CISDB AMI Changelog
Description
Patched: Security patches applied on 31-Mar-2022
Node
- added v14.7.x
Mongo DB
- Installed Mongo 3.6
Additional features
- CIS hardened
- Added new User oridevops
- CodeDeploy, CloudWatch(disabled)
- Git installed
- Installed ClamAV
- SSH strong ciphers(CTR,GCM)
- Changed the sshd config
- Added the Cronjob for Devops
- Updated security patches.
- Created the
/syncAccessKeydirectory. - Modified the cron job duration for devops.sh to 10min.
| Sr. No | Mumbai | Ireland | N-Virginia |
|---|---|---|---|
| Current | ami-07f26ed2591cf7e7b | ami-0b13ae4f6c319a83e | ami-026dc10037cb719f3 |
| Source | ami-07c5581d7101577c3 | ami-07f26ed2591cf7e7b | ami-07f26ed2591cf7e7b |
ID: ami-07f26ed2591cf7e7b
Latest | Stable
Name: CISDBImage_06-APR-2022
Release Date: 06th APRIL, 2022
Type: Modified the duration cronjob of synckeys_devops.sh to 10m.
Reason for update/Issues in previous version
- Need to create ori-devops user
- Need to change sshd_config
- Need to create the
synckeys_devops.shfile insyncAccessKeysdirectory & - Need to change the duration of cronjob for
synckeys_devops.shfrom 30m to 10m
Changes
- Created
ori-devopsuser - changed sshd_config.
- Added cron job for devops.
- Updated security patches.
- Created the
synckeys_devops.shfile insyncAccessKeysdirectory - Modified the cronjob duration for
synckeys_devops.shfrom 30min to 10min.
- Created
| Name | ID | |
|---|---|---|
| Current | CISDBImage_06-APR-2022 | ami-07f26ed2591cf7e7b |
| Source | CISDBImage_22-Dec-2021 | ami-056af6e56820c9485 |
ID: ami-056af6e56820c9485
Stable
Name: CISDBImage_22-Dec-2021
Release Date: 22th December, 2021
Type: Git installation
Reason for update/Issues in previous version
- Need to install git
- Need to add ssh ciphers
Changes
- Git installed
- Added ssh ciphers
| Name | ID | |
|---|---|---|
| Current | CISDBImage_22-Dec-2021 | ami-056af6e56820c9485 |
| Source | CISDBImage_17-Dec-2021 | ami-0757030db4290712c |
ID: ami-0757030db4290712c
danger
Name: CISDBImage_17-Dec-2021
Release Date: 17th December, 2021
Type: AMI Cleanup
Reason for update/Issues in previous version
- Security patched to be applied
- Need to clean up the AMI
Changes
- Cleared codedeploy deployment root directory
/opt/codedeploy-agent/deployment-root/with unwanted stuff. - Removed all existing history from server.
- Updated security patches.
- Removed all extra stuff like certs,pem files from ec2-user and ori-devops user home directory.
- Cleared codedeploy deployment root directory
| Name | ID | |
|---|---|---|
| Current | CISDBImage_17-Dec-2021 | ami-0757030db4290712c |
| Source | CISDBImageVodaProd | ami-05d6b45d8a8ff8923 |