I use Ansible to do all of the CIS recommendations. Took about a day and following along with the CIS guide to do it.