Coming to AWS.
The same CIS Benchmark Level 1 hardening approach we ship for Azure — scan evidence and a deviations register baked into the image — is planned for AWS CodeBuild and EC2 self-hosted runners. In development, no ETA yet.
In the meantime, see what's shipping today on Azure.