Skip to main content

Your submission was sent successfully! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates from Canonical and upcoming events where you can meet our team.Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

An error occurred while submitting your form. Please try again or file a bug report. Close

  1. Blog
  2. Article

Carlos Bravo
on 28 August 2025

Ubuntu Pro Minimal 22.04 LTS with CIS hardening is now generally available on AWS


August 28, 2025 – We are excited to announce the general availability of Ubuntu Pro Minimal 22.04 LTS with CIS hardening, a new variant of Ubuntu designed for organizations that require tight security controls, minimal attack surface, and out-of-the-box compliance.

This new offering combines the efficiency of Minimal Ubuntu with the enterprise-grade security coverage of Ubuntu Pro and, now, pre-applied Center for Internet Security (CIS) benchmark hardening, helping enterprises deploy infrastructure that’s compliant from Day Zero.

What is Ubuntu Pro Minimal with CIS hardening?

Starting from Minimal Ubuntu, a streamlined Ubuntu Server variant built with a minimal set of packages, this image includes only the essential components, reducing its attack surface and resource footprint. 

Ubuntu Pro adds an enterprise-grade security layer, delivering patches for high and critical CVEs across all open source packages in Ubuntu, covering thousands of packages.

On top of this minimal, fully secured foundation, we’ve applied a CIS Level 1 benchmark hardening profile. This enforces configuration policies aligned with industry standards and best practices, covering areas such as:

  • File system and permission policies
  • Secure boot settings
  • Network and firewall configurations
  • Logging and auditing rules
  • Access control and authentication mechanisms

Benefits of Ubuntu Pro Minimal with CIS hardening

  • Hardened Out-of-the-box: The majority of the CIS security controls are pre-applied, reducing manual effort and human error. You get a secure, minimal OS that’s ready for production from first boot.
  • Minimal Footprint, Maximum Control: By starting from a minimal base, you deploy only what’s needed, keeping your systems lightweight and performant.
  • Pro-Grade Security Coverage: Includes up to 120 years of CVE patching for the full Ubuntu archive (both main and universe) and access to FIPS-certified cryptographic modules, DISA-STIG profiles, and kernel livepatch.
  • Optimized for AWS: Shipped with the AWS-optimized kernel and agents for full compatibility across all instance types and EC2 AWS services.

How to get started

Ubuntu Pro Minimal 22.04 LTS with CIS hardening is already available on the AWS Marketplace and can also be launched using the EC2 console after subscribing to the product. 

To learn more about Ubuntu Pro on AWS and our optional support options, contact us via our webpage  or email us at [email protected]

Related posts


ijlal-loutfi
6 August 2025

Is Linux secure?

Confidential computing Article

Does operating system (OS) security matter? Meet Pal. Pal is a senior developer working at PalBank. For the next 6 months, Pal will be responsible for leading the development of the bank’s web application client, which will be used daily by millions of customers. Pal invests considerable effort into designing and implementing the most sec ...


Massimiliano Gori
2 July 2025

Source to production: Spring Boot containers made easy

Cloud and server Article

This blog is contributed by Pushkar Kulkarni, a Software Engineer at Canonical. Building on the rise in popularity of Spring Boot and the 12 factor paradigm, our Java offering also includes a way to package Spring workloads in production grade, minimal, well organized containers with a single command. This way, any developer can generate ...


Massimiliano Gori
2 July 2025

Spring support available on Ubuntu

Cloud and server Article

This blog is contributed by Vladimir Petko, a Software Engineer at Canonical. The release of Plucky Puffin earlier this year introduced the availability of the devpack for Spring, a new snap that streamlines the setup of developer environments for Spring on Ubuntu. In this blog, we’ll explain what devpacks are and provide an overview of ...