Ubuntu Pro FIPS is the first and only FIPS certified image for the public cloud. It includes NIST certified components, security patching for the widest collection of open source workloads, HIPAA and ISO compliance, live kernel patching, and a commitment from Canonical for 10-year maintenance.
Ubuntu Pro FIPS is the first and only FIPS certified image for the public cloud. Ubuntu Pro FIPS is the critical foundation for state agencies administering federal programs and private sector companies with government contracts. Ubuntu Pro FIPS is built upon the power of Ubuntu Pro's enhanced stability, compliance and security features and is maintained to provide your organization with the strongest FIPS foundation now and in the future.
Additional security patches beyond the basic maintenance that comes with Ubuntu ensure all Critical and High CVEs for 28,000 packages are addressed. Kernel livepatch applies security fixes to the live running kernel, ensuring maximum uptime and minimizing operational overhead. Ubuntu Pro FIPS rolls up all the security features Canonical customers enjoy, and enables them automatically with no up front contract required.
Ubuntu Pro FIPS includes Canonical's Ubuntu Advantage Essential offerings for both Infrastructure and Applications such as certification, compliance and hardening profiles including FIPS 140-2, Common Criteria EAL2, CIS and DISA STIG. Security patch coverage expands constantly based on customer priorities and usage patterns.
Ubuntu Pro FIPS is a separate build of Ubuntu certified by the National Institute of Standards and Technology (NIST) with all the additional security capabilities that Canonical provides to enterprise customers including those who operate in regulated environments such as FedRAMP, HIPAA, PCI.
Highlights
National Institute of Standards and Technology (NIST) certification for the Ubuntu kernel and several security components.
Canonical's Extended Security Maintenance covers thousands of the most widely deployed packages on Ubuntu. Additionally, kernel livepatch maximizes uptime while providing real-time defense against critical kernel exploits.
Ubuntu Pro FIPS is backed by a 10-year maintenance commitment from Canonical, including patches for high and critical CVEs for all supported components.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for each running instance, with no upfront commitment. The price you pay depends on the EC2 instance type you choose. Each dimension matches a specific instance type, grouped into families such as compute (c-series), general purpose (m-series and t-series), memory-optimized (r-series and x-series), storage (d-series and i-series), and accelerated computing (g-series, p-series, inf, trn). Larger sizes within a family carry higher hourly rates. The software charge is added on top of your underlying EC2 compute cost and scales with instance size.
Top-of-mind questions for buyers
What do I get with the hourly software charge for Ubuntu Pro FIPS 18.04 LTS?
You get an AWS-optimized image with FIPS 140 certified modules pre-enabled out of the box. It includes a FIPS-certified 4.15 kernel and expanded security maintenance through April 2028, plus security hardening tools and open source package coverage.
Am I charged the software fee when my instance is stopped?
The hourly software charge meters running time only. A fully stopped instance does not accrue the software charge. You may still pay underlying AWS storage fees for stopped instances, but those are separate from this listing's software charge.
Which instance type I pick affects my bill how, exactly?
Each dimension maps to one EC2 instance type, billed per hour. Larger sizes within a family carry higher hourly software rates. The software charge is added on top of your EC2 compute cost and scales with instance size, tracking the underlying compute.
ubuntu.com
Helpful?
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Automated version update for new release
Additional details
Usage instructions
For Ubuntu Cloud Guest it is suggested to manually configure your Security Group/Firewall settings. The 1-Click Security Group opens only port 22 so that you can access your instance via ssh using login 'ubuntu'. If you chose the 1-Click Security Group, you may change it later to enable applications using the AWS Console or API.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
NIST certified image with FIPS 140-2 compliance for Ubuntu kernel and security components
Extended Security Maintenance
Security patch coverage for 28,000 packages addressing all Critical and High CVEs with extended maintenance commitment
Live Kernel Patching
Kernel livepatch technology applies security fixes to running kernel without requiring system restart
Compliance Profiles
Includes hardening and compliance profiles for Common Criteria EAL2, CIS, DISA STIG, FedRAMP, HIPAA, and PCI standards
Long-term Support
10-year maintenance commitment from Canonical with guaranteed security patches for high and critical CVEs
Security Hardening Standard Compliance
Container image hardened according to CIS Benchmark Level 1 profile developed through consensus-based process and accepted by government, business, industry, and academia.
Regulatory Compliance Support
Supports compliance with PCI DSS, FedRAMP, DoD Cloud Computing SRG, FISMA, and select NIST publications.
Pre-configured Security Controls
Includes hardened account and local policies, firewall configuration, and computer-based and user-based administrative templates aligned with industry best practices.
Automated Compliance Verification
Includes CIS Configuration Assessment Tool (CIS-CAT) Pro HTML reports demonstrating conformance to CIS Ubuntu Linux 22.04 LTS Level 1 Benchmark before and after hardening.
Regular Security Updates
Container image receives monthly patches in alignment with software vendor updates to maintain alignment with latest security standards.
Security Hardening Standard
National Checklist Program (NCP) U.S. government security configuration standards applied to operating system and application settings
Vulnerability Mitigation
Low-level design architecture to minimize package vulnerabilities and provide protection against cyber-attacks
Cloud Environment Optimization
Optimized compute utilization with performance improvements approximately two times better compared to standard Linux operating systems
Compliance Support
Built-in security configurations designed to facilitate achievement of compliance certificates
Lightweight, Easy to Administer, and Packed with Open-Source Apps
Reviewed on Nov 03, 2026
Review provided by G2
What do you like best about the product?
Lightweight, with good graphics. It’s easy to administer, and there are lots and lots of open-source apps available.
What do you dislike about the product?
There isn’t much I dislike here. I would have liked it even more if the support cost were lower.
What problems is the product solving and how is that benefiting you?
A lot and lots: I have a very old, junk laptop where the current Windows versions aren’t supported, but a modified Ubuntu works smoothly on it, including the graphics.
Archana M.
Stable, Lightweight Ubuntu for Smooth Web Development and Security Testing
Reviewed on Oct 22, 2026
Review provided by G2
What do you like best about the product?
Ubuntu is the most stable OS among the Linux OSes I’ve used, and I really like its UI, stability, and overall performance. Ubuntu uses fewer resources like CPU and RAM than other os, and I can run all my software tools easily.
I installed Node.js, VS Code, Docker, and Postman, and my full web development setup runs smoothly—everything works without issues. Since it’s a Linux-based OS, I can also install penetration testing tools that are available in Kali Linux and test the security of the websites we develop using tools like Nmap and Wireshark. I use Ubuntu for both development and ethical hacking on the same OS, and because it consumes less memory, I can run multiple applications at once without any lag.
What do you dislike about the product?
Since this is a Linux-based OS, sometimes I need command-line skills for certain tasks, like installing software. Also, some hardware drivers and third-party software can require extra setup compared to other operating systems. Otherwise, everything is fine, and I love it.
What problems is the product solving and how is that benefiting you?
Actually, I have a low-end device setup, and when I run too much software at the same time, my system starts lagging. I needed an operating system that could run my web development tools smoothly without consuming too many system resources. I also wanted an environment where I could comfortably perform my development tasks.
Ubuntu solves this problem by providing a stable, resource-efficient environment where I can run tools like Node.js, VS Code, Docker, and Postman together. It helps me manage my development workflow more smoothly. Since Ubuntu is Linux-based, I can also install security testing tools such as Nmap and Wireshark to test the security of the websites we develop, which is very useful from a development point of view.
Overall, Ubuntu helps me combine web development and ethical hacking in a single operating system. Its stability, performance, and relatively low resource usage allow me to work more efficiently.
Johnny J.
Free, Secure, and Highly Customizable with Great Dev Tool Support
Reviewed on Oct 22, 2026
Review provided by G2
What do you like best about the product?
free, open-source, secure, and easy to customize and excellent support for software development tools such as Python, Node.js, Docker, and Git.
What do you dislike about the product?
Some software and hardware drivers are not as easy to install
What problems is the product solving and how is that benefiting you?
Ubuntu solves the problems of high software costs, system security, and limited customization.
Caiaphas C.
Cloud-Ready Linux with Fast Updates, Despite Snap Frustrations
Reviewed on Oct 21, 2026
Review provided by G2
What do you like best about the product?
I like that Ubuntu is free and open source, easy to provision, and has a massive package ecosystem. I appreciate its fast security updates and consistent first-class support across every major cloud provider. The huge community is a real bonus—whatever error I hit, someone has already solved it on a forum. Setting it up was honestly easy: the cloud images and cloud-init let me spin up a fully configured server in minutes without touching an installer.
What do you dislike about the product?
I find Snap slow to start, and it forces updates. I’d like to be able to fully disable it without breaking the system, make it opt-in, and have classic debs available for apps like Chromium. Non-LTS releases only get nine months of support. Hardware enablement kernels sometimes break on older machines; I’d like a long-term legacy hardware kernel branch, better testing on pre-2015 hardware, and a warning before an automatic kernel upgrade drops support for my hardware.
What problems is the product solving and how is that benefiting you?
Ubuntu solves my cost, licensing, deployment automation, package availability, security patching, and cloud-portability problems. It gives me a free, open-source Linux OS that’s easy to provision, with a massive package ecosystem, fast security updates, and consistent first-class support across major cloud providers.
Yassine S.
Reliable, Flexible, and Cost-Effective for Daily Operations
Reviewed on Oct 16, 2026
Review provided by G2
What do you like best about the product?
What I appreciate most about Ubuntu is the way it balances stability, simplicity, and flexibility. The interface is intuitive and easy to navigate, and day-to-day system administration feels straightforward thanks to strong package management and clear, well-maintained documentation.
It also integrates smoothly with cloud, virtualization, and automation tools, which makes deployments and ongoing maintenance easier. In my experience, performance is consistently reliable on both servers and workstations, with efficient resource usage and solid uptime.
Not having licensing costs delivers excellent ROI, and the large community plus extensive documentation make onboarding and troubleshooting much less painful. On top of that, Ubuntu provides strong support for AI workflows, containers, and modern development tools, which helps teams adopt newer technologies more quickly.
What do you dislike about the product?
What I dislike most about Ubuntu is that some updates can occasionally introduce compatibility issues, particularly in environments that depend on older applications or specialized hardware. These situations aren’t common, but when they do happen they often mean extra testing is needed before deployment.
The user interface is mostly intuitive, yet certain administrative tasks still rely heavily on the command line. That can be a hurdle for less experienced users. Support quality can also be inconsistent when you’re depending on community resources, and organizations that need guaranteed assistance may end up requiring a paid support subscription.
Lastly, although Ubuntu has strong support for AI, cloud, and development ecosystems, integrating some third-party enterprise software can still take additional configuration compared with commercial operating systems.
What problems is the product solving and how is that benefiting you?
Ubuntu meets our need for a stable, secure, and cost-effective operating system across both servers and workstations. It lets us run critical applications without licensing costs, while still providing a reliable, well-supported platform.
Its tight integration with virtualization, cloud services, containers, and automation tools makes infrastructure management simpler and helps us standardize deployments. As a result, we spend less time on administration and can deliver new services more quickly.
Ubuntu also delivers consistent performance, regular security updates, and extensive documentation, which helps minimize downtime and makes troubleshooting more straightforward. For our teams, that means higher productivity, lower operating costs, faster onboarding for new users, and a strong foundation for modern technologies like AI and cloud-native applications.