days refer to the remediation procedure below.

Expected Result

All WorkSpaces images have a creation date within the last 90 days.

Remediation

Using AWS Console

To create a custom image:

Note: If you are still connected to the WorkSpace, disconnect.

  1. Log in to the WorkSpaces console at https://console.aws.amazon.com/workspaces/
  2. In the left pane, choose WorkSpaces.
  3. Select the WorkSpace and choose Actions, Create Image.

A message displays, prompting you to restart your WorkSpace before continuing. Restarting your WorkSpace updates your Amazon WorkSpaces software to the latest version.

Once you have restarted your WorkSpace, repeat Step 4 of this procedure.

  1. Click Next.
  2. Enter an image name and a description.
  3. Click Create Image. While the image is being created, the status of the WorkSpace is Suspended and the WorkSpace is unavailable.

In the left pane, click Images. The image is complete when the status of the WorkSpace changes to Available.

Default Value

By default, images can exist for indefinite time.

CIS Controls

Controls Version v8:

  • 2.3 Address Unauthorized Software

Controls Version v7:

  • 2.6 Address unapproved software

Profile

Level 1