Question: AWS scripts anytime soon?

[jwalker0129]

I just got on AWS and was wondering if the AWS scripts will be done soon or if it would probably be faster to just manually STIG my instances. Thanks!

[fcaviggia]

I have some scripts internally, I'll work on getting them up here - until then patches are welcome.

[jwalker0129]

Thanks. I'm actually just a Network Admin flailing in the dark here, but if I manage to do something useful then I will share it.

[shawndwells]

On 8/21/15 8:10 AM, jwalker0129 wrote:

Thanks. I'm actually just a Network Admin flailing in the dark here,
but if I manage to do something useful then I will share it.

Note this project does not actually harden to DoD STIG requirements.
Think of it as "stig++" in that it may loosely align in some areas, but
the settings and configurations are not reviewed by Red Hat, DISA FSO,
or NSA, and they're known to go far beyond what is required by policy.

If you're looking for Red Hat supported and recommended methods to STIG
a RHEL machine, the official upstream is the OpenSCAP Security Guide
project:
https://github.com/OpenSCAP/scap-security-guide

This is shipping natively in RHEL as the "scap-security-guide" RPM.

[jwalker0129]

Thanks Shawn. I was not aware of OpenSCAP.