CIS and SANS bundle cloud security training with hardened AWS images

The Center for Internet Security and SANS Institute have launched a bundled offering in AWS Marketplace that pairs CIS Hardened Images with cloud security training. The package is aimed at helping organizations migrate to AWS faster with fewer misconfigurations, stronger compliance, and better cloud security skills.

Why it matters: - The bundled offering is designed to reduce cloud migration risk at a time when enterprises are moving faster into AWS and AI-driven environments. - CIS Hardened Images can cut manual hardening work, while SANS training is meant to help teams avoid configuration drift and respond to cloud-specific failure modes. - The package is positioned to support compliance, lower incident risk, and reduce audit burden.

What happened: - The Center for Internet Security and SANS Institute announced a joint cloud security offering through AWS Marketplace. - The bundle pairs CIS Hardened Images with four SANS cloud security courses. - The offering is available now. - CIS said the approach is intended to secure cloud migrations from the start.

The details: - CIS Hardened Images are pre-configured, CIS Benchmark-aligned AMIs for Windows, Linux, and container workloads. - The images are meant to reduce manual hardening and accelerate secure deployment. - The training includes SEC549: Cloud Security Architecture, focused on secure AWS landing zone design. - The training also includes LDR520: Emerging Trends for Cyber Leaders: AI and Cloud, focused on governance and oversight. - SEC510: Cloud Security Engineering and Controls covers attack-informed validation. - SEC540: Cloud Native Security and DevSecOps Automation focuses on automation and drift prevention. - The combined offering integrates with AWS Control Tower, AWS Application Migration Service, and AWS Database Migration Service. - The package is intended to support secure migration planning, execution, and ongoing operations. - The offering is also aligned with PCI DSS, HIPAA, FedRAMP, and other compliance frameworks. - CIS said the hardened images establish Benchmark-aligned baselines that reduce risk and support compliance from day one. - SANS said the training is aimed at the operational realities of long-term cloud security management.

Between the lines: - The partnership combines infrastructure and training because cloud security failures often come from both weak defaults and weak operational practices. - The AWS Marketplace distribution lowers friction for buyers by putting the products in the same procurement path. - The message to enterprises is that secure migration is not just a tooling problem; it is also a staffing and skills problem.

What's next: - Organizations can deploy the hardened images immediately and use the training to build cloud security capabilities over time. - The partners are steering buyers toward ongoing compliance and continuous drift prevention rather than one-time migration support. - More information is available on CISecurity.