用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-storage-4-5命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
基于 SOC 职业分类
正在显示 SKILL.md
| name | cis-aws-storage-4.5 |
| description | Ensure installation and configuration of Lustre Client |
| category | cis-storage-services |
| version | 1.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","storage","fsx","lustre","client-installation","ubuntu","level-2"] |
| cis_id | 4.5 |
| cis_benchmark | CIS AWS Storage Services Benchmark v1.0.0 |
| tech_stack | ["aws","linux"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-storage-4.2","cis-aws-storage-4.4","cis-aws-storage-4.6"] |
| prerequisites | ["cis-aws-storage-4.2","cis-aws-storage-4.4"] |
| severity_boost | {} |
To utilize the newly created File Cache, you must install the Lustre Client on your EC2 instance.
The Lustre Client facilitates efficient communication between the EC2 instance and the File Cache, ensuring high-performance data access and improved overall system efficiency. This setup is crucial for optimizing data processing and leveraging the benefits of the File Cache.
Without the Lustre Client installed, EC2 instances cannot mount or access the FSx File Cache, resulting in inability to leverage the high-performance caching capabilities and potential performance degradation for data-intensive workloads.
This is a client-side configuration that cannot be audited through the AWS Console. Use SSH to connect to EC2 instances and verify Lustre client installation.
ssh -i "{KEY.pem}" ubuntu@{your-ec2-instance}
# Check if Lustre client is installed
dpkg -l | grep lustre
# Check Lustre client version
modinfo lustre
# Verify kernel compatibility
uname -r
The Lustre client should be properly installed with:
Follow these steps to install the Lustre Client on Ubuntu 22.04:
ssh -i "{KEY.pem}" ubuntu@{your-ec2-instance}
When prompted to log in with the SSH key, enter "yes"
You should now be connected to your EC2 instance
Run the following command to download and install the public Lustre key:
wget -O - https://fsx-lustre-client-repo-public-keys.s3.amazonaws.com/fsx-ubuntu-public-key.asc | gpg --dearmor | sudo tee /usr/share/keyrings/fsx-ubuntu-public-key.gpg >/dev/null
sudo bash -c 'echo "deb [signed-by=/usr/share/keyrings/fsx-ubuntu-public-key.gpg] https://fsx-lustre-client-repo.s3.amazonaws.com/ubuntu jammy main" > /etc/apt/sources.list.d/fsxlustreclientrepo.list && apt-get update'
Determine which kernel is currently running on your client instance and update as needed. The AWS Lustre client on Ubuntu 22.02 requires kernel 5.15.0.1020-aws or later for both x86 based EC2 instances and Arm-based EC2 instanced powered by AWS Graviton processors:
a. Run the following command to find out which kernel your machine is running:
uname -r
b. If your kernel is not up to date, run the following command to install the kernel update, Lustre client update, and reboot your system:
sudo apt install -y linux-aws lustre-client-modules-aws && sudo reboot
c. If your kernel is up to date and you just want to install the latest Lustre version, run this command:
sudo apt install -y lustre-client-modules-$(uname -r)
Verify installation:
# Check installed packages
dpkg -l | grep lustre
# Verify Lustre module
modinfo lustre
# Check if module can be loaded
sudo modprobe lustre
By default, the Lustre client is not installed on EC2 instances. It must be explicitly installed on compatible operating systems.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.3 Configure Data Access Control Lists Configure data access control lists based on a user's need to know. Apply data access control lists, also known as access permissions, to local and remote file systems, databases, and applications. | ● | ● | ● |
| v8 | 14.2 Train Workforce Members to Recognize Social Engineering Attacks Train workforce members to recognize social engineering attacks, such as phishing, pre-texting, and tailgating. | ● | ● | ● |
| v7 | 5.2 Maintain Secure Images Maintain secure images or templates for all systems in the enterprise based on the organization's approved configuration standards. Any new system deployment or existing system that becomes compromised should be imaged using one of those images or templates. | ● | ● | |
| v7 | 13.4 Only Allow Access to Authorized Cloud Storage or Email Providers Only allow access to authorized cloud storage or email providers. | ● | ● |
Level 2