diff --git a/handlers/main.yml b/handlers/main.yml
index 57bb7a5..b5de160 100644
--- a/handlers/main.yml
+++ b/handlers/main.yml
@@ -49,3 +49,9 @@
   ansible.builtin.systemd:
     name: systemd-journald
     state: restarted
+
+- name: Reload systemd
+  ansible.builtin.systemd:
+    daemon_reload: yes
+  become: true
+
diff --git a/tasks/amazon_linux.yaml b/tasks/amazon_linux.yaml
index 78e6085..824a38c 100644
--- a/tasks/amazon_linux.yaml
+++ b/tasks/amazon_linux.yaml
@@ -1,4 +1,6 @@
 ---
+- name: Amazon Linux 2 | Configure secure boot setting 
+  include_tasks: configure_secure_boot_al2.yaml
 - name: Amazon Linux 2 | Configure Time Synchronization
   include_tasks: configure_time_synchronization_al2.yaml
 - name: Amazon Linux 2 | Configure Filesystem Partitions
diff --git a/tasks/configure_secure_boot_al2.yaml b/tasks/configure_secure_boot_al2.yaml
new file mode 100644
index 0000000..070af11
--- /dev/null
+++ b/tasks/configure_secure_boot_al2.yaml
@@ -0,0 +1,10 @@
+---
+- name: "Ensure authentication required for single user mode (rescue & emergency)"
+  ansible.builtin.lineinfile:
+    path: "/usr/lib/systemd/system/{{ item }}"
+    regexp: '^ExecStart='
+    line: 'ExecStart=-/bin/sh -c "/usr/sbin/sulogin; /usr/bin/systemctl --fail --no-block default"'
+    backup: yes
+  loop: "{{ rescue_emergency_units }}"
+  notify: Reload systemd
+
diff --git a/vars/main.yml b/vars/main.yml
index 6a6b7b7..5128341 100644
--- a/vars/main.yml
+++ b/vars/main.yml
@@ -89,6 +89,10 @@ os_services_name: ['avahi-daemon', 'slapd', 'named', 'cups', 'telnet', 'discard-
 minute_aide_cronjob: '0'
 hour_aide_cronjob: '5'
 
+#Configure SELinux
+rescue_emergency_units:
+  - rescue.service
+  - emergency.service
 # Configure Time Synchronization
 chrony_amazon_timesync_block: |
   # Amazon Linux 2 default Chrony configuration