[Geee]

Thanks. What about using the hardened images they provide? https://www.cisecurity.org/cis-hardened-image-list/

[jarito]

Their hardened images are fine but there are two issues. First, you'll need to test / dev with them as full implementations of CIS can break things (though not as bad as the STIGs) and, IIRC, they charge extra for you to use their images on public clouds.

[imthenachoman]

From what I can tell, their images are only for the big three cloud providers.