Relevance Lab CIS Level 2 Windows Data Science AMI for AWS RES
RELEVANCE LAB · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
## Why This AMI Exists
Building a GPU-accelerated data science environment that also meets CIS Level 2 security benchmarks typically requires weeks of manual configuration - hardening the OS, installing and validating drivers, configuring tools to comply with restrictive policies, and documenting controls for audit. Most data science AMIs sacrifice security for convenience, or deliver hardened images that break GPU workflows and development tools.
Show the rest of the publisher’s description (39 more lines)
This AMI eliminates that trade-off. It delivers a fully functional, GPU-ready data science workspace on Windows Server 2022 that has been hardened to CIS Level 2 standards and validated via Amazon Inspector - so your team can start working on day one without compromising your security posture.
## Key Features
**CIS Level 2 Compliance, Validated**
Hardened to meet CIS Level 2 Benchmarks for Windows Server 2022 with validation performed through Amazon Inspector. The configuration applies a defense-in-depth approach with restrictive settings that reduce the attack surface while preserving full tool functionality.
**GPU-Optimized for ML and Analytics**
Pre-installed with CUDA Toolkit, NVIDIA drivers, and cuDNN - configured to operate within the hardened environment. Supports deep learning training and inference workloads on GPU-enabled EC2 instance families.
**Complete Data Science Stack**
Includes JupyterLab, Jupyter Notebook (Python and R kernels), RStudio, VS Code, Visual Studio 2022 CE, and PyCharm CE. ML frameworks include PyTorch, TensorFlow, scikit-learn, PySpark, Dask, and Vowpal Wabbit - all integrated into the secured platform.
**Secure Remote Access via NICE DCV**
High-performance remote desktop access through Amazon NICE DCV, with access policies configured to align with Level 2 security requirements including strict authentication and access control.
**AWS RES Integration**
Fully compatible with AWS Research and Engineering Studio (RES) for streamlined deployment, user management, and workspace orchestration within your cloud environment.
**Container and Environment Management**
Docker, Docker Compose, and Anaconda are configured following container hardening principles for enhanced security.
**Productivity and Utilities**
Includes LibreOffice (Writer, Calc, Impress), Chrome, Git, 7-Zip, and AWS CLI - all with configurations modified to reduce potential vulnerabilities.
## Getting Started
- Subscribe to the AMI through AWS Marketplace.
- Launch a GPU-enabled EC2 instance (g4dn, g5, or p-family recommended) using this AMI, either standalone or through AWS Research and Engineering Studio (RES).
- Connect to your workspace via Amazon NICE DCV remote desktop.
- Open JupyterLab, RStudio, or your preferred IDE and begin working immediately - all tools and GPU drivers are pre-configured.
- Verify CIS compliance by running an Amazon Inspector scan to generate an auditable compliance report for your security team.
## Technical Details
- **Operating System:** Windows Server 2022 (CIS Level 2 Hardened)
- **Remote Access:** Amazon NICE DCV
- **Languages:** Python 3.x, R
- **IDEs:** VS Code, Visual Studio 2022 CE, PyCharm CE, RStudio
- **Notebook UIs:** Jupyter Notebook, JupyterLab
- **ML Frameworks:** PyTorch, TensorFlow, scikit-learn, PySpark, Dask, Vowpal Wabbit
- **Environment Tools:** Docker, Docker Compose, Anaconda
- **Office Tools:** LibreOffice (Writer, Calc, Impress)
- **GPU Stack:** CUDA Toolkit, cuDNN, NVIDIA drivers
- **Supported Instances:** GPU-enabled EC2 families (g4dn, g5, p4d, p5)
## Requirements
This AMI requires a GPU-enabled EC2 instance to leverage the full CUDA and deep learning stack. Standard EC2 infrastructure costs apply separately from the AMI software charge.
## Ideal For
Organizations and professionals in regulated sectors - finance, healthcare, government, and research - who need a secure, auditable, GPU-enabled environment for working with sensitive data. Deploy a compliant data science workspace without weeks of manual hardening and configuration.
## Evaluate This AMI
To assess this AMI independently, download the CIS compliance mapping document and sample Amazon Inspector scan report from the Additional Resources section below. These materials allow your security team to review benchmark coverage and validation methodology without scheduling a call. For a guided pilot deployment or compliance walkthrough, contact Relevance Lab through the support channel listed on this page.
Highlights
Highlighted by the publisher on AWS Marketplace.
CIS Level 2 Hardened and Validated via Amazon Inspector: Delivers full CIS Level 2 compliance on Windows Server 2022 with a fully functional GPU data science stack. Amazon Inspector validation provides your security team with auditable compliance evidence deploy a compliant workspace for regulated workloads without weeks of manual hardening.
GPU Accelerated ML Stack Ready Out of the Box: Pre installed CUDA Toolkit, cuDNN, and NVIDIA drivers work within the hardened environment, eliminating the common problem of GPU drivers breaking after security lockdown. Includes PyTorch, TensorFlow, scikit-learn, PySpark, Dask, and Vowpal Wabbit tested on the secured platform supporting training and inference on g4dn, g5, and p family EC2 instances.
AWS RES Compatible with Complete Data Science Tooling: Fully integrates with AWS Research and Engineering Studio for streamlined deployment and user management. Includes JupyterLab, RStudio, VS Code, PyCharm, Visual Studio 2022, Docker, Anaconda, and LibreOffice all pre configured with Level 2 security best practices and accessible securely via Amazon NICE DCV.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Plans and pricing as listed
2 listed- Hrs
- Hrs
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.

