# Cis AWS Euc 5.3

> Ensure maximum session duration is no longer than 10 hours

- Skill: `cyberstrikeus/cis-aws-euc-5-3` (Agent Skill)
- Install (CLI): `npx skillmds@latest add cyberstrikeus/cis-aws-euc-5-3`
- Raw SKILL.md: https://api.skillmd.com/api/skills/cyberstrikeus/cis-aws-euc-5-3/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: cyberstrikeus (https://skillmd.com/u/cyberstrikeus)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/cyberstrikeus/cis-aws-euc-5-3

---


# Ensure maximum session duration is no longer than 10 hours (Automated)

## Profile Applicability

- Level 1

## Description

When creating a fleet for AppStream 2.0 configure the Maximum session duration in minutes to be no greater than 600.

## Rationale

Having a session duration lasting longer than 10 hours should not be necessary and if running for any malicious reasons provides a greater time for usage than should be allowed.

## Impact

None - this is a security best practice.

## Audit Procedure

Perform the following steps to view the Fleet settings in AppStream.

### Using AWS Console

1. Log in to the AppStream 2.0 console at `https://console.aws.amazon.com/appstream2`
2. In the left pane click on **Fleets**
3. Select the link for the fleet name you wish to view
4. On the **Fleet configuration** section confirm that Maximum session duration is set to **600** minutes or less

If Maximum session duration is set to anything greater than 600 minutes refer to the remediation below.

### Using AWS CLI

Not applicable - must be audited via Console.

## Expected Result

Maximum session duration is set to 600 minutes (10 hours) or less.

## Remediation

### Using AWS Console

Perform the following steps to edit the Fleet settings in AppStream:

1. Log in to the AppStream 2.0 console at `https://console.aws.amazon.com/appstream2`
2. In the left pane click on **Fleets**
3. Select the link for the fleet name you wish to edit
4. Click **Actions**, **Stop**
5. Scroll to the **Fleet configuration** section and click **Edit**
6. Change the Maximum session duration is set to **600** minutes or less and click **Save Changes**
7. Click **Actions**, **Start**

### Using AWS CLI

Not applicable - must be configured via Console.

## Default Value

By default, AWS Appstream 2.0 maximum session time is 960 minutes.

## References

1. https://docs.aws.amazon.com/appstream2/latest/developerguide/set-up-stacks-fleets.html
2. https://us-east-1.console.aws.amazon.com/appstream2/home?region=us-east-1#/create-fleet

## CIS Controls

**v8:**

- 0.0 Explicitly Not Mapped

**v7:**

- 0.0 Explicitly Not Mapped

## Profile

Level 1