Bottlerocket compliance with IRS 1075

**What I'd like:**
We are using [Bottlerocket](https://aws.amazon.com/bottlerocket/) to run containers on EKS. We are in the process of implementing security controls to be compliant with IRS Publication 1075, that includes implementing [SCSEM](https://www.irs.gov/privacy-disclosure/computer-security-compliance-references-and-related-topics-2023) controls. We would like to know if Bottlerocket OS is compliant with this and that we can use it.

**Any alternatives you've considered:**