The first-boot time is longer than a stock Windows AMI. Sysprep and the initial hardening pass add a noticeable delay before the instance is reachable, which is something to account for if you autoscale and need nodes ready quickly. The hardened defaults also occasionally trip up common installers and agents. A few of our deployment and monitoring tools assumed services or policies that the image had locked down, so we had to add exceptions. A short compatibility checklist of what the hardening changes from a default Windows install would have saved us that debugging. I would also like the option of a CIS Level 2 build for our more sensitive workloads since the image currently only ships a Level 1 baseline. Thanks.
