Skip to main content

CISWeb AMI Changelog

Description

  • Patched: Security patches applied on 28-Mar-2022

  • Nginx

    • v1.20.x installed, build from source
    • modsec installed(disabled)
    • headers-more module installed
    • TLSv1.2 and TLSv1.3 | strong ciphers

  • Additional features

    • CIS hardened
    • lshell
    • CodeDeploy, CloudWatch(disabled)
    • Increased ulimits .via /etc/security/limits/conf and .via sysctl.conf placed in S3.
    • ClamAV and ossec is installed.(not being utilized)
    • Added new User ori-devops.
    • Security patched updated
    • Modified
    • Changed the sshd config
    • Added the Cronjob for Devops.
    • Created the /syncAccessKey directory.
    • Modified the cron job duration for devops.sh to 10min.
Sr. NoMumbaiIrelandN-Virginia
Currentami-07a8386e46ba53f76ami-0996f77b55866f17eami-0996f77b55866f17e
Sourceami-09386cee0ae19041eami-0996f77b55866f17eami-0996f77b55866f17e

ID: ami-07a8386e46ba53f76

Latest | Stable

Name: CISWebImageVodaProd06APR2022
Release Date: 06th APRIL, 2022
Type: Modified the duration cronjob of synckeys_devops.sh to 10m.

  • Reason for update/Issues in previous version

    • Security patched to be applied
    • Need to scan and remove the vulnerabilities on the server.
    • Created the synckeys_devops.sh file in syncAccessKeys directory
    • Modified the cronjob duration for synckeys_devops.sh from 30min to 10min.

  • Changes

    • Updated the security patches.
    • Created the ori-devops user.
    • Installed the clamAV for scanning server.
    • Added cronjob for devops.
    • Need to create the synckeys_devops.sh file in syncAccessKeys directory &
    • Need to change the duration of cronjob for synckeys_devops.sh from 30m to 10m
NameID
CurrentCISWebImageVodaProd06APR2022ami-07a8386e46ba53f76
SourceCISWebImageVodaProd03AUG2021ami-051dd2f39eb2eabed

ID: ami-051dd2f39eb2eabed

danger

Name: CISWebImageVodaProd03AUG2021
Release Date: 03rd August, 2021
Type: Major upgrade, Adding new feature

  • Reason for update/Issues in previous version

    • Needed to add modsec module for nginx
    • Security patched to be applied

  • Changes

    • nginx updates
      • Built nginx v1.20.x from source along with the below modules.
        • Installed modsec module along with OWASP rule set.
          • Default modsec config is added to /etc/nginx/modsec
          • Keeping it disabled by default.
          • Finalize the rules to be used from /etc/nginx/modsec/main.conf and update settings in nginx.conf as required to enable.
        • Installed headers-more module
      • Also, updated the install location structure. Now, it's more organized under /opt/nginx
      • Added nginx logrotate.?
NameID
CurrentCISWebImageVodaProd03AUG2021ami-051dd2f39eb2eabed
SourceCISWebImageVodaProd03FEB2021ami-0705cb623a7bb80b1

ID: ami-0705cb623a7bb80b1

danger

Name: CISWebImageVodaProd03FEB2021
Release Date: 03rd Feb, 2021
Type: Major upgrade, Adding new features

  • Reason for update/Issues in previous version

    • Nginx update required for security reasons
    • Security patched to be applied

  • Changes

    • Checked and applied security patches.
    • nginx upgrade
      • Built nginx v1.17.x from source along with the below modules.
        • Installed headers-more module
NameID
CurrentCISWebImageVodaProd03FEB2021ami-0705cb623a7bb80b1
Source--