Sept. 26, 2022, 11:34 p.m. | Kay H.

DEV Community dev.to

This post includes some notes about Bottlerocket security.



  • CIS Hardening Benchmark for Bottlerocket

  • FIPS Support / Validation
    Does Bottlerocket have integration with AWS Inspector?

  • Is OS host logs available? Does it have integration with CloudWatch Log?

  • Reduced attack surface, verified software, enforced permission boundaries

  • ECS/EBS encryption vs. OS crypto





CIS Hardening Benchmark for Bottlerocket


Bottlerocket now has a Center for Internet Security (CIS) Benchmark. The CIS Benchmark is a catalog of security-focused configuration settings that help Bottlerocket customers configure or …

aws security

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Senior Security Specialist

@ Lely | Maassluis, Netherlands

IT Security Manager (Corporate Security) (REF822R)

@ Deutsche Telekom IT Solutions | Budapest, Hungary

Senior Security Architect

@ Cassa Centrale Banca - Credito Cooperativo Italiano | Trento, IT, 38122

Senior DevSecOps Engineer

@ Raft | Las Vegas, NV (Remote)

Product Manager - Compliance

@ Arctic Wolf | Remote - Colorado