Ansible can be used to harden the operating system once the VM is running. It is an automation tool that can configure systems, deploy software, and orchestrate more advanced IT tasks such as continuous deployments or zero downtime rolling updates.
Reference: Ansible and other configuration management tools are part of the cloud management strategies discussed in the CompTIA Cloud+ certification material.