cis-aws-compute-5-2

name	cis-aws-compute-5.2
description	Change default Administrator login names and passwords for applications
category	cis-compute
version	1.1.0
author	cyberstrike-official
tags	["cis","aws","compute","lightsail","passwords","default-credentials","authentication"]
cis_id	5.2
cis_benchmark	CIS AWS Compute Services Benchmark v1.1.0
tech_stack	["aws"]
cwe_ids	[]
chains_with	["cis-aws-compute-5.12"]
prerequisites	[]
severity_boost	{}

5.2 Change default Administrator login names and passwords for applications (Manual)

Description

Change the default settings for the administrator login names and passwords of the application software that you install on Lightsail instances.

Rationale

Default administrator login names and passwords for applications used on Lightsail instances can be used by hackers and individuals to break into your servers.

Impact

N/A

Audit Procedure

Using AWS Console

To confirm that you have updated or changed the default administrator name and password for any application you are using is a manual process. Often dependent on the application itself and the operating system you are utilizing for the Lightsail instance.

1. Login to AWS Console using https://console.aws.amazon.com
2. Click All services, click Lightsail under Compute.
3. This will open up the Lightsail console.
4. Select the Instance you want to review.
5. Make sure the instance status is running.
6. Connect to the instance.
7. Depending on the instance OS and the application you are running determine what the default administrator name is set to and what the password is.
8. If the default administrator username and or password is still at the default settings please refer to the remediation below.
9. Repeat steps no. 4 - 8 to verify if any Lightsail instances require application updates.

Using AWS CLI

N/A - This is a manual process dependent on the application and OS.

Expected Result

All applications running on Lightsail instances should have their default administrator login names and passwords changed from the defaults.

Remediation

Using AWS Console

1. Login to AWS Console using https://console.aws.amazon.com
2. Click All services, click Lightsail under Compute.
3. This will open up the Lightsail console.
4. Select the Instance you want to update the default administrator settings.
5. Make sure the instance status is running.
6. Click on Snapshots
7. Under Manual snapshots click on + Create snapshot