As DevOps engineers, our jobs go hand-in-hand with Security. When a mandate comes down from the CISO on high, we must do what it takes to comply with new requirements. One such set of requirements is called the CIS, or Center for Internet Security benchmarks. This talk explores a set of security profiles (CIS), and how to automate the requirements into your pipeline and image-building process. In particular, how to set up a CIS-compliant partitioning scheme on cloud block storage (EBS), and automate image creation using this scheme.