Ignore specific rules

To configure CEM to ignore specific rules, use the ignore key.

Use a configuration that is similar to the following example: 
# control-repo/data/nodes/winserv2019.contoso.com.yaml
---
cem_windows::framework: 'cis'
cem_windows::config:
  profile: 'member_server'
  level: '1'
  ignore:
    - 'c18_9_97_1_1'
    - 'c18_9_97_1_2'
Restriction: The only key and the ignore key are mutually exclusive, with only taking precedence. If you specify both keys, CEM does not use the value of the ignore key and enforces only the rules specified with only.