AWS gives you the controls — it does not turn them on. This checklist covers 95 CIS Level 1 and Level 2 controls across IAM, logging, monitoring, networking, storage, compute, and key management, so you can close the gaps that pentesters and auditors find first.
One-time purchase · instant download · 95 controls with verification & remediation steps
What's inside
Every control is plain-language, prioritized by severity, and paired with how to verify it and how to fix it. Organized into 10 sections.
Real sample controls
These are taken directly from the checklist — no paraphrasing.
Enable MFA on the root account.
Ensure no access keys exist on the root account.
Do not use the root account for day-to-day work.
Attach no IAM policies directly to users — use groups or roles.
By purchasing you agree to our Terms. Digital products are non-refundable once accessed.
Free
Download a free one-page preview of this checklist — the highest-impact controls, no email gate. Want the curated top-10 by email instead? Use the form on the homepage.
Why teams use Strondex
Built by security professionals
Controls drawn from CIS benchmarks, framework requirements, and real-world assessment findings.
Self-serve, no consultant
Plain-language steps you can action yourself — without the $300/hr engagement.
Honest scope
Exactly 95 controls. No inflated counts, no fabricated reviews — see the samples above.
It covers both CIS AWS Foundations Level 1 and Level 2 controls, with each control labelled so you can decide how far to harden based on your risk tolerance.
Yes. Account and organization hygiene is one of the ten domains, alongside IAM, logging, monitoring, networking, S3, EC2, RDS, KMS, and security services.
Yes. The Security Services domain helps you confirm those tools are configured correctly, and the rest of the checklist covers controls those services do not enforce on their own.
Cyber Insurance Prep Checklist
47 controls underwriters actually check — know exactly where you stand before renewal.
View $47 ›M365 Security Hardening Checklist
80 CIS-based controls for Microsoft 365 — close the gaps before attackers find them.
View $97 ›Azure Hardening Checklist
88 CIS-based controls for Microsoft Azure — identity to networking to Defender.
View $147 ›SOC 2 Readiness Workbook
85 controls mapped to AICPA Trust Services Criteria — know your audit readiness score.
View $197 ›PCI DSS Compliance Checklist
78 PCI DSS v4.0 controls with SAQ-A and SAQ-D annotations.
View $147 ›