--- title: Ubuntu Pro Minimal 22.04 LTS with CIS hardening is now generally available on AWS description: Ubuntu Pro Minimal 22.04 LTS with CIS hardening, available on AWS, with improved security controls, minimal attack surface, and out-of-the-box compliance. url: https://canonical.com/blog/cis-hardened-ubuntu-pro-minimal-available-on-aws --- 1. [Blog](https://canonical.com/blog) 2. Article --- [Carlos Bravo](https://canonical.com/blog/author/carlos-bravo "More about Carlos Bravo") 28 August 2025 # Ubuntu Pro Minimal 22.04 LTS with CIS hardening is now generally available on AWS [AWS](https://canonical.com/blog/tag/aws) [CIS](https://canonical.com/blog/tag/cis) [CIS Benchmarks](https://canonical.com/blog/tag/cis-benchmark) [DISA STIG](https://canonical.com/blog/tag/disa-stig) [Hardening](https://canonical.com/blog/tag/hardening) [Linux](https://canonical.com/blog/tag/linux) [Security](https://canonical.com/blog/tag/security) [Ubuntu](https://canonical.com/blog/tag/ubuntu) [Ubuntu Server](https://canonical.com/blog/tag/ubuntu-server) --- Share the article # August 28, 2025 – We are excited to announce the general availability of Ubuntu Pro Minimal 22.04 LTS with CIS hardening, a new variant of Ubuntu designed for organizations that require tight security controls, minimal attack surface, and out-of-the-box compliance. This new offering combines the efficiency of Minimal Ubuntu with the enterprise-grade security coverage of Ubuntu Pro and, now, pre-applied Center for Internet Security (CIS) benchmark hardening, helping enterprises deploy infrastructure that’s compliant from Day Zero. ## What is Ubuntu Pro Minimal with CIS hardening? Starting from Minimal Ubuntu, a streamlined Ubuntu Server variant built with a minimal set of packages, this image includes only the essential components, reducing its attack surface and resource footprint. Ubuntu Pro adds an enterprise-grade security layer, delivering patches for high and critical CVEs across all open source packages in Ubuntu, covering thousands of packages. On top of this minimal, fully secured foundation, we’ve applied a CIS Level 1 benchmark hardening profile. This enforces configuration policies aligned with industry standards and best practices, covering areas such as: * File system and permission policies * Secure boot settings * Network and firewall configurations * Logging and auditing rules * Access control and authentication mechanisms ## Benefits of Ubuntu Pro Minimal with CIS hardening * Hardened out-of-the-box: The majority of the CIS security controls are pre-applied, reducing manual effort and human error. You get a secure, minimal OS that’s ready for production from first boot. * Minimal footprint, maximum control: By starting from a minimal base, you deploy only what’s needed, keeping your systems lightweight and performant. * Pro-grade security coverage: Includes up to 12 years of CVE patching for the full Ubuntu archive (both main and universe) and access to FIPS-certified cryptographic modules, DISA-STIG profiles, and kernel livepatch. * Optimized for AWS: Shipped with the AWS-optimized kernel and agents for full compatibility across all instance types and EC2 AWS services. ## How to get started Ubuntu Pro Minimal 22.04 LTS with CIS hardening is already available on the AWS Marketplace and can also be launched using the EC2 console after subscribing to the product. * [Ubuntu Pro Minimal 22.04 LTS with CIS hardening (AMD64)](https://aws.amazon.com/marketplace/pp/prodview-cixnmozyplyqg) – For x86 based instance types. * [Ubuntu Pro Minimal 22.04 LTS with CIS hardening (ARM)](https://aws.amazon.com/marketplace/pp/prodview-jjwt2udfw5zqq) – For Graviton instance types To learn more about Ubuntu Pro on AWS and our optional support options, [contact us via our webpage](https://ubuntu.com/aws#get-in-touch)  or email us at [aws@canonical.com](mailto:aws@canonical.com). ## Sign up for our newsletter Get the latest Canonical news and updates in your inbox. Work email: \*I agree to receive information about Canonical's products and services. In submitting this form, I confirm that I have read and agree to [Canonical's Privacy Notice](https://canonical.com/legal/data-privacy/contact) and [Privacy Policy](https://canonical.com/legal/data-privacy). Sign up ## Share on --- ## Related posts [### Canonical announces the alpha release of Charmed OpenShell to help secure autonomous AI agent fleets](https://canonical.com/blog/charmed-openshell-alpha-release) To streamline enterprise deployment and lifecycle management, Canonical is announcing the alpha release of Charmed OpenShell. [Canonical](https://canonical.com/blog/author/canonical) 28 September 2026 [### Ubuntu coming soon to Snapdragon X2 Series platforms, unlocking more Linux PCs for the agentic world](https://canonical.com/blog/ubuntu-coming-soon-to-qualcomm-snapdragon-x2-series-platforms) Canonical and Qualcomm Technologies announce upcoming native Ubuntu support for Qualcomm’s flagship laptop silicon, delivering multi-day battery life, 80 TOPS NPU acceleration,... [Canonical](https://canonical.com/blog/author/canonical) 23 September 2026 [### Accelerating delivery of CVE fixes with a new Kernel release strategy](https://canonical.com/blog/accelerating-delivery-of-cve-fixes-with-a-new-kernel-release-strategy) When it comes to fixing security vulnerabilities, speed is crucial. Canonical is officially outlining a transition from its current 4-week regular and 2-week security kernel... [Canonical](https://canonical.com/blog/author/canonical) 23 September 2026 [### Beyond the 10-year mark: Extending Ubuntu Pro 16.04 LTS security coverage](https://canonical.com/blog/extending-ubuntu-pro-16-04-coverage) A decade ago, Canonical launched Ubuntu 16.04 LTS (codenamed “Xenial Xerus”). As a Long-Term Support (LTS) release, it comes with 5 years of standard security coverage, which... [Carlos Bravo](https://canonical.com/blog/author/carlos-bravo) 17 September 2026