Microsoft
Azure now offers built-in Center for Internet Security (CIS) benchmarks in
public preview for all Azure endorsed Linux distributions through Azure Machine
Configuration’s new customizable security benchmarks capability, powered by azure-osconfig’s compliance engine. This capability allows organizations
to easily customize and apply industry-standard security benchmarks which are
in parity with the content published on CIS website. It supports both Level
1(L1) and Level 2(L2) server profiles, enables exception and parameter
customization, operates in audit-only mode at no additional cost, and extends
compliance management to hybrid scenarios via Azure Arc. Using this new capability,
you can introduce a flexible, compliance as code driven approach to your
organization to maintain security and compliance across your hybrid
infrastructure. The solution is officially certified by CIS for CIS
benchmark assessment for all the supported benchmarks.